Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
File:                     88e68d52-7beb-3da2-9dcf-f259957a2388.roa (raw, json)
Hash identifier:          iAYoZf7yYB2wWtj41R/ALENAJCTa5wJvUKmRxjRy2pw=
Subject key identifier:   CB:6A:B1:F5:0A:BE:B3:02:45:51:EC:48:1F:CA:FE:DE:A8:F8:CD:32
Certificate issuer:       /CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
Certificate serial:       010D0C9F4328584E1FA9A3584B358A254F868080
Authority key identifier: E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     26292
IP address blocks:        45.73.128.0/20 maxlen: 24
                          64.30.64.0/19 maxlen: 24
                          199.180.212.0/22 maxlen: 24
                          216.49.144.0/20 maxlen: 24
                          216.195.0.0/19 maxlen: 24
                          2604:8100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a3:58:4b:35:8a:25:4f:86:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=a80f112c-c41b-4ccf-b3d1-9c33f0afcf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:20:da:30:ef:df:b4:92:ea:5a:a4:bd:c1:
                    b2:9d:68:ef:19:7f:79:15:52:4b:c6:a5:b1:00:b6:
                    eb:87:12:a8:ed:c8:11:7b:32:31:93:1a:bc:4f:3c:
                    d6:14:50:b7:80:1b:d9:ba:3e:90:d5:30:0d:fb:69:
                    43:3f:62:8c:02:88:10:e7:14:0c:e9:ec:73:2b:bf:
                    00:61:cd:0e:f2:0b:98:a6:ad:2f:80:4d:20:74:8e:
                    fb:bb:b3:aa:de:8b:f0:43:0e:74:3f:df:c2:10:3e:
                    60:4a:22:50:96:16:2c:7f:2e:d3:49:46:0f:19:5d:
                    ff:05:77:6e:99:7c:74:53:45:1f:b8:ef:d6:b5:43:
                    a3:f4:02:cd:29:17:e5:2c:d3:9a:98:34:e2:e6:94:
                    f9:aa:1e:1e:37:0c:13:76:28:22:9c:56:ff:63:e1:
                    a4:be:36:e6:09:47:ae:9d:b8:71:df:ac:d1:b5:7a:
                    59:1c:f4:e5:37:a5:07:ee:f5:2b:22:34:df:cf:58:
                    f5:b0:e5:3b:30:2d:bc:d4:b5:e6:90:ba:03:8f:f4:
                    99:b6:18:13:b3:f8:7c:d8:c2:cf:1c:2e:2b:be:56:
                    13:52:26:e5:32:65:6f:0d:86:31:2a:31:99:55:24:
                    72:84:2d:b1:dd:25:52:1b:b3:9b:da:ea:f5:21:ac:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6A:B1:F5:0A:BE:B3:02:45:51:EC:48:1F:CA:FE:DE:A8:F8:CD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl

            X509v3 Authority Key Identifier:
                keyid:E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.128.0/20
                  64.30.64.0/19
                  199.180.212.0/22
                  216.49.144.0/20
                  216.195.0.0/19
                IPv6:
                  2604:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:5b:49:39:ee:2d:f9:c2:31:ee:86:3e:82:5a:9a:de:4a:
         b7:5a:60:b9:99:51:67:d9:03:74:b0:e5:52:65:f8:47:3b:89:
         11:2e:d5:ca:21:af:92:d0:b4:3f:29:54:62:4c:1d:69:95:25:
         5e:09:f4:74:51:49:d4:44:f2:05:10:12:8b:c5:4a:8b:b7:7e:
         f6:2b:ed:f4:47:33:de:59:b3:80:37:6e:5f:17:9c:1f:63:e0:
         e4:72:bf:cb:8c:e3:11:0e:c8:00:ce:9f:d4:ab:10:e4:87:8f:
         4e:ba:6a:73:7b:93:a4:c6:a7:ec:57:cc:d3:d7:ca:f0:dd:df:
         59:6e:71:04:14:77:21:f2:cc:9a:9f:7d:d4:79:e9:bd:9d:b4:
         44:b2:be:c7:ac:f7:8d:c0:e2:3d:79:51:b1:db:d9:a1:2b:0a:
         e4:3d:66:db:04:0c:d5:6d:99:b2:c6:fb:dd:ec:01:cc:32:26:
         26:bd:79:f2:4a:ea:92:31:1a:a3:d4:be:86:2d:9a:07:0b:41:
         66:a6:32:82:02:44:b9:80:92:d0:37:1c:97:57:f8:69:c3:c7:
         3c:3d:03:c4:00:1d:ee:5f:02:99:94:81:58:8e:f6:45:40:d1:
         2b:94:1e:fd:14:66:16:99:43:eb:ef:6c:f2:27:28:16:75:0e:
         bb:53:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:04 2026 by rpki-client