Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa
File:                     ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json)
Hash identifier:          J0RrN5TXFPy73B+g7S9wQmFr20heVDZHrOE6UPmH+b0=
Subject key identifier:   32:93:CA:19:52:A0:B6:6A:68:32:0F:64:00:E6:9D:B5:3A:2C:4E:2B
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584E1E444F1D04D99E639326B000
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     14977
IP address blocks:        137.88.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4f:1d:04:d9:9e:63:93:26:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=c5c5eb23-9d51-46ad-a891-b7b223ecb7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:d0:5f:03:bd:8c:93:cd:0e:1d:e4:e1:62:
                    0b:30:64:59:d4:ce:d3:29:5d:87:b9:f2:53:f8:27:
                    6c:da:29:8f:18:03:62:ab:35:c4:e2:14:ac:09:1e:
                    ae:80:0b:7b:9c:85:38:14:40:e9:ec:a2:99:3f:f8:
                    60:60:00:d3:c7:69:f0:11:50:f6:45:c3:7f:03:70:
                    92:f9:1f:49:5b:cf:82:92:b9:b4:0e:01:7c:f9:4b:
                    3d:b7:44:96:da:b6:e2:eb:fe:d2:ac:31:f8:87:c1:
                    d8:3f:72:ad:f2:e5:85:93:db:53:5b:d9:c4:cf:93:
                    93:a0:5d:23:81:a5:0f:90:13:12:4e:7d:de:91:74:
                    55:2c:aa:c9:76:1c:4c:7a:7a:cc:4d:14:52:ba:8c:
                    57:b7:85:15:f0:e8:7f:ab:fb:e6:2c:6c:86:a2:56:
                    5a:e6:b7:98:5f:ac:28:31:e0:04:5e:5a:e2:35:22:
                    7f:14:c8:cb:3f:38:6b:f4:c3:d7:1e:89:af:16:3d:
                    bb:9b:60:76:b9:ba:22:03:45:97:4d:02:c3:9b:14:
                    7d:be:9e:dd:25:5c:f0:a3:1b:a9:ec:ac:8a:46:50:
                    72:da:28:5f:31:4d:3e:48:26:31:00:70:02:f1:fc:
                    75:60:9d:67:c0:75:fd:27:a8:02:e6:33:49:d3:fc:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:CA:19:52:A0:B6:6A:68:32:0F:64:00:E6:9D:B5:3A:2C:4E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c2:5f:2b:a6:54:1c:5c:92:29:39:f7:f0:b4:a2:48:7f:c4:
         04:cf:23:eb:c1:b1:fb:64:a8:54:93:86:a7:2e:bc:46:6c:65:
         1e:87:9b:3a:79:b3:35:f9:fd:02:4e:a5:39:5e:9d:15:2c:0c:
         d4:63:2c:ab:23:31:c9:dd:53:53:c6:b6:4d:36:85:45:4b:27:
         0b:c4:1f:9c:63:32:18:07:35:4e:f3:49:9a:3a:06:7f:51:03:
         ff:27:ad:3a:a3:36:69:c4:f5:f4:b9:90:11:0a:78:03:f8:7f:
         f3:48:74:3f:96:1f:f9:62:a1:07:2a:92:d5:d2:9f:4f:70:9d:
         23:70:5f:70:ac:81:23:52:78:36:7c:fc:52:19:7b:d6:58:35:
         82:d1:33:2c:49:af:50:57:af:87:1f:cb:1d:3e:b0:7a:9b:6b:
         95:4f:92:a2:a0:e1:88:64:7d:61:34:0c:a5:27:dd:fa:a4:57:
         66:d9:59:6a:ba:83:bb:15:3d:ae:4d:e8:ff:89:44:d7:63:75:
         3f:ff:5a:b7:db:ac:a7:3f:8c:48:2b:1f:17:1c:8b:ab:10:ec:
         da:37:a2:52:f5:3b:83:da:2f:0f:19:01:2e:c8:ac:4d:ae:37:
         e4:9e:6b:59:cc:3f:05:fa:d6:24:c0:ed:12:86:19:30:cc:49:
         d3:ef:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:36 2026 by rpki-client