Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa
File:                     aedbe3d8-a938-347c-a902-e7d97e409a71.roa (raw, json)
Hash identifier:          KfwHumeP5Gm58Tt3s869aSNbSOeZoR36SoGgqUfzvi4=
Subject key identifier:   BD:C5:50:5F:34:02:AB:0E:D0:3E:67:54:F9:0A:96:42:05:81:86:CB
Certificate issuer:       /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Certificate serial:       010D0C9F4328584DF640AB80ACFA6A85F85E2700
Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     13631
IP address blocks:        64.22.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:ab:80:ac:fa:6a:85:f8:5e:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=33e4c4c8-ad8c-4947-a2b7-4dd403f688d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:73:ec:d4:9d:61:55:80:7b:af:fb:62:f4:
                    d1:4a:59:df:0c:35:73:c0:c7:b5:c8:2b:cf:f6:4b:
                    aa:21:26:6e:57:8a:dd:fa:a7:53:b8:b8:ea:28:5f:
                    71:96:0b:85:35:72:22:85:3a:96:73:d6:dc:99:1d:
                    78:6e:9d:5f:f8:d8:e5:da:73:d3:f6:96:71:6d:81:
                    99:53:40:07:e1:b1:47:e4:74:2d:66:3f:3e:4f:f2:
                    be:56:f8:97:24:f7:6e:a3:92:20:79:5e:19:72:55:
                    d9:59:22:cb:14:16:4a:d7:d1:9e:db:8a:00:1d:02:
                    11:ca:25:93:1f:8c:4e:5a:d1:28:28:9e:1e:e1:3c:
                    0e:35:0f:82:43:96:6e:28:80:cc:0b:3c:b9:6d:5d:
                    66:e7:21:0c:35:ea:45:04:38:c3:e6:c3:bc:79:f4:
                    9d:5a:7a:02:a9:f3:f6:96:be:f6:65:7f:a2:f3:2b:
                    60:2b:7d:ac:c1:a6:d5:8e:4f:7c:d0:52:7c:54:85:
                    15:1a:c1:b0:40:f1:54:3d:0f:91:6c:78:be:0e:a9:
                    2d:f7:e7:9c:64:5e:82:6a:74:6a:b5:3a:02:da:11:
                    8b:69:58:7c:c9:aa:f4:7f:3e:cb:46:f7:f9:35:e8:
                    42:75:31:49:bb:66:b0:e9:ae:f7:26:86:5c:e3:85:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C5:50:5F:34:02:AB:0E:D0:3E:67:54:F9:0A:96:42:05:81:86:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl

            X509v3 Authority Key Identifier:
                keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:67:1c:48:21:db:bf:09:4e:f3:0f:77:3d:02:70:16:d0:
         c8:86:78:fd:6c:ce:e8:18:47:5d:e3:79:5b:9e:2b:a5:7a:79:
         7d:7f:8f:6f:01:2c:a0:02:97:30:38:e4:2e:59:7e:58:3b:5e:
         f9:cf:93:2b:60:06:c3:34:be:df:1a:32:dc:ee:9d:0b:cb:8e:
         65:94:d0:75:72:61:50:85:b2:2a:aa:ff:30:99:1b:20:f2:4e:
         35:96:f9:95:e4:fa:7d:33:ef:29:38:2a:3f:8f:16:ff:10:d2:
         65:9f:ce:eb:07:85:b1:20:11:57:eb:24:ff:b0:03:8b:3d:9a:
         3d:29:69:fb:1d:15:00:7b:53:1d:e6:ed:a8:d1:04:88:59:1a:
         f9:94:e4:d2:b1:f1:b0:58:38:3c:3d:2b:46:cc:73:32:31:55:
         c1:96:4e:5c:37:d3:a7:2e:85:0c:36:f6:6f:a5:31:3d:dc:48:
         4e:8f:ac:99:ad:c9:44:91:d8:fd:29:ff:ba:88:89:24:d2:82:
         80:bd:0e:1c:10:ee:5c:2c:a6:44:13:e2:57:04:fc:ac:70:41:
         7c:8e:86:53:be:24:c0:da:ef:b2:c1:19:21:ea:ea:01:34:f5:
         8a:6c:cc:ab:94:c1:ff:ab:aa:5e:ce:64:9a:29:0b:61:51:25:
         78:05:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:40 2026 by rpki-client