Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/8435ad67-f167-30b1-a261-d9aabc415baf.roa
File:                     8435ad67-f167-30b1-a261-d9aabc415baf.roa (raw, json)
Hash identifier:          2bcBBE4pwwBpotZ1xSqFDUMZrYX9pw2/hyk4oWqC5zM=
Subject key identifier:   BF:29:22:57:56:D7:DB:6A:D8:DE:ED:5F:A0:66:0C:0C:2E:45:EC:03
Certificate issuer:       /CN=e7086ee2-313b-4593-ae44-3ec24e5a2a6b
Certificate serial:       010D0C9F4328584E0436310481F8A331F78D2480
Authority key identifier: D6:C9:61:F5:C4:4C:90:6F:12:A0:6C:98:D3:3E:08:22:C8:7B:46:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/8435ad67-f167-30b1-a261-d9aabc415baf.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30247
IP address blocks:        67.158.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:31:04:81:f8:a3:31:f7:8d:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7086ee2-313b-4593-ae44-3ec24e5a2a6b
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=59c855cf-d155-4cf4-a3ae-9ad32d95875f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:94:25:bc:fd:ad:3c:14:78:17:ab:57:b1:35:
                    b1:f1:74:fc:8f:af:0e:59:92:81:b3:a5:ac:3f:b8:
                    e6:10:d7:07:9d:99:a4:81:49:d6:74:31:e3:80:3c:
                    62:ad:17:92:66:97:17:62:77:d2:a7:84:9c:d3:89:
                    85:c8:42:23:0e:5b:27:0d:de:1e:bb:2a:eb:6b:d1:
                    61:fc:5b:b9:61:21:63:43:fd:a6:ed:e8:b6:f8:84:
                    d2:ae:ee:cf:f6:5e:6c:e8:d4:46:d4:c8:da:91:8b:
                    a2:63:a4:00:90:8b:84:fd:58:54:95:e2:0d:c4:18:
                    d9:68:69:64:ca:69:0a:8c:b5:6d:25:a4:07:52:58:
                    08:da:41:bf:e1:a7:e1:e3:b6:9a:d7:27:e2:b8:25:
                    72:13:70:35:2b:85:86:b7:9c:9c:1d:c0:49:71:59:
                    e6:14:ee:8f:3b:06:23:30:e1:0b:d2:f3:31:04:0a:
                    16:e1:b4:02:e7:d1:69:fe:63:50:60:39:1a:b1:29:
                    15:26:89:9c:21:2b:23:d0:a7:f1:5d:90:56:c5:d7:
                    13:2e:2a:5f:fc:91:64:1e:0e:2d:70:3c:46:c7:7b:
                    1d:d3:3d:1d:dc:16:56:f7:81:7f:9d:a2:29:80:31:
                    40:c7:17:7b:67:b1:23:37:ee:0c:3b:b9:a6:a5:ae:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:29:22:57:56:D7:DB:6A:D8:DE:ED:5F:A0:66:0C:0C:2E:45:EC:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/8435ad67-f167-30b1-a261-d9aabc415baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:C9:61:F5:C4:4C:90:6F:12:A0:6C:98:D3:3E:08:22:C8:7B:46:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:57:51:24:bb:48:25:cd:36:17:26:86:32:7f:d3:de:9f:e3:
         6b:27:4c:57:06:01:83:8e:32:1f:05:8b:e8:0a:ef:ca:0f:6f:
         96:1a:e7:87:e1:29:30:bc:22:e2:7b:6e:19:36:cc:d4:3b:20:
         13:fa:a5:44:da:42:5e:09:20:ba:7b:03:05:5e:9a:24:2d:7a:
         15:34:1c:ba:e5:b3:f2:21:42:04:fc:05:17:5a:ec:b9:e3:47:
         49:cc:8a:25:62:07:3d:06:2d:23:60:13:7b:ce:d9:e0:59:fc:
         31:a0:42:f6:3f:e3:49:ca:ec:13:1c:c1:74:55:04:24:24:c0:
         78:13:7f:70:81:f4:76:ec:10:b9:93:42:b6:e6:b9:17:8b:e1:
         15:a0:fd:dd:eb:68:78:b7:72:66:6a:d6:8f:60:50:e1:65:e1:
         34:1c:6a:94:f3:90:c1:30:2b:ec:0e:62:e8:40:bf:d5:2d:3c:
         bb:6d:31:d8:7f:56:dd:cd:00:59:74:b9:00:e5:da:ae:ac:39:
         6b:08:f9:a7:c1:d1:f5:93:fc:df:7f:e7:85:b7:4e:55:2b:d5:
         f5:9e:c2:5d:cf:90:5d:62:eb:a0:75:cf:07:c0:46:d1:2e:73:
         b7:b8:14:e5:ea:01:78:27:83:00:5a:93:c0:3d:7e:43:f7:e8:
         82:ff:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:31 2026 by rpki-client