Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa
File:                     80d79225-d47a-33b5-b17d-0e051345c7d6.roa (raw, json)
Hash identifier:          jv6KnbhuUiV1D0Nx9JhmgQ5muL7ORhAMVICZ8c5ftXQ=
Subject key identifier:   85:B0:86:75:D2:FB:78:81:EA:08:A3:83:11:93:34:E9:A3:53:77:66
Certificate issuer:       /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e
Certificate serial:       010D0C9F4328584E0C1EDEAB0647D84A4CFA8B80
Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     62592
IP address blocks:        162.219.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:de:ab:06:47:d8:4a:4c:fa:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=981575a1-949a-4576-98da-4246a8a200f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:0a:08:cb:30:70:fd:b4:74:7a:36:97:1d:
                    05:d0:56:b4:78:f1:8b:ae:a6:ac:7e:85:73:7c:62:
                    05:0d:26:37:9b:f4:4e:06:6d:54:30:63:7a:f8:20:
                    e8:22:f9:89:1e:f3:ba:ee:dc:db:ca:ef:4f:e8:b2:
                    96:29:85:6f:36:4b:c4:67:b6:c2:73:7d:da:61:57:
                    8b:e1:41:07:ab:f5:de:f7:eb:a0:91:d1:51:9b:d1:
                    3d:6e:d9:47:46:ca:59:79:e2:65:a4:58:3b:fe:ba:
                    ac:f0:35:0e:0e:36:87:05:6b:78:37:6e:ac:2a:a8:
                    0a:b3:63:62:0e:85:18:a1:c9:da:29:ed:2a:dc:ec:
                    cb:24:da:b0:d9:dd:e5:2e:00:99:ef:30:26:98:05:
                    35:b7:49:59:56:03:87:0d:c5:4b:e1:fc:70:87:72:
                    7e:18:c9:84:f8:2c:75:35:4b:39:3d:0a:11:c4:9f:
                    a3:69:e1:8b:a8:d6:51:43:0b:ba:4b:99:fa:35:59:
                    93:5d:d7:18:fa:2d:02:60:c7:44:0a:e7:f7:c4:1d:
                    b9:ca:05:6e:94:1c:58:6d:d8:eb:f9:96:9f:03:13:
                    c5:d3:7b:96:5d:da:13:5d:55:f7:4b:43:ff:22:47:
                    8b:68:f6:b1:1e:de:a5:3f:b9:97:30:96:f8:eb:48:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:86:75:D2:FB:78:81:EA:08:A3:83:11:93:34:E9:A3:53:77:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl

            X509v3 Authority Key Identifier:
                keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:67:29:8c:85:f7:02:e7:f9:c9:a7:b2:d8:c6:1f:d5:dc:56:
         2d:94:73:5f:19:50:26:82:ea:3e:af:1a:dc:0a:3b:4a:c1:5a:
         32:8b:08:b4:98:95:05:91:65:38:75:73:52:78:7e:42:cd:04:
         65:59:a4:96:d4:74:d7:bd:6b:36:31:02:22:d1:9e:11:75:1f:
         2c:7f:5f:aa:d0:0b:f9:a5:a5:de:f6:0b:57:1a:d1:ac:09:98:
         2b:db:10:e2:86:ea:45:83:be:51:c1:f6:be:64:27:e7:4a:c2:
         f5:2b:da:88:a9:fa:51:9f:ca:e3:c2:c8:e4:25:91:9c:18:89:
         4b:8c:d7:30:6b:12:5d:ec:f5:c7:ac:55:67:c5:ed:1c:11:b3:
         70:78:d7:b3:15:13:b1:22:b6:23:a5:96:46:72:60:2c:b6:0e:
         30:22:88:1a:f7:5c:1a:66:f8:8a:44:8c:14:17:5d:fc:79:fb:
         6a:5b:ff:a9:2e:1d:f7:55:a3:62:c4:2c:a4:4d:67:8c:6a:b5:
         21:0c:ba:2d:be:53:03:ac:9d:19:98:0c:59:20:bf:de:c5:ee:
         2e:f5:7b:be:70:8f:ba:21:6c:2b:b9:d0:f3:13:61:a2:dd:11:
         3f:43:14:d3:21:ac:c5:f1:15:8b:9e:82:42:5f:99:38:36:d7:
         9c:a4:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:11 2026 by rpki-client