Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa
File:                     5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa (raw, json)
Hash identifier:          l6mhPbiGfnM0vHcrAmCSU3AJM3q42g++IvgoiM0Vv9o=
Subject key identifier:   65:A6:9D:80:EE:62:FF:57:1A:87:4F:92:CE:23:84:50:87:39:E6:93
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584E94EA6017549463C06BC36E80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     2152
IP address blocks:        137.164.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:60:17:54:94:63:c0:6b:c3:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=a9256068-2edb-4f69-a2df-8e7594447ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:42:56:f7:0c:18:66:4f:69:d4:4b:7e:2e:
                    1b:37:4f:65:02:f8:80:89:29:dc:60:bc:ff:1d:59:
                    d8:28:80:77:1a:a3:cb:4b:4e:51:68:c2:2f:fa:00:
                    77:92:1d:d4:75:db:9c:77:a8:ee:98:fc:f7:05:d5:
                    49:1e:73:ee:af:eb:3e:84:20:f0:24:64:71:07:3c:
                    48:b4:41:fc:7e:5e:37:1f:5a:78:82:4a:ea:98:eb:
                    f9:5f:8f:fa:56:8d:19:36:7c:f4:d3:e3:ea:37:af:
                    f9:16:72:99:9f:d1:59:7d:b5:74:94:4e:1c:ed:8f:
                    de:2f:fa:21:92:64:09:71:9f:92:a0:ec:cd:f1:18:
                    50:2f:53:ae:79:b0:a3:5d:9c:68:5b:a1:f3:19:6c:
                    d7:68:22:22:5b:2e:38:f2:db:7f:23:95:75:1a:a7:
                    58:d8:af:fc:df:b1:9d:3c:5f:c1:4b:fc:81:e5:fe:
                    1a:07:87:d9:88:c9:c0:35:bf:00:ca:23:76:2e:00:
                    5d:2f:a2:8b:f0:ee:d1:68:3b:ae:fd:e7:73:f6:33:
                    87:d3:b1:0d:1c:8b:d2:76:53:01:4d:45:c0:69:77:
                    50:2d:a5:70:14:97:ae:5f:29:99:6d:74:40:4a:ef:
                    d7:b1:2a:57:b7:69:8d:9a:2b:e5:e2:69:fd:01:52:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A6:9D:80:EE:62:FF:57:1A:87:4F:92:CE:23:84:50:87:39:E6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:38:7f:60:0a:df:fb:13:a9:67:da:aa:d9:82:91:84:c0:eb:
         fe:c0:51:38:c8:23:b6:ed:c8:ea:fd:24:85:e8:f7:bc:85:3f:
         27:da:5a:79:84:38:93:a9:7d:e2:9c:99:b1:4d:1c:4a:3d:b1:
         91:85:27:86:d0:cb:43:09:8a:42:41:b0:c5:03:42:a8:51:13:
         22:dd:12:a0:19:71:6e:74:d2:19:ef:91:5b:58:3d:91:4b:fa:
         5f:e8:c3:cc:8e:84:c5:a9:3c:d0:88:0e:d9:19:57:bb:53:55:
         59:d4:22:76:87:26:10:68:4d:94:59:ee:1c:b5:e1:5a:97:a5:
         60:74:77:85:2e:4b:76:71:53:cf:90:a9:99:04:e9:59:de:5b:
         c7:4a:24:78:1f:87:d7:05:61:a4:9e:98:0d:e8:76:69:32:f6:
         f2:7a:b1:fe:41:e6:71:7a:7a:07:83:da:70:97:75:59:67:3f:
         01:5e:23:47:4d:d2:5b:c0:09:c3:de:99:67:04:61:1e:a5:d6:
         d3:28:4f:d3:d2:f9:15:b7:eb:41:25:48:90:88:b8:fb:f2:c9:
         dd:ed:ba:7b:81:03:bb:99:5e:ed:6c:a2:f7:56:30:08:e3:8f:
         3e:9f:b2:cc:2a:b2:c3:2f:43:d2:bd:e0:20:17:9e:17:db:49:
         4b:bb:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:35 2026 by rpki-client