Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa
File:                     ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa (raw, json)
Hash identifier:          tJeNlYcbDlxinzegJg6Ip1Z7SEVRyZvRVq+wO/DltzU=
Subject key identifier:   77:44:62:AA:D1:E8:D2:59:6C:46:22:33:0F:D9:60:D3:D3:4B:24:24
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584E147EEA3ECEA91AC618660DE0
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     26229
IP address blocks:        162.138.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:ea:3e:ce:a9:1a:c6:18:66:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=fb86a459-0b54-4821-b5e6-99a5597938da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:2c:1a:53:d5:60:af:53:e9:d0:23:6b:17:
                    1f:9b:46:72:a6:1b:3f:3e:98:6b:43:58:33:a2:90:
                    24:80:73:6d:2a:6a:a0:1b:96:e4:26:29:07:c7:2b:
                    3b:78:a4:22:58:22:f2:18:08:24:f1:04:55:6b:60:
                    b7:77:ac:d8:92:14:00:1d:21:02:2d:ec:af:ad:1a:
                    5a:30:50:e7:80:93:c7:dc:7a:90:6a:b0:ae:2d:24:
                    58:a5:68:2a:44:4a:b4:ca:96:c8:67:db:7b:68:09:
                    33:cd:68:08:4f:3c:0d:2e:28:8e:c7:22:38:92:d5:
                    c6:c9:4b:8a:8c:1a:99:37:05:21:40:76:3d:9a:2c:
                    26:5b:15:cc:77:cd:12:a3:01:1b:b0:23:40:e8:3f:
                    65:3a:97:4e:cd:89:ae:aa:93:b4:55:5f:5a:46:cf:
                    e0:5f:c9:e5:be:8b:49:92:87:29:3d:b3:12:26:49:
                    de:65:1d:c8:b5:06:14:87:7e:53:e1:0b:ef:8c:b8:
                    33:68:75:41:63:f7:9b:29:6c:f3:33:7f:ee:3d:f7:
                    41:e2:53:cb:2d:84:61:bf:f4:50:34:c4:fe:c6:0c:
                    1c:b7:34:01:f3:a3:5e:10:34:a3:e6:4a:94:ea:71:
                    d3:e1:08:dc:c2:00:0d:3e:1a:32:67:a3:c1:f7:e3:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:44:62:AA:D1:E8:D2:59:6C:46:22:33:0F:D9:60:D3:D3:4B:24:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:70:92:3f:81:93:20:b6:35:d8:38:73:82:9d:77:49:56:2d:
         f8:23:81:da:ef:62:8e:dd:0e:62:d3:25:cb:7f:bb:61:b7:c8:
         9d:bc:ed:ea:68:63:a7:4e:d5:3d:30:14:5a:42:39:b5:55:c8:
         b1:3e:bb:25:cc:29:5c:76:9c:5a:76:88:b2:40:d9:4c:8c:f2:
         e1:6c:eb:bf:1c:75:0b:14:c8:c3:29:8e:74:62:c2:e6:50:0b:
         18:27:e0:a4:b8:88:0d:a5:d6:b1:ce:6c:bd:66:f7:ff:da:98:
         6c:36:a9:96:ce:db:b8:9b:5a:9b:d9:26:cf:ce:cc:f9:49:77:
         18:0a:53:81:79:04:b2:3f:5c:9e:56:d4:db:92:27:d1:bb:42:
         a8:59:75:6a:b8:cf:4e:83:eb:8b:8d:cb:13:55:7a:be:07:e4:
         46:c3:5f:c6:e6:f1:d9:79:48:d8:22:8b:b2:05:43:f6:7d:b6:
         a2:fe:e3:57:52:9f:f8:84:c2:02:fd:54:e5:a0:d2:86:19:fc:
         15:2e:e1:aa:a4:a1:f8:27:a2:50:ee:83:76:5b:c3:87:de:ff:
         90:b8:3d:c0:74:c6:39:06:4b:85:ed:34:f3:8d:32:57:7e:40:
         7a:cb:00:cf:19:1c:52:4c:92:fd:2a:89:33:9d:76:30:bc:85:
         0b:4b:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:33 2026 by rpki-client