Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa
File:                     c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa (raw, json)
Hash identifier:          RGnZ9qW82a/TAe9OgYhFosmrZc3KEE3Uh9xFNVDa8+E=
Subject key identifier:   F8:26:86:BB:41:A9:6D:08:2A:7D:80:F1:89:DE:28:BE:9C:07:E4:9D
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584E1FA99351A9715CBDA4B0AF40
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     62943
IP address blocks:        65.255.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:93:51:a9:71:5c:bd:a4:b0:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=8f0ab9f0-2218-4944-8078-59f143772cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:f1:f6:c0:ac:7f:e6:35:f1:c7:39:ff:d0:
                    1b:fe:e6:75:e0:3d:15:a0:93:7d:d2:cc:65:1c:76:
                    14:48:ff:e1:29:91:94:f9:4b:23:32:8c:8b:f0:2d:
                    88:81:13:64:03:d8:ea:24:3a:90:a8:fa:95:32:c6:
                    cc:52:ff:23:22:25:3e:d2:ec:cd:6f:a9:72:4b:3d:
                    97:b7:47:76:fe:c6:40:2e:95:e7:e8:31:d5:1f:96:
                    39:56:be:27:97:f3:d2:ef:12:57:0a:9a:ed:56:94:
                    e0:3f:36:38:e1:45:0a:f9:44:9a:56:c1:97:56:30:
                    24:ff:67:fe:45:20:5d:2c:31:d5:50:d7:97:f3:86:
                    15:37:8b:58:c6:63:c5:72:3a:96:81:6d:ff:7a:48:
                    9e:fb:fc:36:db:29:63:dc:64:3f:74:74:e6:db:2e:
                    e5:76:ee:f5:f0:fe:60:64:af:7c:03:42:be:77:5d:
                    df:75:60:92:bd:46:67:61:a3:80:e9:68:ce:77:f0:
                    bc:1d:70:98:41:1e:3f:1a:56:70:ba:d2:0a:d4:12:
                    3a:1d:1c:56:f5:e8:3e:ff:7b:1e:d0:08:d9:db:af:
                    e4:e8:50:87:39:d5:cc:58:41:c1:83:d1:16:0a:c1:
                    90:be:7d:48:6b:e5:94:97:ce:6c:00:0b:c0:9c:f7:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:26:86:BB:41:A9:6D:08:2A:7D:80:F1:89:DE:28:BE:9C:07:E4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.255.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:15:c9:89:7f:c3:55:d3:4b:e5:49:b6:7d:a1:dc:38:b2:
         2a:12:cf:5c:52:25:21:68:c3:8d:7f:d0:94:ac:dd:3b:d7:e8:
         aa:2f:d3:31:47:3b:aa:ab:10:90:41:8d:10:7c:29:b7:3c:02:
         56:03:13:5a:01:74:17:48:d8:73:2e:76:fd:0b:ff:3b:36:8c:
         3d:ca:31:ec:74:e2:45:1a:65:95:94:6f:d3:76:37:d4:22:80:
         8f:29:59:08:9c:fd:f1:90:2d:61:de:4c:ba:e1:32:a6:fe:a5:
         66:6d:3a:36:39:90:f2:03:80:c0:de:dc:3d:68:89:f0:73:32:
         74:84:46:aa:fc:c7:36:92:34:2f:ce:c6:dc:31:61:d6:13:27:
         9e:c9:6e:2b:7f:c4:45:33:e5:5b:62:9d:29:8c:9c:89:1d:28:
         c7:91:1a:6d:ec:13:0e:92:53:88:a5:11:58:5e:52:ff:7c:f8:
         91:fc:a7:26:50:ae:45:8e:e4:50:4f:61:bf:1e:a3:47:0f:5b:
         f8:51:66:43:dd:ab:39:c4:eb:64:89:e7:9e:d1:59:03:12:e1:
         6b:ee:27:5c:e1:98:56:25:e4:84:aa:5e:85:4e:c8:81:6f:b3:
         50:68:19:ae:81:30:21:39:0e:34:36:ea:50:c3:e1:99:d9:72:
         8f:12:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:17 2026 by rpki-client