Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8a3b1a68-acad-37ca-8924-b4808e524d34.roa
File:                     8a3b1a68-acad-37ca-8924-b4808e524d34.roa (raw, json)
Hash identifier:          ZNC9UJVj7Xwur7gdlEQlJKoKUXICEa2xBuPNnQNNXtE=
Subject key identifier:   01:FB:B8:D5:E9:D5:8D:CE:54:D0:04:41:26:FC:39:60:F2:3F:32:FE
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584DC400411FE0DA77B04F28A100
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8a3b1a68-acad-37ca-8924-b4808e524d34.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     25645
IP address blocks:        64.92.92.0/24 maxlen: 24
                          137.239.206.0/24 maxlen: 24
                          2605:8300:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:41:1f:e0:da:77:b0:4f:28:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=ac576d0e-ff0d-4238-8a46-d44167883382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:c1:f6:42:e4:7c:81:1c:ca:8a:89:35:f8:
                    1e:e6:ff:72:79:e0:8f:72:f3:cb:46:92:0e:ac:e7:
                    9c:c9:fe:a9:0a:8b:93:a1:be:b4:d3:99:9b:10:98:
                    b1:da:c2:13:eb:75:e2:5f:dd:15:e7:7c:c2:62:c8:
                    d2:95:a7:28:a0:36:76:47:c9:36:5f:76:66:4f:b2:
                    76:95:04:a2:f0:1e:27:b8:c9:12:b9:b5:ec:64:13:
                    ca:09:d8:23:4e:cd:db:74:3b:87:1d:b3:97:16:cc:
                    10:1e:d4:77:19:0d:c9:9a:01:b4:f3:82:98:e9:37:
                    ef:f3:45:c5:2d:35:90:5e:7b:04:47:11:75:99:21:
                    c1:80:6f:71:7c:25:ad:fb:da:82:c8:7c:cd:93:a0:
                    05:b1:74:6a:92:4b:a0:39:a6:00:79:3c:7f:3f:e2:
                    4e:1b:7b:e0:8e:3a:d1:a3:2e:07:5a:91:96:ad:80:
                    c2:a5:4a:81:64:37:b5:83:2a:bf:22:a6:95:69:4f:
                    93:cd:a0:c1:ec:78:07:7a:05:c1:fd:91:0a:86:2f:
                    1a:9e:42:98:4e:f9:f9:6b:81:00:99:eb:7c:e6:49:
                    68:d3:d1:e4:d9:cd:76:a9:ca:3f:c1:da:07:38:87:
                    e3:bb:21:16:26:9b:e3:7e:16:df:24:3d:ac:e7:a2:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:B8:D5:E9:D5:8D:CE:54:D0:04:41:26:FC:39:60:F2:3F:32:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8a3b1a68-acad-37ca-8924-b4808e524d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.92.0/24
                  137.239.206.0/24
                IPv6:
                  2605:8300:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:44:1a:f1:82:a7:94:e2:7c:2b:d4:26:eb:9d:d8:83:39:
         03:9f:b7:3d:b2:95:b0:17:d9:e2:fb:4f:1f:37:9b:03:c8:88:
         0e:b9:77:69:e6:76:61:10:e0:04:fb:f0:57:4b:10:24:b3:62:
         a2:66:ab:ef:f6:be:32:a2:d9:cf:4f:15:2f:f7:e3:ef:6b:16:
         0b:26:8c:04:1b:59:94:60:91:70:92:31:2c:8b:6b:03:38:8e:
         05:74:21:61:f5:e3:fe:2b:68:23:de:64:d9:de:c0:2b:1c:1e:
         02:9d:88:18:14:13:cf:41:1b:a7:49:bf:11:54:57:ee:22:af:
         96:a7:41:8b:73:39:e8:fe:07:b4:9c:ad:e3:37:24:50:52:0d:
         4b:7b:99:ce:0c:30:3a:2f:ec:cc:35:59:db:36:29:af:f7:42:
         cd:3b:fd:5b:1c:01:91:83:05:bc:aa:15:5c:c7:66:55:f5:76:
         c3:c9:4c:a4:66:e0:f3:71:a8:76:df:85:e6:ec:4d:29:0c:11:
         96:77:0a:5b:c2:75:e7:e3:a1:72:03:13:9c:2c:a2:76:54:94:
         fd:d5:ce:36:4b:41:02:fb:46:dd:09:96:a2:24:01:74:47:74:
         ea:a0:cb:7e:af:d5:37:54:66:68:1f:c6:95:f5:4f:a0:25:cc:
         7a:3a:2d:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:04:44 2026 by rpki-client