Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa
File:                     9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa (raw, json)
Hash identifier:          q8o+cn6/+p8K8GS4vqMNvtj7CkJHZwwGfaHXFeydZyg=
Subject key identifier:   2C:8A:10:AB:BE:9B:14:CF:56:D5:3E:B5:75:56:E9:5A:A2:63:CD:A5
Certificate issuer:       /CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1
Certificate serial:       010D0C9F4328584E3B947D3D038D3AA910B27C10
Authority key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     11062
IP address blocks:        162.252.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:7d:3d:03:8d:3a:a9:10:b2:7c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=a592aa11-17c8-41f9-83bf-cc17e6821bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:0b:0e:e6:b5:c9:eb:15:fa:42:1a:72:f5:
                    76:92:b2:a0:8d:48:bb:01:57:98:20:7f:dc:ed:be:
                    e7:e6:c3:c2:11:26:59:6f:80:dc:75:23:f3:a7:52:
                    b9:8c:31:3c:fe:fc:16:85:57:c2:a9:c7:36:b0:5a:
                    2f:37:cc:df:84:e7:10:73:18:d8:47:00:1d:98:bf:
                    16:c8:51:b6:45:32:d0:3d:22:14:2a:fb:34:2f:b3:
                    64:64:e9:14:ad:1b:42:5d:33:12:5d:91:fd:34:e5:
                    2d:52:db:21:a9:7e:86:45:be:c0:56:a1:7d:77:12:
                    0b:f8:db:41:33:61:cc:47:fe:94:03:0a:75:44:9f:
                    2d:a2:87:10:81:20:e6:30:de:7e:0d:78:3c:a9:aa:
                    ab:4e:55:1e:c2:ad:cb:76:b0:bc:fc:71:b6:88:71:
                    3a:f4:b9:0c:b7:d1:d8:a4:5a:64:4a:67:34:0b:47:
                    0a:37:9d:63:5e:4a:bb:8c:5f:53:98:a9:05:2a:5d:
                    20:c7:0c:67:28:4f:37:d1:eb:4e:6d:5b:90:7e:9a:
                    33:38:a9:54:52:b3:79:60:b9:07:ae:29:5f:3c:32:
                    6d:a7:71:4d:e1:81:4c:e5:87:33:c9:5d:f9:f2:6b:
                    60:83:e5:f6:9c:23:a7:cf:4a:7b:6d:e9:18:37:76:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8A:10:AB:BE:9B:14:CF:56:D5:3E:B5:75:56:E9:5A:A2:63:CD:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl

            X509v3 Authority Key Identifier:
                keyid:D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:eb:b1:61:60:d4:8f:2a:4b:5d:9d:6c:e9:bf:1c:d0:e8:
         d1:96:f2:94:ff:e1:41:80:b6:b4:f8:8b:af:89:e9:0b:fd:20:
         c6:24:cf:63:89:8d:26:ff:78:8a:73:f7:6b:4e:82:00:47:f4:
         f1:9b:7b:2e:72:f8:13:46:db:31:15:90:66:40:ef:a5:8e:2f:
         b9:de:8e:ba:d9:34:93:7e:c8:5d:16:e2:f2:0e:34:fb:62:f5:
         f6:a3:0f:2c:17:a1:32:ce:e5:4b:1d:17:dd:bf:49:77:be:bb:
         3d:ad:81:db:9b:0a:f9:f5:72:48:28:88:21:62:ba:c2:55:b7:
         75:4e:d4:a4:3c:fc:8c:65:a5:34:47:69:06:5f:b3:08:e7:9c:
         8d:48:8a:b9:62:c8:06:c0:bb:bb:77:55:f5:a8:fb:37:b5:44:
         48:70:b7:e4:2c:fe:2f:a5:80:3c:88:7c:e1:a1:ec:eb:61:55:
         7f:00:e9:7e:c4:34:b5:c7:b3:27:3c:69:c0:27:eb:80:81:b6:
         e5:fd:ce:46:86:7c:32:4e:76:93:91:4f:a9:5c:84:c4:f1:fe:
         1c:6a:5c:45:c0:5c:ef:c4:41:38:8e:ed:a9:65:38:14:11:cc:
         19:32:c8:04:0a:f0:95:3d:98:4f:83:e4:9a:ba:80:2b:cc:2d:
         0d:3b:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:35 2026 by rpki-client