Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
File:                     c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa (raw, json)
Hash identifier:          YKcA/ixqWsB68IkXzajQuG2d5yBneH2NNPvkNHXZQWo=
Subject key identifier:   EA:38:73:E7:78:AA:33:CB:DD:D2:E4:B0:9C:E3:E5:FD:95:BD:A9:C6
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584E253F04050EAB749F94167680
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        65.37.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:04:05:0e:ab:74:9f:94:16:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=ac131bb1-1a36-4cad-86df-32e376c9f7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:96:6b:41:dc:2c:41:54:4c:2a:aa:13:09:
                    a4:07:1d:da:36:a6:7b:4e:d9:f5:b3:60:79:c7:e2:
                    74:a8:f4:c8:63:be:21:cf:17:dc:a6:bb:67:9a:57:
                    47:d9:ae:9b:16:94:7d:a9:5c:b2:a6:79:87:38:c1:
                    62:25:bf:2b:8e:d6:45:27:90:e0:36:ad:e7:84:63:
                    56:d5:f4:dc:3a:b1:be:ab:dc:81:09:31:cb:aa:50:
                    21:3e:25:d7:20:4b:4b:e9:02:04:9a:f4:92:df:0f:
                    71:f7:14:96:50:2a:a3:86:ce:25:24:01:11:35:3f:
                    3b:b3:d2:db:b5:3e:62:27:9f:f1:d3:ee:b0:a4:00:
                    75:b5:8a:b0:74:de:1b:79:b1:09:ff:e9:d7:6a:8d:
                    b5:0d:19:86:17:94:eb:58:f2:f8:b7:ce:81:fc:2e:
                    5f:6e:c1:ec:a6:ee:39:e9:6e:75:cc:0f:17:45:a1:
                    34:f6:6b:ff:38:06:a5:a7:76:3f:af:29:89:d4:68:
                    c8:82:6f:6b:69:d9:c0:bf:be:7d:5b:69:e2:ab:22:
                    11:2f:b4:04:54:a0:0c:e5:f0:a8:b1:ba:f2:fc:a6:
                    e3:49:5e:8d:c5:a6:22:85:bb:5d:6a:59:13:55:36:
                    f2:57:58:89:9c:19:cf:da:2b:76:47:b9:30:98:6c:
                    e7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:73:E7:78:AA:33:CB:DD:D2:E4:B0:9C:E3:E5:FD:95:BD:A9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:07:63:ce:c3:55:f3:02:b1:5b:d1:cd:8f:45:fb:e8:88:
         73:d9:cb:84:da:a0:05:31:93:b4:ff:4a:7a:f7:9e:e7:e0:16:
         38:f2:32:89:36:75:d7:9f:9c:68:9f:dc:c9:27:77:4e:a5:db:
         07:e3:33:81:db:85:be:a5:b6:9f:2a:e7:9c:4e:1b:2c:07:1e:
         e6:0d:b5:8a:79:d3:c5:52:cd:fc:bd:fe:36:9e:d0:18:81:3f:
         ec:ad:0b:0c:e1:d0:f6:a3:c8:8c:88:e3:7b:21:ca:fe:47:8b:
         0f:77:84:90:e8:0c:65:f1:5d:dd:02:a9:c4:d8:0b:15:67:a9:
         48:2c:69:a4:03:71:0c:51:5d:bc:29:49:49:ca:e8:6a:be:69:
         9a:aa:7e:08:ef:4e:a6:84:3a:39:f6:a0:c6:fc:97:db:3c:1a:
         2f:b9:0b:0f:8c:89:1a:bd:ec:91:49:be:d6:75:60:bc:c6:b0:
         e2:2d:f6:8e:85:55:aa:6a:f5:69:d1:66:65:8b:31:3e:cd:91:
         e2:04:ef:b3:c0:d5:5b:38:ec:1f:cc:a9:07:8a:95:ff:cb:04:
         03:2e:a4:cd:1d:c7:66:d2:63:6f:37:67:8d:e3:31:8c:49:cc:
         fe:25:11:ef:85:57:e7:fc:4f:ee:32:e2:76:9d:52:93:fd:cb:
         6c:5b:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:36 2026 by rpki-client