Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ab6281f8-174f-3211-8184-f05ea5a9f0cc.roa
File:                     ab6281f8-174f-3211-8184-f05ea5a9f0cc.roa (raw, json)
Hash identifier:          /Tk1nliBPb6Nom+ySXvGaI6bCW3Zwz7Ugu6nKGlDdPM=
Subject key identifier:   AD:F0:F0:51:37:5F:F2:C6:54:FC:87:E3:97:AA:3C:7E:D7:BF:A4:FF
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F2F8735896F572293BD513CA0
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ab6281f8-174f-3211-8184-f05ea5a9f0cc.roa
Signing time:             Tue 15 Sep 2026 18:10:52 +0000
ROA not before:           Tue 15 Sep 2026 18:10:52 +0000
ROA not after:            Mon 14 Dec 2026 19:10:52 +0000
asID:                     54641
IP address blocks:        213.165.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:87:35:89:6f:57:22:93:bd:51:3c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 15 18:10:52 2026 GMT
            Not After : Dec 14 19:10:52 2026 GMT
        Subject: CN=5fbc73b5-317b-45c9-a3e4-cb27ea987fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:02:49:7a:59:71:61:bd:15:92:f4:00:9d:
                    f4:91:f0:9e:17:eb:37:94:a4:e9:24:aa:c1:c0:5f:
                    e2:b7:be:52:34:56:51:82:16:c5:ec:f1:e8:ea:b2:
                    0f:66:6a:24:1f:7f:e2:cb:07:3c:c2:77:4a:fc:1c:
                    ae:3d:04:5e:f5:c3:bb:ec:65:4d:d4:9c:40:dd:1b:
                    4d:92:b1:97:e2:e0:7c:98:0f:cb:72:90:fa:0f:57:
                    27:8a:86:ca:3d:67:56:7c:e2:5f:be:9a:a8:9a:54:
                    96:79:08:23:16:80:5f:6a:97:1c:8e:9c:d7:91:ab:
                    b4:12:d2:42:c3:f1:45:15:49:2f:0e:b6:5c:47:92:
                    e9:f8:25:25:0f:c2:e7:a3:4e:c2:c4:14:93:ff:51:
                    80:3d:35:c4:14:77:71:f6:01:71:64:4f:11:85:4d:
                    b0:20:ea:2b:18:5d:cd:33:6b:5d:9e:77:06:ff:fe:
                    04:ec:47:5b:e1:d1:7a:6e:ea:c7:e3:9c:24:08:d4:
                    84:45:c3:9b:d5:59:72:a5:ab:5f:37:d0:5f:8b:ee:
                    8e:e8:e3:5a:79:93:50:93:28:b1:30:84:97:c1:c6:
                    34:fe:8e:c0:fc:aa:3b:96:ae:8b:6e:f1:36:32:56:
                    2e:d2:b4:08:53:55:09:1b:b6:8f:f8:e6:a0:4a:c5:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F0:F0:51:37:5F:F2:C6:54:FC:87:E3:97:AA:3C:7E:D7:BF:A4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ab6281f8-174f-3211-8184-f05ea5a9f0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.165.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:20:d3:a9:7e:11:95:b4:48:ac:9e:47:24:5b:1e:55:ef:
         31:85:a1:49:75:db:e8:64:d3:fc:6c:53:4a:43:02:31:5f:dc:
         5d:91:a0:f0:df:33:ee:3a:3b:be:20:d5:21:c0:a1:9a:ab:04:
         5c:95:fb:dc:85:44:99:bf:f5:dd:bd:78:58:a7:ed:df:1b:96:
         ed:53:57:d5:43:58:d1:3d:c3:9c:77:6c:97:7d:83:ae:d1:0b:
         95:cf:62:e0:fa:6e:42:03:72:c0:b2:89:44:b0:42:6e:da:95:
         87:d1:fd:8c:87:97:f4:74:04:65:76:d1:74:61:9f:cf:77:b3:
         60:30:c0:17:12:8e:0d:83:18:ca:33:a7:68:25:52:c3:40:9e:
         3b:98:9d:85:a9:c9:26:dc:fb:f0:6e:0e:f5:5a:79:35:a2:5b:
         73:63:a6:8a:96:e8:4b:70:d0:e9:98:c6:fa:7c:e1:84:3e:16:
         be:91:df:33:38:38:82:cd:2c:08:2a:b9:15:20:d9:ef:1b:cf:
         c3:9a:9b:62:9d:82:d1:a9:c1:01:84:0a:e9:59:94:98:70:98:
         16:d6:5e:75:1a:c2:65:52:55:83:06:ca:63:cb:c7:4a:cb:7f:
         b5:2c:7c:de:4f:96:a6:9a:f3:db:39:32:aa:61:05:c2:ab:c2:
         d9:2d:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:53:52 2026 by rpki-client