Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2eb2f946-6d82-37d2-8fa0-ff3c8dee3fc5.roa
File:                     2eb2f946-6d82-37d2-8fa0-ff3c8dee3fc5.roa (raw, json)
Hash identifier:          W6tbCy5CzyVw3V26Ixug3crdRAgce8K3d6PFVOYngKE=
Subject key identifier:   28:F9:0F:67:BF:E4:2E:17:08:64:BC:E1:37:0D:A3:23:4D:E6:39:87
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447BDD3E02466696811300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2eb2f946-6d82-37d2-8fa0-ff3c8dee3fc5.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        108.188.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7b:dd:3e:02:46:66:96:81:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=8650aca8-beb9-46ca-9507-1ee7efa43cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:30:f2:76:45:c9:1c:0a:af:c8:ae:76:10:
                    73:a3:6a:2e:32:8e:83:f3:14:13:35:90:fd:51:3b:
                    aa:6b:7e:f1:96:ec:04:58:a7:dd:6a:01:5b:1e:99:
                    19:20:54:b9:19:a4:d0:20:15:91:83:89:92:c2:fb:
                    13:88:49:6d:89:ad:81:ed:a9:ec:8b:f6:27:80:43:
                    ed:20:92:c8:70:86:92:63:b0:f3:38:5c:28:9b:a6:
                    4e:82:1b:1c:4b:d4:c1:87:3e:00:a1:5d:4d:4c:4a:
                    96:f8:52:6b:fe:b1:b3:f7:9d:27:88:81:6d:1f:36:
                    6f:5c:8e:30:b7:79:a0:66:a5:12:19:4e:ae:e2:38:
                    05:9b:1e:a7:d3:0e:fd:2b:8e:eb:f6:fd:5e:70:90:
                    12:d8:23:e0:2e:3e:d0:33:ae:41:bf:63:51:61:a7:
                    35:85:9d:a9:10:77:86:41:ed:13:7a:97:3b:fe:3f:
                    53:32:b3:99:8e:e7:e7:99:af:44:3b:8e:2f:9f:51:
                    e5:21:71:97:53:21:90:59:20:f7:e8:b8:0f:3e:6d:
                    b0:a0:48:a0:06:b9:60:31:90:54:ea:80:06:c9:48:
                    24:a0:5b:ac:83:d4:21:2f:f4:52:a5:e3:79:3d:cd:
                    9f:45:10:48:6f:47:4d:eb:e6:f9:3a:d8:59:c7:32:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F9:0F:67:BF:E4:2E:17:08:64:BC:E1:37:0D:A3:23:4D:E6:39:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2eb2f946-6d82-37d2-8fa0-ff3c8dee3fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.188.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:5b:e7:47:9d:b0:5d:0e:ee:a4:0b:a1:5a:4b:0d:a3:5f:
         34:0a:c0:4c:57:71:58:9c:5f:1a:9f:21:2e:c2:36:2b:ac:17:
         89:d5:fb:35:91:f6:6e:6f:52:a5:f4:d7:c4:6e:96:02:0b:f6:
         7d:7f:b0:13:65:03:52:84:56:92:4a:4e:ca:ed:55:69:5c:8d:
         f7:80:fb:0c:da:e7:c2:ca:14:ec:35:b6:14:9b:d7:39:37:70:
         46:46:23:0b:6e:78:9f:5e:b4:08:d6:4d:3f:df:88:9b:61:c0:
         d4:77:66:7c:25:60:73:d6:a1:c0:57:07:ba:e0:fb:17:42:11:
         db:c2:a5:05:17:26:98:10:3b:fa:e6:c8:b1:28:5d:a7:19:cc:
         5d:57:1b:48:02:8d:6c:48:4e:31:69:a2:ec:fe:d2:c1:55:c2:
         a7:ef:06:c8:3e:1e:f1:cc:4d:f6:fe:4b:ad:81:15:b1:fe:74:
         27:fb:e7:26:7d:19:73:ab:25:c7:b8:e9:d2:e5:10:6a:7a:0c:
         c8:22:c8:c8:58:1b:ac:4c:de:45:53:2c:0e:08:66:c0:3a:f0:
         65:3c:8d:e7:0f:1f:ad:c1:04:e0:9c:d1:10:e7:34:5a:73:cf:
         88:83:ab:9c:1c:b0:46:57:9b:a5:70:a0:5a:de:76:a5:39:b0:
         e5:b8:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:21 2026 by rpki-client