Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa
File:                     b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa (raw, json)
Hash identifier:          LIQt1vnd6He/mS9gx1SXSqrVGJqLFYj1a+3pQjvvyX0=
Subject key identifier:   B3:03:B2:65:9F:4D:29:94:82:F3:E1:BC:EC:3F:48:DF:5C:85:FC:43
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584D9A203251DD81E4B2C5FE0680
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     398101
IP address blocks:        184.168.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:32:51:dd:81:e4:b2:c5:fe:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=7de91a92-cf2d-4ad5-af96-0280b3719b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:bc:87:51:51:ec:0e:cf:d8:56:99:76:92:
                    53:bb:20:b3:57:bc:0f:8c:b9:fa:d1:45:e2:30:d4:
                    dd:38:b3:13:f6:3a:4b:09:5e:60:c5:60:99:8e:b2:
                    b4:38:5c:b5:fd:a8:47:3d:00:96:33:78:53:a8:44:
                    27:ce:1c:8e:7e:bc:54:32:7f:9a:af:f5:3d:17:cf:
                    c1:71:85:dd:16:f1:e0:3d:c1:f5:75:e5:e5:8c:62:
                    f8:e4:1b:55:23:65:90:23:83:8c:da:57:de:d8:74:
                    26:14:ad:a8:81:4b:a5:f8:be:27:7f:b5:14:21:74:
                    0b:5d:b9:11:a4:3b:fc:a2:a5:f6:1b:e9:e0:20:39:
                    24:ce:08:d2:85:3d:41:e1:5b:fe:49:fc:b7:1d:3a:
                    98:0d:42:65:5b:e2:eb:5b:1d:55:22:61:81:32:9a:
                    d2:f9:db:14:77:3e:65:74:e1:05:51:46:7b:3b:db:
                    b9:7e:f3:5e:b2:eb:b4:c2:7f:f3:d4:fc:3d:29:dd:
                    4a:17:6c:10:3f:f1:50:5a:84:66:54:bb:3a:c1:4f:
                    71:e8:26:2e:30:6b:7f:f3:74:9e:9c:99:3c:50:81:
                    0b:1b:2e:f1:6b:6c:63:54:67:0e:b3:a7:54:a2:9e:
                    d0:14:1f:52:a9:fc:3f:41:d1:9a:04:8e:db:37:72:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:B2:65:9F:4D:29:94:82:F3:E1:BC:EC:3F:48:DF:5C:85:FC:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.168.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:f9:ba:a2:28:83:12:50:2c:90:0f:6b:29:72:07:85:0d:
         d3:3c:3a:03:e5:31:d5:4d:61:a1:ef:69:35:ae:86:a9:95:42:
         28:b1:0f:40:85:9d:c7:69:10:5d:fd:2d:8a:a7:1e:ac:29:54:
         a7:05:c7:00:73:07:20:0b:6e:cd:23:6b:22:e4:31:96:9c:33:
         6a:7f:bc:9c:27:77:ed:51:fd:d4:d3:59:0d:84:4c:0f:a2:f8:
         fd:32:ea:ec:44:31:d8:e4:e9:de:2d:62:13:22:9e:46:0b:29:
         9c:3b:a9:9e:83:c8:16:33:69:52:fb:da:ac:4c:c2:88:52:d2:
         48:49:b3:06:59:80:4a:bd:c7:f1:b9:d9:63:16:21:0a:09:db:
         28:e3:35:51:c1:17:c7:fd:29:f7:78:0e:ca:71:87:c1:7f:61:
         28:44:0f:b3:a5:55:ba:4b:fe:02:6e:77:af:f6:4d:71:84:02:
         16:0f:75:67:98:a9:87:02:68:13:a3:17:09:2e:7a:5a:b4:f2:
         75:52:38:32:4e:14:be:d5:ed:ab:94:01:2f:ca:5e:13:56:2e:
         c7:9a:7c:98:fc:e5:7b:4e:1d:de:d9:cc:05:2a:5b:67:12:fc:
         88:9f:48:3d:55:89:3c:92:3d:50:4e:fc:82:e9:ad:19:82:13:
         2b:60:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:05 2026 by rpki-client