Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b28d8272-3a28-31a5-92b9-889735051afa.roa
File:                     b28d8272-3a28-31a5-92b9-889735051afa.roa (raw, json)
Hash identifier:          dPN5lj39tOuN45QBmwdTH7Sc6E8+QPY6n+8cV0Zg4V4=
Subject key identifier:   C5:43:E5:80:58:E7:86:F8:F2:41:6D:44:55:86:E4:1C:B3:17:77:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E1E4491536C3D266854BEED80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b28d8272-3a28-31a5-92b9-889735051afa.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     16625
IP address blocks:        184.31.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:91:53:6c:3d:26:68:54:be:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=bec51964-1116-49f0-9a62-4c3a53bc5c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:40:2d:2c:f3:ca:4c:a0:73:c8:02:67:19:
                    8f:00:f3:14:12:bb:2a:b9:31:e0:1d:40:24:0b:94:
                    e1:c0:ad:11:c1:97:d9:5e:d6:da:b5:60:04:0e:4e:
                    25:b8:a5:d1:e0:e8:a0:e1:a6:f3:9c:8a:c4:28:9f:
                    a3:65:d8:10:91:e6:ff:29:e1:d2:fc:c6:49:82:d9:
                    d8:a3:8d:01:fa:4d:52:7e:b5:3c:df:a6:69:94:97:
                    bf:40:17:bd:ef:8f:85:e1:02:07:8b:1b:a6:18:bc:
                    67:31:59:08:be:ac:d7:0b:86:52:e8:8e:15:e9:91:
                    89:31:c9:80:8d:30:37:f4:62:23:d4:a7:53:37:85:
                    dc:ba:cd:5b:ff:09:fe:1c:66:9a:11:15:df:d7:84:
                    2b:ad:51:10:7d:76:df:c2:a8:8b:ff:ed:69:20:08:
                    28:28:c0:10:7b:6a:e4:52:ea:d9:47:80:a2:b7:16:
                    94:0a:aa:a4:91:37:21:b2:88:88:bb:f2:d6:6e:7c:
                    68:19:5e:79:73:2b:a6:55:19:e5:b4:f4:1d:75:b0:
                    00:3d:81:ef:e0:2e:af:d7:78:89:5a:1c:b4:52:de:
                    7c:3b:21:00:26:60:73:ff:88:43:13:f7:cb:ff:29:
                    f5:3c:00:c4:2c:c1:fc:d3:1a:01:9d:f7:76:98:70:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:E5:80:58:E7:86:F8:F2:41:6D:44:55:86:E4:1C:B3:17:77:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b28d8272-3a28-31a5-92b9-889735051afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:8d:35:e7:33:dd:ee:f5:bd:c1:77:dd:6a:65:6d:28:47:
         e6:dd:84:44:65:c5:af:a5:64:6c:41:35:80:25:3c:d9:25:a8:
         07:91:72:b0:13:59:34:23:80:7e:78:10:a7:60:aa:79:59:92:
         70:8e:d1:5d:59:c7:b6:f4:77:04:8a:6e:11:8e:f5:b1:45:44:
         ca:9c:0e:b5:6d:3c:66:52:fd:14:53:17:07:1a:87:ce:23:5a:
         7c:8d:38:4a:82:ed:53:5a:64:f4:ef:91:e4:c2:93:9d:79:2a:
         0f:69:a0:5a:7b:86:c9:d0:de:cd:dc:0b:82:d9:68:35:3b:5e:
         11:2a:ec:0c:74:a0:52:c5:d7:56:5c:6c:8c:3e:29:e8:5d:69:
         91:ea:6b:23:0d:da:86:a9:7a:c3:b6:1c:ef:03:bb:3f:8d:44:
         97:d4:7b:96:29:4d:9b:0c:c8:58:e1:ed:85:51:5c:f0:f0:7b:
         f1:29:40:6d:28:be:77:63:36:2b:4f:aa:68:86:82:8a:e3:84:
         e6:6b:8d:31:ff:ff:d5:95:c8:8c:4f:8a:7c:0b:9e:8f:21:41:
         76:0d:8c:bc:4b:f1:17:5e:59:28:e9:1d:d4:c4:c8:d8:db:60:
         45:e0:a5:91:b5:06:f0:52:fd:a3:29:83:b7:aa:16:de:cb:83:
         a8:4a:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:28 2026 by rpki-client