Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b1ebd02-0f18-305e-8051-66eb911a8ed8.roa
File:                     8b1ebd02-0f18-305e-8051-66eb911a8ed8.roa (raw, json)
Hash identifier:          5RG6nWnzLokOylGNhYj7emkaFYn6qB5rloknQ33dDLU=
Subject key identifier:   67:08:E3:C4:39:5B:04:DA:62:4F:A5:AF:31:4E:C1:CE:B9:F0:5C:5D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E15E46EB2D9C952519AF9D100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b1ebd02-0f18-305e-8051-66eb911a8ed8.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     397630
IP address blocks:        158.62.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6e:b2:d9:c9:52:51:9a:f9:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=88ec1402-42f8-4882-b8f8-101ed27c78ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:9f:2e:5e:5d:b4:7d:f7:5f:8f:05:29:f8:
                    48:09:d9:bb:50:61:41:2a:f4:ed:91:a9:25:0f:5d:
                    20:51:79:d2:38:ba:66:fa:dc:1e:61:b3:ec:87:33:
                    20:a4:5b:f2:a1:9c:7c:1d:79:9b:5d:04:8b:52:e6:
                    62:da:f9:97:1a:cc:52:50:7e:db:ee:75:48:4d:b9:
                    1e:c5:86:bb:31:0f:9a:70:17:76:10:04:1c:e9:ce:
                    4d:97:07:cb:14:1a:03:18:11:ae:78:64:55:81:6a:
                    02:b8:4f:69:ea:29:1f:8c:5c:5b:c6:e2:7b:9f:4b:
                    f0:e9:ce:9c:43:03:6c:8a:01:30:48:65:00:8a:7e:
                    55:51:ea:1d:c2:9c:eb:4d:ed:bf:18:e0:ad:2c:3a:
                    7e:92:24:ff:7d:87:d0:8a:c6:30:1b:2a:64:8d:cf:
                    c5:10:ff:bd:f4:96:fc:ec:2b:29:2e:c7:13:49:33:
                    fc:53:68:3b:ac:9f:63:5e:76:79:0f:4c:b8:8f:c1:
                    9e:9f:1d:06:ac:f3:48:eb:58:52:6f:1c:79:65:87:
                    92:ee:0c:69:2e:95:02:3a:af:e4:4b:84:2e:df:d8:
                    de:94:15:98:a4:8e:56:ea:91:95:ec:22:9d:f2:ea:
                    89:2d:63:2b:06:41:42:19:5e:e1:27:31:be:71:da:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:08:E3:C4:39:5B:04:DA:62:4F:A5:AF:31:4E:C1:CE:B9:F0:5C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b1ebd02-0f18-305e-8051-66eb911a8ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:fe:88:a0:06:a5:74:69:cf:45:cb:7e:93:2d:1c:15:6a:b4:
         40:f2:ae:2d:52:4d:6c:fd:93:0d:e6:db:34:bb:24:c5:fe:7c:
         bf:0c:7b:91:35:7c:96:8c:ad:26:12:9e:f2:00:e7:1e:16:f2:
         4f:2d:30:4c:e4:ac:c2:e3:26:b6:7b:45:28:da:1d:d8:3e:e1:
         88:3e:16:54:f3:e0:ca:fd:8b:44:7b:d5:51:31:f7:10:c9:61:
         e3:91:0a:26:4b:4a:b2:ab:81:bf:f1:2a:1f:50:40:74:47:54:
         53:c0:76:8a:ac:be:fc:9a:f8:4a:b4:f9:8a:1d:97:36:07:3e:
         fb:e3:73:e4:c8:25:9b:48:10:d4:0b:ba:09:31:42:cd:e5:12:
         de:38:31:e0:c5:ee:0b:0e:4b:35:51:ae:01:56:82:99:dd:1d:
         a4:2f:43:a7:95:49:fd:e1:30:3c:86:c6:f7:60:05:97:13:70:
         e0:9d:1b:e5:8a:c5:55:76:77:59:ad:d8:e5:95:f9:b4:99:3d:
         5d:7f:bd:9d:5e:75:36:a7:6c:bd:b5:7f:b0:e5:70:76:1e:c9:
         ca:6b:fc:3c:33:a8:1d:c5:ca:4d:98:59:65:11:fe:a2:ab:67:
         e1:be:46:f4:8a:e3:1c:8f:51:6c:8c:9e:c3:28:d0:15:36:54:
         b4:9c:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:06:56 2026 by rpki-client