Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/eb563fb6-0cc4-3152-a6f8-c49a40142347.roa
File:                     eb563fb6-0cc4-3152-a6f8-c49a40142347.roa (raw, json)
Hash identifier:          Gt34BB8jLrzepEtJfvd+tjGiRNACSq4FXaMuoXlBkGo=
Subject key identifier:   71:E7:79:C9:97:37:C8:A7:86:64:E8:08:1C:9C:85:E3:F8:2F:E9:20
Certificate issuer:       /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial:       010D0C9F4328584DF7A5ED891D8CA9166F56D1B8
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/eb563fb6-0cc4-3152-a6f8-c49a40142347.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30006
IP address blocks:        142.248.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:ed:89:1d:8c:a9:16:6f:56:d1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=0ad57eed-9227-4b25-9b4b-46bb00f6cdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:53:61:1d:8d:5f:00:0a:75:73:b1:e7:a9:
                    39:71:fc:1b:e6:b3:88:d0:d8:7c:f9:35:03:a1:2c:
                    eb:60:6e:9a:a0:c7:41:53:24:0c:d1:02:c3:56:4e:
                    d7:fe:91:ae:93:51:71:0b:18:fc:44:ea:68:06:2c:
                    75:eb:62:b8:a7:b3:e6:f4:cd:85:78:27:de:0f:43:
                    31:22:2a:8f:c2:a8:aa:43:bb:04:71:9c:23:2d:66:
                    85:93:d0:3b:48:98:5a:7d:c5:42:79:5c:dc:b7:5a:
                    4b:87:e8:ca:f6:34:8d:18:ae:9e:21:95:16:e7:06:
                    36:9d:39:be:0d:a0:4a:5b:bf:49:77:d0:08:7d:e5:
                    27:10:92:26:77:57:9a:0a:63:6b:73:63:85:be:c4:
                    02:0a:40:c6:fd:cd:d9:50:28:23:16:b7:7f:a1:84:
                    f0:02:8b:77:4b:c4:da:f1:e5:f4:8b:88:8c:c4:4f:
                    0e:2c:be:89:8e:b1:46:d4:df:2f:a5:58:cc:3b:58:
                    b7:21:76:a5:04:4a:d3:6b:fa:1b:ea:89:27:a6:a5:
                    fd:40:2f:56:cf:e4:ce:34:66:26:65:78:91:c2:6c:
                    01:c2:1a:51:60:be:bd:20:23:4d:26:ec:1c:9d:c9:
                    59:85:01:a1:79:be:a1:44:f2:d9:d2:96:ed:f3:b8:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:79:C9:97:37:C8:A7:86:64:E8:08:1C:9C:85:E3:F8:2F:E9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/eb563fb6-0cc4-3152-a6f8-c49a40142347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl

            X509v3 Authority Key Identifier:
                keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:57:1f:a6:7d:f3:01:9e:fc:61:ee:a3:79:31:74:68:38:
         55:ec:ef:0f:ad:a7:6b:c8:84:e8:f0:ca:e4:cd:ea:ef:70:2e:
         b4:58:fc:2b:3f:1f:5a:14:a0:d9:bd:e8:bd:2f:6b:c6:a5:6c:
         27:62:25:c1:2b:c4:23:6a:7b:62:35:1f:5b:08:3f:57:7a:fb:
         7a:4f:3f:4b:2e:4e:ce:1c:94:eb:48:1a:e0:b2:92:3b:0d:11:
         78:27:4a:f0:5b:77:66:c2:e1:ba:3e:d4:c0:38:57:9c:f5:90:
         7b:80:18:b3:82:c6:d3:a4:1e:24:5a:f1:d6:8d:28:f5:4e:72:
         a1:c2:4f:c6:50:5e:e2:01:9e:0c:a0:3a:5d:51:63:71:44:b9:
         8c:d9:11:34:3d:cc:74:bb:46:5f:1b:da:96:b4:61:a7:bd:e3:
         f9:fe:bf:82:96:9d:52:3e:eb:fb:90:76:9d:d4:53:1a:7a:6f:
         16:69:b6:ab:94:cb:de:09:aa:f1:91:f7:98:50:ea:12:b2:1e:
         d0:f9:de:84:9a:5e:5a:8e:42:84:82:cf:ba:61:e0:77:24:7d:
         ee:e6:f3:50:e1:5f:d0:b0:17:45:57:32:55:15:11:9e:46:d3:
         40:4d:33:a7:a8:af:23:da:94:23:10:08:57:2d:cc:e3:5e:2a:
         91:b1:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:50 2026 by rpki-client