Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa
File:                     d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa (raw, json)
Hash identifier:          W9G/AoAqdQYt4l0ZrZO7MyaSJasXGZSh5uttw2Nn1Bs=
Subject key identifier:   76:B0:DE:49:E9:91:17:AE:6C:8D:E2:DD:CB:B5:5A:6E:06:16:FF:B6
Certificate issuer:       /CN=d332a132-155b-4c33-ae0a-f644ac8eb25c
Certificate serial:       010D0C9F4328584EE97FB580506B1064F9BC3A00
Authority key identifier: BE:B9:44:E1:72:61:02:62:EF:5B:5B:20:CA:3D:5C:7F:7C:1A:74:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa
Signing time:             Fri 21 Aug 2026 16:09:11 +0000
ROA not before:           Fri 21 Aug 2026 16:09:11 +0000
ROA not after:            Mon 02 Nov 2026 05:41:03 +0000
asID:                     36320
IP address blocks:        208.72.218.0/23 maxlen: 23
                          2602:f470::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d332a132-155b-4c33-ae0a-f644ac8eb25c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d332a132-155b-4c33-ae0a-f644ac8eb25c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:7f:b5:80:50:6b:10:64:f9:bc:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d332a132-155b-4c33-ae0a-f644ac8eb25c
        Validity
            Not Before: Aug 21 16:09:11 2026 GMT
            Not After : Nov  2 05:41:03 2026 GMT
        Subject: CN=ad20ba1a-7b51-48c2-9ca4-81a6b6b7a556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:64:21:15:91:89:6f:50:ae:9e:5c:1c:b4:
                    91:41:b9:bf:46:1e:3f:2f:5c:e7:b5:81:fd:5b:0c:
                    da:fe:96:cb:67:0e:60:8a:b4:92:8b:77:35:ab:5f:
                    80:fe:b3:b9:cc:73:c1:dd:f1:4e:ba:d8:9f:57:46:
                    81:b5:c4:38:a1:91:40:15:29:c3:30:c7:19:fa:bc:
                    bf:3b:b7:c2:6c:bc:e1:78:f2:9e:43:f5:40:7b:f7:
                    71:10:92:5f:64:1b:26:ab:95:0f:6f:cb:b1:ad:e8:
                    a6:0e:27:aa:62:cf:49:86:57:89:aa:fa:2c:8b:cf:
                    a3:a6:6c:64:05:ee:63:0b:b6:2d:e8:e1:e5:ec:21:
                    a8:3d:11:f7:a7:76:c6:7f:84:6b:ff:24:7e:fc:98:
                    e5:f8:ac:92:6d:25:11:7c:13:ca:73:9f:7d:3e:ed:
                    43:e8:b7:f1:36:af:4b:8b:6d:56:20:55:3a:e7:99:
                    c0:2d:fa:70:29:a5:04:f3:8c:fb:0f:fc:8e:6e:49:
                    23:69:86:71:65:15:94:9f:a7:b8:d1:90:37:a7:60:
                    1d:90:f5:90:6f:a0:d2:df:fe:b6:a9:00:53:2a:9c:
                    b4:22:2d:21:a2:87:f8:3e:de:8a:ed:39:75:e9:b3:
                    42:ef:8f:79:04:90:aa:39:25:bd:34:87:dc:06:d8:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B0:DE:49:E9:91:17:AE:6C:8D:E2:DD:CB:B5:5A:6E:06:16:FF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d8fecef6-8fd2-3980-a5b3-5459a99f5d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c/d332a132-155b-4c33-ae0a-f644ac8eb25c.crl

            X509v3 Authority Key Identifier:
                keyid:BE:B9:44:E1:72:61:02:62:EF:5B:5B:20:CA:3D:5C:7F:7C:1A:74:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d332a132-155b-4c33-ae0a-f644ac8eb25c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.218.0/23
                IPv6:
                  2602:f470::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:25:33:65:11:c1:59:34:7b:b2:d7:7d:f4:d3:f8:75:13:cb:
         15:96:97:e2:c0:61:8d:5b:3e:17:1d:9e:5c:1a:de:15:bd:80:
         69:ef:bf:b8:b2:c3:41:04:59:9f:33:f2:89:04:8c:06:cc:5c:
         3c:89:b6:d8:3d:16:68:5e:6f:bf:c4:8b:91:d3:67:d6:44:1b:
         95:7b:87:a5:a7:bb:80:1c:c5:5c:fb:af:09:54:64:6c:45:cb:
         87:23:df:74:da:78:63:4d:cc:d9:32:6b:55:25:27:6a:be:59:
         2d:22:47:e2:1c:83:3e:5b:77:71:a1:73:09:46:5e:d4:34:38:
         1b:37:be:81:4c:45:b2:b3:b8:4a:28:81:0a:67:7f:25:5a:b3:
         ea:56:60:24:0b:45:45:73:2e:49:68:fb:f7:89:d8:a0:db:89:
         d0:f7:b2:e4:54:18:d6:b0:6d:75:1d:23:99:6e:1b:fb:8f:45:
         26:55:cf:d9:5f:60:5f:98:6f:9a:b8:a5:01:9e:3a:97:3b:73:
         c2:f4:8f:1a:e8:a1:1f:92:7d:ce:f2:67:69:cb:8e:70:e0:15:
         91:38:cd:14:0a:31:13:fd:8b:10:05:63:65:ac:59:53:78:53:
         c1:91:91:46:ce:33:01:42:8f:f4:97:da:5c:cd:26:a0:72:83:
         30:bb:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:28:27 2026 by rpki-client