Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa
File:                     e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa (raw, json)
Hash identifier:          ra55A52Ev88YTW0O5qBA1MztLut9WVKxKBvRZsXE9yY=
Subject key identifier:   AF:91:E9:3D:B1:A4:69:8D:A4:B2:91:A4:FA:4B:CB:E9:D5:A8:06:A3
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584E1E449F2C3D15D50058055100
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     21928
IP address blocks:        172.56.0.0/16 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9f:2c:3d:15:d5:00:58:05:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=de8edf7a-5210-4f7c-889f-f171eb176a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:1b:f5:e6:25:17:96:6d:bb:4f:74:f3:19:
                    34:bb:d8:8c:6f:5b:b2:8b:68:f3:ba:d2:72:f1:01:
                    d0:15:1e:f1:57:50:56:b6:c6:83:99:2d:4e:f2:65:
                    44:a0:5d:ab:99:56:c1:cd:f1:a8:d9:18:68:e7:34:
                    16:33:4d:96:a9:d6:7d:b2:e1:54:01:06:c6:5f:10:
                    aa:00:3a:d7:ac:d2:b3:b4:e9:ce:2c:ee:29:34:33:
                    60:61:3e:2a:3b:78:02:e0:6f:4a:04:6e:1e:b2:93:
                    f5:9e:08:c4:63:47:52:d3:11:6e:54:4d:4c:b4:a1:
                    4f:a7:38:2b:4f:a5:5a:93:ee:9e:49:a4:33:0d:13:
                    8e:19:15:1d:8d:fa:68:ad:00:4c:9b:ba:95:dc:6a:
                    96:f6:7d:7e:34:d0:a4:51:f8:ff:b9:7b:c5:d9:2a:
                    ce:66:58:88:3c:bb:99:a6:bc:2e:83:fb:3e:12:a4:
                    fe:db:d9:99:37:5e:30:25:43:50:41:33:17:95:c1:
                    40:28:5d:96:42:03:11:f6:51:54:f9:bb:ac:43:e2:
                    42:6d:87:e4:d8:fd:9b:09:1e:6e:ef:79:e6:db:4d:
                    3b:bc:7b:a0:50:49:72:42:e5:86:75:28:b2:83:8e:
                    1c:42:72:bb:a8:32:cb:35:0c:17:09:70:6f:44:d8:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:E9:3D:B1:A4:69:8D:A4:B2:91:A4:FA:4B:CB:E9:D5:A8:06:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:a0:7d:02:9d:6b:84:4b:3e:96:f1:f1:01:52:d8:3d:90:
         f5:23:e4:88:03:c1:5d:58:df:c5:81:ec:18:0d:cf:69:70:73:
         5f:7f:62:b3:91:35:a8:65:09:77:de:9e:6c:a1:fc:5c:e1:db:
         be:b0:6e:52:62:73:30:51:b1:3d:33:c6:28:57:d8:a2:10:f2:
         a2:2e:29:ff:eb:98:8b:1d:7b:b2:4b:65:64:15:17:ec:75:d0:
         8e:da:14:1a:71:82:b4:36:26:7f:b2:77:da:af:d2:c3:af:9d:
         b4:f2:c2:e2:f0:47:4b:b9:b1:37:d8:ad:c9:e7:bb:17:39:ee:
         8b:71:31:09:8d:65:3c:1f:aa:be:0f:bd:71:2c:89:dd:a5:e8:
         9e:e2:ec:f0:3d:6d:32:7b:27:4a:ba:04:40:f4:e6:bc:3e:08:
         6b:b2:1c:de:47:8d:f5:09:fb:16:69:ea:8f:dc:28:47:71:1d:
         d2:97:e4:d1:9a:bb:70:44:34:37:01:84:ee:99:d3:bb:dc:58:
         ec:bb:8b:b3:f9:b0:cb:4f:12:48:61:62:08:52:ec:76:21:fd:
         25:d3:30:f4:60:0a:77:e2:a3:28:00:c5:45:a0:c2:78:0a:19:
         a8:48:c6:ae:8a:1b:c6:09:20:16:cd:ff:46:f3:e1:40:1c:23:
         e4:e9:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:42 2026 by rpki-client