Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa
File:                     fb010d6b-7d25-3356-9204-7877f12fc870.roa (raw, json)
Hash identifier:          USrHgvkwSPy1y+Evl4ACYtlmABty6ou4UDKJHg0BCBY=
Subject key identifier:   F7:98:3A:DB:63:5B:FF:8B:C3:0F:09:4A:6F:17:6A:E4:77:38:6B:06
Certificate issuer:       /CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27
Certificate serial:       010D0C9F4328584E7634DCE102FBAAA0AFC76D80
Authority key identifier: 43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     893
IP address blocks:        23.137.88.0/24 maxlen: 24
                          2602:fb61::/40 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:dc:e1:02:fb:aa:a0:af:c7:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=bf72e83c-c08c-4be8-8e07-2417a148517a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:18:95:2c:37:1c:48:91:98:cb:fa:98:ad:
                    07:b9:58:27:b3:0a:92:1e:a7:40:f3:e9:6b:b9:e3:
                    2f:5c:7d:75:6f:e0:5c:52:34:fd:31:a5:45:59:ee:
                    ef:18:0e:72:6f:aa:59:cf:41:33:07:14:e9:3b:78:
                    bc:db:33:eb:02:ac:98:b1:95:68:4a:19:36:46:6a:
                    94:68:51:0e:22:73:eb:b5:f3:71:e6:1a:7f:b1:5d:
                    53:26:76:37:dd:bb:a3:e1:9b:c9:af:47:ab:a4:14:
                    65:40:ca:d4:ff:50:3d:c6:2a:fb:1b:4c:bf:33:ca:
                    c5:d3:93:50:97:8b:aa:97:11:90:76:bd:83:ca:38:
                    ff:45:c5:44:5d:84:7b:86:0a:5a:1b:bc:bc:7f:9d:
                    2a:2b:1f:da:fd:d8:30:91:0b:9c:dd:75:8f:23:f0:
                    a6:63:f8:0d:f2:31:39:eb:09:f6:8b:9e:1c:42:e3:
                    78:fc:80:04:5b:58:da:9c:50:fb:4b:bf:09:26:e4:
                    8c:bf:98:fa:00:cd:11:48:80:99:8c:32:e4:64:d8:
                    bd:f6:ee:46:86:8b:3f:57:67:2b:e0:27:fc:72:4e:
                    3e:9c:4f:eb:00:9d:e8:83:5f:12:b3:27:33:f4:dc:
                    8e:05:60:99:4c:d1:a4:d1:ce:bf:95:51:de:a8:4f:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:98:3A:DB:63:5B:FF:8B:C3:0F:09:4A:6F:17:6A:E4:77:38:6B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl

            X509v3 Authority Key Identifier:
                keyid:43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.88.0/24
                IPv6:
                  2602:fb61::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:68:ea:58:f4:b7:53:82:77:cc:26:0f:f1:eb:b1:29:18:28:
         86:b7:f6:a8:59:60:6b:ae:37:1e:82:f9:dd:5b:0f:d1:23:05:
         9e:61:9d:0e:32:c5:6d:1b:ba:b2:79:ed:84:90:02:05:c9:ac:
         8b:03:63:72:f3:73:69:37:72:78:23:7d:7e:02:1e:87:8b:27:
         b1:e9:3f:e7:67:10:fa:39:cd:de:11:3c:98:9f:69:3b:20:92:
         82:11:ae:f0:a8:8d:42:d3:e4:f8:66:92:ad:db:9b:30:ab:9d:
         8a:6a:79:3e:15:c4:a0:6e:5f:e8:fe:f6:0e:33:b9:16:9d:ef:
         0c:90:5d:6a:d8:1f:5c:05:dc:85:77:27:33:ae:88:49:e9:ce:
         d3:4c:f9:5c:a2:5e:ca:7b:34:95:36:e5:d0:dc:46:b6:9f:dc:
         9d:37:59:dd:dd:a3:e1:28:22:d0:83:2e:62:49:da:4c:10:b8:
         f3:27:ab:ba:7c:21:c1:8f:e7:89:be:c5:91:fc:f6:db:40:d7:
         7b:4f:78:52:f7:fe:ed:9c:f2:0d:50:a4:77:a8:ea:45:c1:b2:
         8b:48:1a:19:7d:10:24:36:40:d6:0b:dd:c7:e0:a2:5c:6a:5a:
         68:97:7d:40:fd:d6:e4:4c:55:93:09:d3:8b:c8:e7:fc:c7:9b:
         30:6f:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:24 2026 by rpki-client