Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be026098-3cc3-3871-9331-643a49d077e3.roa
File:                     be026098-3cc3-3871-9331-643a49d077e3.roa (raw, json)
Hash identifier:          8+/mEREpxuOukAkCntfTrmqayXeIknyx+zobv2Khd/c=
Subject key identifier:   18:78:E7:A5:42:10:9F:4C:E3:D5:EC:07:0A:9D:61:F4:D0:CA:B2:2D
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584AD601295F1CB1E3DF4CF9C3D0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be026098-3cc3-3871-9331-643a49d077e3.roa
Signing time:             Tue 12 Aug 2025 21:26:05 +0000
ROA not before:           Tue 12 Aug 2025 21:26:05 +0000
ROA not after:            Mon 10 Nov 2025 22:26:05 +0000
asID:                     3561
IP address blocks:        208.138.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d6:01:29:5f:1c:b1:e3:df:4c:f9:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug 12 21:26:05 2025 GMT
            Not After : Nov 10 22:26:05 2025 GMT
        Subject: CN=f6639909-c046-41ab-a5e8-e2171562098b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:32:da:69:01:95:63:54:7e:ac:58:06:67:ee:
                    f2:58:b0:ae:1a:4e:97:f2:3c:a8:b3:d9:e9:e1:22:
                    3f:e9:a1:fb:7d:09:d5:c6:33:df:d6:ee:e5:08:a3:
                    c7:9c:08:ab:24:96:d3:24:3e:21:63:22:3c:d1:54:
                    6b:ce:9a:6d:fc:7a:4b:a6:7d:36:b1:fd:de:1c:1a:
                    df:f5:20:cb:82:22:ed:cc:ac:4c:7f:4e:a7:f4:e7:
                    f9:fb:ab:6a:60:11:9d:87:e2:fb:85:6c:86:1e:ab:
                    ac:5d:b8:ff:ea:31:07:1f:fd:b3:27:5b:3d:14:75:
                    dd:4e:dc:fd:a9:b7:e5:02:c9:fd:9d:65:23:e1:64:
                    75:64:ff:9b:ab:fb:53:43:59:9b:b3:8d:a7:e9:7e:
                    f8:60:c6:69:a9:0e:7e:51:b3:1d:df:4e:37:e2:4c:
                    0b:ce:65:be:0c:05:d3:88:9e:83:00:b4:00:92:2a:
                    25:42:ec:e6:71:dd:7c:69:2c:58:28:b1:17:df:d4:
                    c3:9f:50:73:b5:39:3c:6d:59:aa:4e:b9:01:0d:4c:
                    1c:88:8e:fb:f2:2e:18:8a:fc:70:11:e4:80:6d:ed:
                    10:a2:81:08:2f:f0:e2:35:c0:cb:32:49:ab:1f:5d:
                    96:a2:9e:b5:e8:20:c9:1e:1b:ff:b9:60:82:c8:98:
                    ff:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:78:E7:A5:42:10:9F:4C:E3:D5:EC:07:0A:9D:61:F4:D0:CA:B2:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be026098-3cc3-3871-9331-643a49d077e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.138.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:4b:af:0e:ba:36:27:ed:d5:ab:c0:49:8e:be:9d:bc:37:
         9c:7a:26:0f:47:e3:7a:65:c9:6f:a4:a3:b5:1a:7d:31:0d:2a:
         54:22:fe:a4:57:13:38:df:d4:ca:5f:8d:29:6e:f9:6f:85:15:
         7a:3b:1e:9c:d8:93:0e:bb:64:42:63:56:64:fe:53:d1:51:7f:
         b6:d5:51:2f:74:7a:c7:99:43:75:5a:44:38:19:8d:31:fd:ff:
         64:8c:4b:fd:70:21:98:0c:62:40:88:da:50:6f:ff:ed:60:f5:
         a6:b8:ee:98:b1:2a:d7:ab:bd:5a:dc:f5:5b:15:d4:8e:ad:ad:
         aa:ea:cb:71:87:bf:6f:71:5b:db:46:2c:d1:1a:45:f8:8b:e7:
         90:bc:9b:09:6e:52:25:f3:8a:b5:35:7b:75:82:3f:d6:ed:bd:
         6a:45:92:9b:07:94:d8:5a:7f:cb:6a:84:d2:12:85:e8:b5:5e:
         90:a8:b2:8b:60:7f:c2:92:a7:54:13:b0:cf:08:c6:9b:fb:1e:
         ac:9c:6d:4d:9e:43:44:78:54:8f:b5:40:48:73:35:d2:81:dc:
         fb:4f:31:92:73:5f:a0:2d:95:d9:53:4c:b7:2f:ff:ab:14:8d:
         06:9f:6b:6b:c1:88:bd:98:40:60:95:c0:37:17:90:85:d4:c9:
         92:4d:ef:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:46 2025 by rpki-client