Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2567d058-a3e3-31c3-9cf1-8d3aee0b092d.roa
File:                     2567d058-a3e3-31c3-9cf1-8d3aee0b092d.roa (raw, json)
Hash identifier:          8rbRKlR6u3bgJUGBVz7UEbK+GR/fDpte41YmABt34T4=
Subject key identifier:   FF:55:D9:41:66:EB:87:28:0C:43:9B:11:C0:35:51:B2:50:99:8A:48
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584F173236C4F7603855C87AF200
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2567d058-a3e3-31c3-9cf1-8d3aee0b092d.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     62523
IP address blocks:        216.125.236.0/24 maxlen: 24
                          216.125.237.0/24 maxlen: 24
                          216.125.238.0/24 maxlen: 24
                          216.125.239.0/24 maxlen: 24
                          216.125.243.0/24 maxlen: 24
                          216.125.244.0/23 maxlen: 23
                          216.125.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:36:c4:f7:60:38:55:c8:7a:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=55059ae3-ad81-4721-9101-1a3dec8916dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:b4:ef:d0:53:b1:6d:37:ad:29:0a:40:71:
                    99:38:ee:10:d9:cb:97:5d:c3:18:ca:8b:b2:d9:b1:
                    39:5e:bc:cd:65:df:a8:ef:77:59:53:54:16:d6:b0:
                    eb:e3:43:51:81:ff:b4:be:95:e7:33:1f:d3:b3:df:
                    da:72:09:67:c4:52:c1:cc:0b:63:d7:d0:ea:2a:60:
                    5c:91:35:66:1a:a0:a4:b3:04:5e:be:81:33:0f:23:
                    37:ba:97:41:af:d4:51:ba:c3:57:38:d1:14:d1:af:
                    47:cd:f6:ac:c0:8a:60:d2:6c:24:f2:b6:5b:72:1c:
                    73:60:4b:c0:2d:c3:7d:23:9f:2b:86:32:db:c5:0a:
                    d3:71:04:96:30:c2:40:fb:24:c0:35:94:d7:74:40:
                    6e:89:8e:e4:77:28:21:df:9f:c6:3a:58:95:4d:26:
                    07:f1:4f:5a:98:f4:d6:92:36:f8:e8:05:10:96:52:
                    30:b3:3e:b5:52:02:de:ff:ec:1d:07:ee:b8:0f:e1:
                    13:7b:97:92:d6:d0:9c:92:48:d4:89:bb:8f:b6:ab:
                    63:92:62:60:c3:0f:8f:45:26:ae:92:c2:99:08:a9:
                    b4:04:87:4f:58:8e:f7:e6:23:32:c6:19:51:83:d0:
                    9b:4c:09:d5:69:ce:44:87:2d:c0:ab:a6:bc:f8:52:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:D9:41:66:EB:87:28:0C:43:9B:11:C0:35:51:B2:50:99:8A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2567d058-a3e3-31c3-9cf1-8d3aee0b092d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.125.236.0/22
                  216.125.243.0-216.125.246.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:d6:87:7e:5d:c6:ba:7b:85:e6:35:bf:c9:23:4c:56:a8:
         af:a1:6e:18:c4:88:c1:3c:c1:4e:ce:76:ad:6a:86:bf:09:d5:
         ff:32:2b:b7:fe:59:b5:d8:46:1b:ad:65:c9:33:34:0f:f1:27:
         b3:2c:38:f9:ca:37:dc:e7:26:9a:3a:7d:ec:04:f0:3e:66:3b:
         0f:3c:cf:84:e9:31:19:83:f1:4d:a2:95:db:68:c8:45:12:57:
         74:66:bc:4d:57:29:a0:46:aa:a3:2c:3f:90:8b:b1:51:a3:a0:
         cf:08:17:a7:58:c2:bf:d5:af:7e:9f:6e:e7:04:31:81:01:7c:
         c5:94:75:a5:77:61:90:fb:5f:4f:c5:b2:3d:d4:3b:16:fd:bb:
         8b:64:89:3b:d3:7e:d4:80:cf:b9:0c:18:19:ce:8d:26:2d:a2:
         e0:e3:71:51:a0:83:87:27:98:b4:60:b3:d3:f0:c4:ce:22:73:
         fb:39:c6:7f:89:13:68:bc:6c:ce:84:1e:20:b0:6d:fd:4a:20:
         34:51:a0:5a:fb:56:47:21:a3:58:23:f7:9f:9e:7c:28:d7:59:
         f9:80:6c:d6:72:01:95:c2:e6:14:e5:fd:5e:ae:6c:de:a1:48:
         74:ef:6c:49:37:c5:b3:df:95:58:f0:c0:e8:7a:6d:39:a6:97:
         59:18:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:10:22 2026 by rpki-client