Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa
File:                     8a9eb713-161d-3028-8382-e60a2ef1c07d.roa (raw, json)
Hash identifier:          1wFILsxwqk4GLxesSKnueEzvG65eijpK1NwFRdIY3kM=
Subject key identifier:   3E:DB:D3:AD:45:19:1F:C1:D6:40:AB:1B:51:8C:23:CE:8F:FA:C6:C3
Certificate issuer:       /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
Certificate serial:       010D0C9F4328584E8C8A4466A2A8DBDEF2E2D840
Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     17
IP address blocks:        205.215.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:44:66:a2:a8:db:de:f2:e2:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=8e7469fc-f6b2-4b9e-8755-f03c6343e617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:f9:35:59:70:e1:af:52:66:fb:4f:aa:c8:
                    68:dd:0a:6b:09:7d:c3:8e:f0:e4:fe:b5:66:bd:44:
                    18:36:07:93:cf:f4:1e:91:ed:61:49:60:85:60:8f:
                    34:c0:21:05:6e:5f:6e:c9:01:e8:34:fe:c1:b9:bd:
                    e9:55:ae:e0:72:7c:cc:70:65:d7:ee:ed:c0:0f:c5:
                    5d:96:fb:10:d3:f9:a8:dc:4c:2d:ae:8a:3e:a0:10:
                    43:56:5d:81:26:e4:54:6a:8c:77:7d:a1:fc:6d:43:
                    b2:d0:7c:b4:1c:31:b4:39:28:b7:d3:8c:97:12:9e:
                    0c:f3:9f:8a:3c:23:ff:72:23:8f:de:6b:e8:63:ad:
                    13:16:8a:9a:e9:5a:b5:b7:c1:cd:6f:5f:aa:23:12:
                    0d:a0:24:41:c2:3e:5c:ba:36:e4:d6:29:a5:5e:da:
                    6c:2e:94:38:03:8d:d4:73:eb:bd:9f:3d:b8:eb:0a:
                    a6:b8:70:34:6a:5d:ad:9a:a7:21:fd:32:06:1f:30:
                    7c:52:e5:5b:8d:da:04:86:e2:d0:0b:27:58:6b:9f:
                    ac:ae:7f:07:4c:09:72:97:b1:cb:d1:66:43:23:28:
                    02:9f:bd:50:47:92:15:b8:e4:5b:6a:b4:bf:0c:7d:
                    2c:e4:f0:b8:8e:c3:8d:af:98:35:bc:94:b0:fd:2c:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DB:D3:AD:45:19:1F:C1:D6:40:AB:1B:51:8C:23:CE:8F:FA:C6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl

            X509v3 Authority Key Identifier:
                keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.215.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:07:ad:d2:a1:e1:06:fa:1b:70:a6:56:50:31:05:a4:95:
         0d:79:42:67:02:3c:18:7a:3d:e7:38:91:c7:33:b8:95:aa:41:
         59:b5:fa:7a:80:d6:59:d4:d5:a7:ad:e8:13:69:54:6e:ff:de:
         62:2e:bc:3b:5f:ed:3f:b8:0f:29:0b:86:0a:c6:06:b1:57:00:
         c4:12:d5:3b:5f:ea:52:f8:71:f4:5b:57:92:56:98:c6:5f:72:
         68:2f:cc:17:56:c7:1a:0b:fc:10:62:0a:a3:81:6f:b0:4c:31:
         63:08:66:49:50:92:82:30:bf:a1:4e:38:b1:85:69:88:2e:11:
         e4:c0:71:58:20:58:f7:bd:60:86:b6:75:55:60:43:74:f7:32:
         dd:f0:e0:8f:28:6a:ca:db:b4:50:9c:7a:db:5c:d1:77:9d:31:
         26:68:09:e8:2b:48:fe:14:7a:db:37:3d:dd:12:b6:46:6e:df:
         f6:dc:7d:38:11:db:27:e3:52:88:05:8b:6f:a4:66:d3:b2:dd:
         5a:37:23:80:75:7b:1f:48:59:80:a9:9d:74:aa:6e:63:03:bc:
         53:5c:0a:27:c5:ad:26:7c:99:a5:bc:1c:74:05:ea:70:58:ce:
         7c:36:f2:19:b7:77:72:d3:fd:14:98:4f:49:19:d4:bb:fc:32:
         c5:48:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:55 2026 by rpki-client