Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08e80737-cfaa-3267-b35d-77cf89c44820.roa
File:                     08e80737-cfaa-3267-b35d-77cf89c44820.roa (raw, json)
Hash identifier:          KISyFfRdr00hUl1pTbXQfzX89qW3OSuP8ajVzB/4gBg=
Subject key identifier:   A5:02:58:17:02:3A:E9:91:BA:A0:B9:8D:CE:44:4C:9B:6C:03:B8:EF
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DF4DB6158B925136181BAB180
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08e80737-cfaa-3267-b35d-77cf89c44820.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     19886
IP address blocks:        171.162.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:61:58:b9:25:13:61:81:ba:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=2689b529-a145-4055-8474-4edb18b0d31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:14:3e:36:76:06:a3:bd:d0:65:df:41:2a:
                    4f:68:bb:fa:a9:6a:c3:fa:e2:7e:f3:f4:9c:84:b6:
                    aa:83:d8:4e:93:e0:fa:8a:e3:b5:61:42:b5:b9:db:
                    c5:d8:6e:93:be:c5:e0:e7:87:7f:f8:91:0c:73:19:
                    3a:ca:83:6c:63:45:1f:10:37:ae:ef:e3:e3:50:08:
                    7b:6a:ae:d4:a0:fb:1f:0a:4d:1b:ef:5e:da:c0:ab:
                    c5:3a:4a:ac:62:06:cf:e8:6d:50:17:bb:6b:60:6c:
                    89:ef:11:19:ab:23:3f:bc:b4:59:92:2c:88:d2:f0:
                    31:ac:58:f1:69:b0:5f:cd:97:b1:40:16:75:b9:c8:
                    43:56:53:e8:2a:54:0c:a6:19:1e:71:33:79:90:19:
                    07:2f:41:e3:84:64:f2:32:0c:bb:b5:a8:5d:c4:da:
                    4f:a0:4f:03:e7:03:10:07:f4:cf:73:3a:67:02:66:
                    40:9a:a9:4d:b1:39:db:25:7c:ac:aa:46:19:53:93:
                    37:a9:40:a0:f3:5a:ef:3e:4c:04:2e:28:bd:88:00:
                    cf:09:cc:d8:3e:2f:4b:ea:b4:72:18:11:ba:80:c8:
                    50:cb:65:ff:37:0f:22:54:1f:05:d7:14:96:8b:78:
                    51:a3:60:3a:35:96:6f:e6:16:fa:a8:ff:a7:8f:97:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:02:58:17:02:3A:E9:91:BA:A0:B9:8D:CE:44:4C:9B:6C:03:B8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08e80737-cfaa-3267-b35d-77cf89c44820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:c1:de:00:90:81:e9:fc:04:c9:fb:f4:fc:24:bb:dc:13:
         6c:59:3e:81:e8:a0:b0:b5:7f:81:d9:92:0d:eb:f8:5f:e4:5a:
         37:c4:8e:54:73:f0:77:f4:92:d7:60:35:e2:bd:f2:e9:72:6e:
         40:e4:68:2e:2e:85:25:34:8f:2b:20:4c:c4:be:d5:07:d3:19:
         02:a4:9f:de:9e:d3:02:d1:e5:1e:b7:3c:3b:78:a2:49:34:ba:
         19:ba:36:13:a7:98:ea:18:18:a3:cd:52:30:de:38:82:b0:24:
         d7:ec:de:23:54:78:7c:73:2f:d2:9d:9d:e9:3b:44:0f:41:34:
         7b:4e:ff:19:9f:92:6c:b9:e2:a9:20:33:f6:8a:88:ff:0b:7a:
         6b:ec:e0:6f:4b:0f:67:34:6d:68:86:15:11:71:50:8b:a1:fb:
         d9:65:fc:a8:e1:1e:ba:3e:c6:ca:d3:e5:84:f2:5f:05:fb:32:
         8c:eb:1c:8c:ca:22:50:7b:43:e8:fb:72:6f:a7:34:6a:49:06:
         99:5b:7e:4c:b0:42:be:ce:2c:d5:28:a8:82:d2:57:35:42:1a:
         d0:20:04:29:fe:92:ae:70:4d:39:7b:37:8b:19:e1:11:75:f8:
         35:d9:95:52:95:ae:63:21:3a:82:a0:e9:14:a1:3a:82:6c:e5:
         22:36:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:06:04 2026 by rpki-client