Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/25314a5a-e882-3694-8921-dec33b2e8cf5.roa
File:                     25314a5a-e882-3694-8921-dec33b2e8cf5.roa (raw, json)
Hash identifier:          SC/sY4i2EzX6iRwMRFw9A/tKnduMUsCd2GQJTRXtxAI=
Subject key identifier:   E4:1A:5D:5C:27:AD:0A:F9:B5:B8:75:02:00:74:92:E7:1A:0C:38:2E
Certificate issuer:       /CN=85a507ae-7969-4a54-b25c-2e757bf0990a
Certificate serial:       010D0C9F4328584E210FDC58ED81A9AB55E85400
Authority key identifier: 5A:D2:D1:17:21:36:34:82:99:87:5F:5E:CA:F9:31:C1:E5:F8:CA:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/25314a5a-e882-3694-8921-dec33b2e8cf5.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     14991
IP address blocks:        207.32.224.0/21 maxlen: 22
                          207.32.232.0/22 maxlen: 22
                          207.32.236.0/24 maxlen: 24
                          207.32.238.0/23 maxlen: 23
                          207.32.240.0/22 maxlen: 22
                          207.32.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:dc:58:ed:81:a9:ab:55:e8:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85a507ae-7969-4a54-b25c-2e757bf0990a
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=e009f6fb-3be7-4767-9337-10dd62ba3a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:18:27:3e:7b:a5:4b:00:c6:89:8b:74:14:
                    6d:67:2c:99:a1:1d:31:54:ab:52:10:e5:80:cf:44:
                    de:99:cb:58:13:85:54:5e:59:9a:65:62:f0:f9:d9:
                    e0:3f:05:00:1e:dd:47:79:c8:e2:7d:1a:17:0b:1d:
                    f4:a0:64:67:9b:92:ef:3c:1d:80:7c:a0:29:8d:1d:
                    5f:af:82:76:d8:d0:85:8b:6d:20:af:3d:ff:f5:37:
                    f9:c0:fc:c0:a9:47:58:3b:ac:e8:30:99:39:94:72:
                    c3:b5:07:c1:51:da:3e:b0:b3:a7:2c:7b:80:a2:a8:
                    ca:d3:8c:90:62:22:0d:27:d7:04:9a:32:da:0a:34:
                    30:37:ad:6c:aa:95:f2:c7:58:e6:ac:e4:49:55:9f:
                    c8:66:73:61:db:5e:ad:1d:c1:d7:f0:c7:1f:3b:52:
                    0a:bf:9a:80:ce:ce:18:4c:3f:97:8e:63:e9:bd:5a:
                    8f:91:73:0c:0a:ce:9f:5a:c9:d6:1e:85:17:fd:ea:
                    ba:d2:3d:98:99:ea:1c:21:77:89:00:4d:17:4d:98:
                    a7:82:26:b1:36:b8:df:5d:5b:8c:93:95:d0:59:3a:
                    38:63:48:2f:d4:09:74:1f:78:22:75:01:74:82:c9:
                    b8:4d:ad:a4:2c:e1:08:97:e3:83:9f:45:28:7b:7d:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:5D:5C:27:AD:0A:F9:B5:B8:75:02:00:74:92:E7:1A:0C:38:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/25314a5a-e882-3694-8921-dec33b2e8cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.crl

            X509v3 Authority Key Identifier:
                keyid:5A:D2:D1:17:21:36:34:82:99:87:5F:5E:CA:F9:31:C1:E5:F8:CA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.32.224.0-207.32.236.255
                  207.32.238.0-207.32.243.255
                  207.32.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:07:66:72:03:c8:db:b0:4f:2f:61:ce:3b:ed:84:7d:9e:16:
         72:43:4f:65:91:6a:86:23:79:e4:e1:f6:62:2b:a3:2c:35:ca:
         73:52:cd:91:c2:c5:33:69:3e:85:0c:e0:55:e6:bb:9f:8f:9f:
         a8:87:c6:96:71:08:41:d0:38:c3:98:82:e9:0d:bf:d4:25:af:
         a6:a0:5c:58:6c:b0:df:e2:01:e2:6d:16:0a:38:35:35:a1:82:
         05:2f:9c:50:d3:66:f1:a1:fe:30:70:6e:85:00:5e:0f:54:a0:
         ff:f2:0d:44:14:3d:eb:7a:2c:89:d6:3a:6b:cf:b4:c7:eb:53:
         ed:bb:1f:97:cd:da:14:4f:cb:d8:15:3f:86:48:ea:a7:97:2b:
         4c:09:b7:9b:50:08:8b:54:3a:b6:de:9b:cf:8d:04:2b:7d:18:
         7c:a2:ef:22:75:59:30:67:e3:72:19:b8:75:b1:08:0a:69:e3:
         9c:3b:f6:2f:4c:a3:7b:b9:20:dd:b8:f1:52:e6:f4:33:87:1e:
         e7:20:86:e3:fd:22:32:c8:7f:b0:9e:f6:13:4b:9f:cd:62:80:
         1c:a4:19:65:8f:e3:98:68:77:c3:be:3a:7e:cd:d7:29:e2:b9:
         e2:23:82:c3:a9:8a:ea:84:63:e1:fc:78:62:69:d6:77:dc:37:
         3b:ee:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:07:56 2026 by rpki-client