Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa
File:                     c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa (raw, json)
Hash identifier:          7psuIOJtI2zfsImkOz5Re0Med6CUeI29P4MwS9/CuRk=
Subject key identifier:   3C:72:47:C6:AA:3D:CF:81:F6:3C:B6:86:28:C7:64:CF:AD:11:2B:2D
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584E131995490F0865954B4BBB40
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        208.87.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:95:49:0f:08:65:95:4b:4b:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=71f0a9df-ffd1-4517-a05a-9121c5ffc64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:fc:3e:69:4d:6c:46:6f:3d:b2:3a:35:0f:
                    11:fd:70:a9:69:39:d0:73:c7:62:3b:04:83:8a:aa:
                    58:c6:d9:e8:0a:2b:1e:17:69:16:e4:50:fb:84:eb:
                    52:4b:6e:ee:02:19:2c:36:f2:d2:c6:70:ea:10:a8:
                    6c:d3:86:3c:fb:5d:ed:32:a6:c2:66:29:aa:49:48:
                    ed:32:cd:f1:1c:f7:7d:29:bb:34:34:22:c6:6f:de:
                    18:ec:7c:27:5e:03:d2:0f:df:ed:18:91:c3:13:4b:
                    e9:d2:f4:e9:b5:59:c6:b9:a5:f0:60:19:23:41:3d:
                    b7:4d:a5:e6:0f:42:a4:d1:cf:5b:ad:26:78:0c:1a:
                    42:87:5f:1b:c2:5f:a9:cb:0e:5b:41:ea:72:3e:ab:
                    cc:88:39:46:90:cc:a1:5b:72:88:86:9e:b4:7e:fc:
                    65:b0:65:ab:f3:29:2c:b4:01:ad:56:e7:27:ef:3e:
                    5f:70:5e:58:9e:ca:b4:ab:1d:44:df:b8:a0:b8:c1:
                    f7:ac:e3:1a:12:78:98:9e:17:3f:8e:4b:46:ec:71:
                    e7:4d:43:29:90:f4:5e:f2:54:2f:dc:59:cd:b9:9b:
                    1e:b0:25:c1:f9:e0:e5:7f:99:01:73:14:9f:e9:8d:
                    36:c8:bf:fb:61:cd:d0:f2:2f:e5:ec:ce:1d:31:9f:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:72:47:C6:AA:3D:CF:81:F6:3C:B6:86:28:C7:64:CF:AD:11:2B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:e8:ee:77:47:84:e2:20:4f:83:62:64:4a:4d:50:6b:e0:
         86:f1:d6:f7:54:5f:36:f4:77:d7:2f:c0:16:b2:8a:e4:e0:5d:
         f1:07:1e:4b:50:f9:8d:1c:03:2b:24:54:fd:69:2c:01:7c:e9:
         5b:6c:f9:ef:46:46:7b:00:1b:b2:56:c8:ea:ec:70:6f:37:a8:
         09:f7:8e:c3:6f:ea:9a:92:5c:32:d8:92:38:43:09:1a:6e:54:
         d5:e2:b0:9c:05:47:3a:e0:6f:ff:7d:1b:cd:35:6c:c5:63:1f:
         3c:29:92:3b:a3:92:10:cc:5d:3e:35:ff:68:16:fd:23:9e:f6:
         87:98:1d:63:a3:a3:21:75:77:b2:6b:07:18:af:44:ec:1f:70:
         af:61:92:c1:3d:0a:cf:d9:65:82:f7:ea:2a:8b:aa:ca:d7:ab:
         79:19:d3:7c:df:cc:ff:48:ee:7e:a2:4e:69:34:2e:ce:fa:5d:
         ad:73:07:78:26:b8:06:63:66:15:36:72:8a:be:71:97:3a:27:
         e3:0c:3c:f2:dd:3d:0b:93:24:42:c8:bd:f9:55:48:df:4d:e8:
         16:0c:8c:a1:01:ba:c3:b9:ee:55:1c:0b:d4:cd:d2:5c:c7:6f:
         59:db:1b:07:a6:9e:d5:70:d8:de:cc:52:17:8a:b1:73:4f:5a:
         e2:33:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:58:31 2026 by rpki-client