Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa
File:                     37bf2a82-973c-3206-b667-141f274e217b.roa (raw, json)
Hash identifier:          OxCSEatnOIjLsf9Mxsotd3etMJipVpODS1g1WXATvg4=
Subject key identifier:   DF:D2:59:20:A4:C0:CF:67:57:55:C8:FF:3B:80:31:44:6D:5D:2B:1A
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584ED9C75244CF56A87652E24900
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16867
IP address blocks:        216.82.233.0/24 maxlen: 24
                          216.82.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:52:44:cf:56:a8:76:52:e2:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=8a37f09c-9c54-43d9-b6c5-7a0ca268805e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:24:3c:e5:fb:62:f7:df:f0:cb:ff:db:54:
                    69:33:92:20:b6:7a:e7:69:e8:f2:11:b7:8c:df:20:
                    ff:12:2c:87:38:80:a1:8b:13:bc:36:ba:96:f0:4e:
                    61:32:2e:60:e1:39:bd:db:37:1f:03:44:ad:ea:b6:
                    0c:5d:ca:cc:97:43:33:04:6a:af:d8:03:ce:2e:b7:
                    18:0f:26:b4:37:f1:19:ac:51:3f:57:30:5a:d7:f7:
                    50:14:44:81:26:69:9c:75:84:da:34:b7:dc:cc:42:
                    98:8d:97:22:81:9d:3c:8d:bb:9c:3c:ad:fc:fd:c0:
                    74:43:f4:34:13:1a:58:d8:f3:3b:83:93:a7:1b:37:
                    d3:8a:bf:14:cb:26:b3:92:52:d4:1d:4b:a8:ae:90:
                    e8:25:c7:8a:e1:27:38:d0:c2:06:ee:80:68:b0:ae:
                    d1:d3:df:02:91:0f:13:e1:fb:89:73:3a:77:01:c3:
                    32:54:ac:8b:ff:af:03:5d:04:67:64:ea:8f:69:ed:
                    bd:8c:a9:4f:37:b5:79:11:74:79:08:d5:2d:10:54:
                    39:ff:f6:88:df:13:14:71:88:aa:0f:e9:f7:0e:6c:
                    3e:85:49:08:45:df:92:8b:09:7f:5b:05:67:26:95:
                    41:ea:02:29:de:b2:d3:7d:64:31:fc:6b:55:a6:68:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D2:59:20:A4:C0:CF:67:57:55:C8:FF:3B:80:31:44:6D:5D:2B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.82.233.0-216.82.235.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:06:48:59:a2:56:10:51:cb:83:cd:46:fe:75:4b:3a:98:35:
         51:42:55:8d:a0:d4:3a:4e:76:01:6c:d3:1d:45:6f:2d:14:82:
         7f:0f:a9:fc:02:47:ab:c7:73:bc:44:29:6f:cc:e9:a8:98:19:
         b7:d1:d4:b4:57:60:e2:f4:22:b8:9d:fa:cf:dc:8c:76:b8:7e:
         13:64:f9:71:fe:c9:19:1d:86:24:c6:94:1d:ee:9c:d5:98:5d:
         d3:b5:0e:fb:ef:5c:3d:fd:c3:d0:d4:24:12:6e:58:c7:47:f7:
         99:69:6c:45:26:41:5d:2f:19:33:46:fa:73:cd:38:22:9d:71:
         8d:94:e1:59:95:1f:79:b7:b9:0e:c0:6b:3d:41:ed:b8:ae:b5:
         07:df:4e:34:36:b0:ad:3a:4a:c6:08:f7:c8:79:cc:81:ef:26:
         24:f1:55:34:45:87:5e:b0:56:84:ac:a3:9f:c3:67:77:1c:d6:
         fc:19:40:55:6a:99:bb:47:65:61:3b:c2:a1:56:2c:e6:dd:9f:
         82:91:52:9a:de:ca:4c:91:17:60:a9:37:a0:c4:46:8a:15:3c:
         44:41:4a:85:78:aa:b7:be:13:cc:89:b6:06:73:01:51:ef:27:
         c3:1c:88:9b:33:85:d3:9f:11:b2:59:d2:cb:c1:54:1a:aa:ef:
         8f:47:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:10:40 2026 by rpki-client