Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/95feb25a-9363-3b19-be57-21591946b695.roa
File:                     95feb25a-9363-3b19-be57-21591946b695.roa (raw, json)
Hash identifier:          PnHOPGRIafByMt697LZhWQlSv17hiXg+Dk8CmZs95+k=
Subject key identifier:   F8:EF:F7:59:7A:0A:60:7F:AB:A7:08:43:7F:4D:9B:DB:7A:60:55:64
Certificate issuer:       /CN=37dc621b-43bd-4430-ba1e-586259c6b2bd
Certificate serial:       010D0C9F4328584EA3DD37897454CEDA288F9A80
Authority key identifier: A5:C4:7D:2F:FE:21:40:C4:E6:56:49:96:93:35:EB:93:77:17:F0:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/95feb25a-9363-3b19-be57-21591946b695.roa
Signing time:             Mon 27 Jul 2026 17:31:00 +0000
ROA not before:           Mon 27 Jul 2026 17:31:00 +0000
ROA not after:            Sun 25 Oct 2026 17:31:00 +0000
asID:                     16509
IP address blocks:        216.52.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/37dc621b-43bd-4430-ba1e-586259c6b2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/37dc621b-43bd-4430-ba1e-586259c6b2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:dd:37:89:74:54:ce:da:28:8f:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dc621b-43bd-4430-ba1e-586259c6b2bd
        Validity
            Not Before: Jul 27 17:31:00 2026 GMT
            Not After : Oct 25 17:31:00 2026 GMT
        Subject: CN=6a58fcd1-14ee-4c8d-9bf0-21f687aa3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:03:48:5f:a0:44:fd:78:7e:53:b2:17:3c:
                    65:96:fc:a3:18:21:b9:26:b4:0c:6a:b3:3c:e7:b5:
                    17:b6:ee:58:07:41:9f:ab:79:90:c8:88:af:c8:31:
                    e1:1b:33:54:9a:2c:a9:c1:71:40:68:96:92:f6:83:
                    29:6e:84:5d:52:f6:bc:43:8e:fb:7e:27:80:38:23:
                    b2:3d:e5:01:c7:81:60:bd:de:45:9e:9b:57:fa:00:
                    a2:20:63:f0:11:0b:68:e3:54:23:14:aa:72:9a:c9:
                    81:1e:ba:4a:16:4a:0d:6f:23:21:c7:a8:8f:0c:17:
                    53:a0:64:06:fd:00:0b:be:a5:d7:13:a7:87:9f:72:
                    52:b7:5d:25:b9:d5:65:31:4b:3c:98:81:2c:b3:7c:
                    84:95:ae:80:53:ef:4a:bd:5c:04:d1:6d:cb:e5:90:
                    fa:be:51:cc:11:4b:fe:85:c6:a3:ce:04:bd:a6:5d:
                    9b:91:fd:ce:c9:a3:68:ff:9c:2e:02:80:8c:ee:80:
                    12:e4:a1:b9:dc:36:ed:3d:d9:3e:95:4d:ad:83:e3:
                    43:85:44:b6:40:0d:30:c8:42:08:25:5f:63:f5:1b:
                    22:c2:eb:79:80:63:68:fe:ad:b6:56:ad:1e:bf:78:
                    d0:8a:af:64:3c:e3:ff:f6:e6:e2:86:ad:4e:db:2d:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EF:F7:59:7A:0A:60:7F:AB:A7:08:43:7F:4D:9B:DB:7A:60:55:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/95feb25a-9363-3b19-be57-21591946b695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd/37dc621b-43bd-4430-ba1e-586259c6b2bd.crl

            X509v3 Authority Key Identifier:
                keyid:A5:C4:7D:2F:FE:21:40:C4:E6:56:49:96:93:35:EB:93:77:17:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37dc621b-43bd-4430-ba1e-586259c6b2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e3:c7:b1:20:c2:5f:e6:ef:44:96:b7:40:ae:ef:6e:66:f1:
         87:b7:d3:95:67:71:9e:ec:9e:7a:93:43:70:53:57:28:71:1c:
         27:53:34:55:81:34:16:46:f3:d7:a5:f7:d9:4d:24:53:fc:02:
         c2:9a:4a:a0:73:64:a3:72:cd:a2:02:c3:2f:30:87:b0:6c:ac:
         59:8c:71:f8:8f:32:17:67:25:51:5f:cf:46:36:75:dd:c9:a7:
         c8:70:05:9e:b2:22:50:4a:86:7a:c6:f5:43:8c:ac:e4:f7:9c:
         2e:b6:fa:9f:83:ad:a5:31:4a:2a:8e:9f:a8:cb:5b:37:82:14:
         b5:1f:44:c0:db:5b:f3:6e:c7:19:5b:58:84:9a:e6:80:a1:bc:
         ed:f4:5a:79:ee:f0:08:93:7c:66:97:97:60:d1:42:ad:01:85:
         f6:32:5c:bc:e3:eb:a2:a6:16:1a:1c:78:5c:7e:3e:24:91:b6:
         25:5f:e9:5b:3e:bc:9c:5a:9c:47:b6:b9:35:fa:f8:87:60:1f:
         ac:47:b0:50:6f:16:f1:a7:97:dd:fd:fd:83:be:b3:6f:36:1d:
         28:68:22:09:ad:26:df:60:70:ac:6b:07:b2:15:10:94:30:13:
         d4:08:41:34:16:7a:78:99:80:1e:4c:f5:33:30:5b:09:2e:eb:
         68:74:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:35 2026 by rpki-client