Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa
File:                     b35577d6-3a7d-3701-b286-73353987be3a.roa (raw, json)
Hash identifier:          P0o6xrCui3lL+U2LyfnlzXJOirwDeI40dSyZlAgh7Fw=
Subject key identifier:   E3:B8:7B:6F:BB:C2:F4:97:7E:90:36:99:DA:4C:2F:96:E5:77:CA:64
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7C362A9E0F366A4695058080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa
Signing time:             Sun 12 Apr 2026 19:50:57 +0000
ROA not before:           Sun 12 Apr 2026 19:50:57 +0000
ROA not after:            Sat 11 Jul 2026 19:50:57 +0000
asID:                     834
IP address blocks:        65.86.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:36:2a:9e:0f:36:6a:46:95:05:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 12 19:50:57 2026 GMT
            Not After : Jul 11 19:50:57 2026 GMT
        Subject: CN=314005cf-b9a0-4af9-a834-08a71463e650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:3f:96:b3:19:29:f3:8b:86:91:da:13:a6:
                    50:2e:7e:af:af:36:60:0a:cf:6f:e5:4c:01:8b:f3:
                    8e:8e:96:1d:48:eb:8e:13:5b:b2:37:7d:1c:99:86:
                    7b:d6:df:64:e6:e5:0f:c8:c6:2f:fa:a1:a1:5b:e9:
                    25:a6:76:68:c5:a0:b7:23:a8:28:43:24:07:bb:1b:
                    17:a2:44:84:cd:08:48:f8:19:40:b8:d9:f0:b9:d7:
                    9a:0f:96:48:ae:e5:9a:9f:a5:db:e7:24:a8:e0:49:
                    8e:0c:30:9d:04:d8:d1:41:58:65:ff:4c:ca:b2:86:
                    9b:e3:c0:a5:a9:7a:09:f9:37:50:51:0d:84:12:cf:
                    e7:ab:19:59:65:49:fc:cd:72:c6:ee:f4:f7:1f:38:
                    0f:54:92:ea:07:96:27:96:5f:b7:61:64:2b:fe:a9:
                    3e:c2:8a:83:cd:28:66:1d:db:23:a1:0b:ff:c5:5b:
                    8f:63:99:b4:5f:71:f7:fb:60:e9:93:4c:b1:6e:12:
                    bc:36:01:92:18:a2:8b:55:36:10:dd:e5:fa:f0:55:
                    a0:a3:94:98:80:89:d7:df:92:63:fd:37:71:cb:8e:
                    48:fa:c3:9a:57:9f:1d:c5:50:97:6d:46:79:b4:af:
                    48:b7:68:4d:1f:e6:ec:2f:8c:99:2d:71:c7:89:3b:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:7B:6F:BB:C2:F4:97:7E:90:36:99:DA:4C:2F:96:E5:77:CA:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:37:62:55:29:98:da:8e:7b:d8:82:2e:7a:51:03:be:1f:9e:
         58:ef:63:d9:e8:39:17:7b:c8:8d:27:13:e8:21:ca:9d:3c:ab:
         da:5b:85:a1:41:9a:20:eb:da:ff:9b:1f:28:46:ad:45:82:86:
         87:11:7f:4c:62:d8:7b:80:85:5a:7e:5e:0f:6e:64:18:f1:b8:
         40:d4:48:0e:33:af:dc:7d:fe:5b:0f:4b:d7:ca:c8:ec:6c:76:
         c4:88:f8:7c:06:ff:60:4d:b4:c5:55:8f:bc:5b:9d:f4:e3:4c:
         51:72:51:fa:c5:9c:60:b4:5f:6f:9d:ec:91:2e:b3:a2:af:06:
         ec:69:f8:7b:28:4f:cb:70:9a:b9:44:37:e9:90:8f:39:48:cc:
         13:97:76:66:7e:ae:49:5b:8b:ec:79:e1:a1:6b:6e:c6:ac:9a:
         eb:48:48:25:35:8b:29:41:36:ed:60:97:7a:42:f1:25:ca:87:
         0e:bd:2b:0d:70:57:ba:c7:d3:61:0b:b4:09:bb:3b:02:a0:fa:
         ce:68:c5:7a:be:c4:f2:ea:11:1e:61:94:9b:fe:f6:99:1f:3a:
         94:be:24:80:35:bf:e5:e4:17:36:70:21:47:4a:71:6e:82:3d:
         ec:88:81:47:48:e1:78:0b:2f:3c:f9:4d:18:f2:da:31:30:20:
         5d:10:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:05 2026 by rpki-client