Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/3a8d7047-06e1-3f48-baff-88605b7babbd.roa
File:                     3a8d7047-06e1-3f48-baff-88605b7babbd.roa (raw, json)
Hash identifier:          fHxRXwKvmZFBKiRphJ2U76QFJfptyzT9NWOZv0tZ9MM=
Subject key identifier:   CF:84:4E:CF:12:4F:76:C7:9E:A2:8B:25:6A:93:5D:36:0B:2C:02:6E
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584E0C1EECEF2A989E3834780100
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/3a8d7047-06e1-3f48-baff-88605b7babbd.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     27395
IP address blocks:        162.248.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:ec:ef:2a:98:9e:38:34:78:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=8dbe1966-7464-43f8-b7c1-1a448d08e362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:40:a0:3d:7f:c7:0d:d6:cd:07:eb:61:08:
                    18:24:95:12:94:eb:c7:3b:87:0c:db:fa:3f:35:f5:
                    06:0a:7c:87:dd:a6:55:79:7e:98:38:ac:7f:d9:b2:
                    47:4f:ea:43:93:85:5f:63:91:6f:91:63:a3:af:51:
                    97:43:bb:73:d7:a9:0b:54:d1:41:3d:47:54:09:46:
                    48:2e:e5:06:a8:41:b8:af:7d:20:a7:5e:b4:3b:82:
                    08:16:bf:0f:a3:fb:11:d9:bb:42:f5:1d:48:8e:3f:
                    bf:3f:2b:84:48:7e:90:b0:a6:d1:44:aa:34:f0:60:
                    74:83:3e:87:a4:32:8b:9d:39:00:10:47:db:ac:1d:
                    20:47:a5:b6:92:f0:4a:70:49:cd:87:04:24:47:0e:
                    0a:f4:e1:e7:8a:4f:2d:b5:2d:8d:13:9e:0c:b1:64:
                    cf:69:48:9d:da:43:45:6d:46:94:86:c1:ea:ce:ea:
                    1c:dc:0b:9e:d5:95:25:32:f8:88:9e:d6:5c:09:98:
                    5a:d0:38:dd:5d:84:6f:9a:09:02:6c:b3:07:26:3f:
                    bc:7d:f1:34:96:33:18:0e:e9:1f:45:77:8c:fb:c9:
                    21:00:64:f7:9e:3c:85:33:fb:18:4c:81:f9:69:f5:
                    f5:6a:c8:5f:0f:95:72:88:f5:1e:28:0d:b6:4c:b7:
                    c6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:4E:CF:12:4F:76:C7:9E:A2:8B:25:6A:93:5D:36:0B:2C:02:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/3a8d7047-06e1-3f48-baff-88605b7babbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:c2:4b:72:11:0e:0e:43:09:24:68:3b:87:a8:6f:66:c5:
         f0:40:16:76:e9:b8:13:36:f3:25:f8:13:21:50:1f:e5:7a:c1:
         53:05:d5:32:16:eb:b5:2e:ee:90:bd:a6:d8:22:b3:2d:a9:0b:
         fc:2e:60:83:1c:2e:ed:97:be:e9:38:34:6b:bc:e7:f7:0c:83:
         c4:15:29:71:77:4f:07:49:7b:cf:62:c5:f4:ce:ef:ce:e9:9e:
         28:e7:93:72:23:ae:61:b7:dd:a2:9a:8a:ae:a8:46:c2:c6:9c:
         99:f4:43:bb:27:92:99:62:d0:bd:b3:de:aa:ef:f1:6b:88:6a:
         8f:fc:52:a1:93:72:ed:28:b6:ad:71:11:56:8b:57:8c:42:53:
         3d:a8:56:20:72:95:da:30:30:e4:2d:0a:59:4e:b0:5e:b4:7c:
         8c:3a:0b:06:78:24:ca:03:c3:e8:77:03:d3:82:3d:13:6c:38:
         ff:96:57:e7:c2:c6:d9:1c:c1:a5:d4:97:89:25:10:27:e2:75:
         60:05:b5:30:6a:12:2b:7a:74:aa:23:07:fb:69:67:a8:cb:8a:
         49:1c:d2:d5:25:bd:90:6d:e2:12:2c:67:ab:71:db:0e:2d:a4:
         fb:d6:b9:44:88:b5:51:bc:cd:60:b9:a3:a0:22:c6:79:c1:f1:
         82:c1:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:30 2026 by rpki-client