Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa
File:                     22bea922-373a-3050-a929-ae142e552b24.roa (raw, json)
Hash identifier:          wQ7Utj+ahQCU7G0KwjFvR6vL7ZKzCXCrGW2P11x8G/M=
Subject key identifier:   6B:F7:66:CB:E2:D1:C4:41:8D:60:C3:BF:24:49:D6:CE:07:31:63:BB
Certificate issuer:       /CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
Certificate serial:       010D0C9F4328584EFCACC487A901F2749A2E8280
Authority key identifier: 05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        165.140.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c4:87:a9:01:f2:74:9a:2e:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=d559fb7a-4acd-4d66-9d5d-c7cdf0ec83c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:68:02:37:b5:b1:87:3c:1e:eb:01:f4:80:
                    95:e9:cb:96:4d:f7:c9:03:78:44:31:f1:93:b3:46:
                    59:a2:2c:c1:40:a9:cb:83:23:8a:a9:65:d9:2f:aa:
                    39:72:1d:bf:85:70:38:49:ec:75:04:ef:11:6c:64:
                    dd:a2:1a:9b:fa:35:d5:d8:56:d4:4f:9e:61:da:e6:
                    d4:bb:f1:1a:2f:f3:cf:2c:8d:b7:cc:55:51:49:1e:
                    69:9b:d3:54:01:36:b3:c3:08:84:4d:25:cc:7f:da:
                    c4:a3:59:a3:5e:69:ef:43:5b:f6:41:e3:42:1f:30:
                    be:dc:be:9d:58:cb:96:11:6a:fa:fd:72:f2:33:87:
                    48:a5:5c:95:9f:c2:b5:e4:b4:3d:4a:e4:37:1f:e5:
                    83:fe:83:ce:62:9c:9c:cb:7c:e2:e1:f6:f2:6e:a2:
                    29:75:86:46:7f:11:13:cf:d4:ce:fe:a2:85:55:d3:
                    7a:f0:c6:e0:9c:40:b9:ec:e5:5b:63:88:f2:45:fc:
                    7a:78:fe:7f:d2:f0:bd:ad:af:39:b8:9b:29:33:28:
                    05:35:ac:94:ec:9a:b4:cc:56:f6:bd:26:a2:04:27:
                    0f:fe:27:29:ee:31:73:46:b0:93:f9:25:01:bc:83:
                    85:70:0f:0a:e4:6c:b6:e1:73:a8:1c:b0:3a:9d:3b:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F7:66:CB:E2:D1:C4:41:8D:60:C3:BF:24:49:D6:CE:07:31:63:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl

            X509v3 Authority Key Identifier:
                keyid:05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:03:fc:84:cf:7a:74:02:64:2e:98:7a:0b:2d:06:c3:02:
         d8:70:ac:02:7c:4f:15:5b:8b:2f:46:a3:d3:a9:06:a3:48:47:
         2b:1e:63:0d:3f:02:4a:61:e1:1a:ad:1a:44:57:ab:75:b3:5a:
         ba:95:63:1d:7e:4f:83:d9:6b:84:ac:95:10:13:a4:22:fc:78:
         0d:a3:9a:29:86:91:98:90:ca:43:94:34:cb:e8:ce:92:72:78:
         ec:8d:ef:0b:b3:c7:41:b2:6d:2b:0d:c1:7f:20:60:15:52:0d:
         1c:54:81:c9:ff:e9:a8:ac:92:75:2f:8a:dc:e8:05:8f:52:61:
         4b:1f:06:05:4e:12:3a:74:46:37:c2:54:db:d7:a9:30:bc:de:
         9e:0b:14:fb:2e:aa:3a:24:8c:52:42:df:46:79:bf:24:fd:a5:
         83:fc:8b:07:fb:dd:73:94:7f:82:04:61:cb:50:75:b5:09:0b:
         94:37:04:52:b5:a9:2c:42:20:62:b1:ea:c8:83:64:e8:7e:ce:
         82:94:38:73:9d:85:72:db:4d:6c:77:1a:7f:cb:d0:a8:e5:95:
         5e:4e:66:40:37:31:5a:47:56:86:dc:e0:a3:44:83:52:a2:e3:
         89:95:cf:04:82:a5:18:e0:6e:ed:91:16:6a:b3:d5:cc:44:e2:
         83:aa:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:42:08 2026 by rpki-client