Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa
File:                     8d980488-329f-3b3d-8944-c85faea82b0a.roa (raw, json)
Hash identifier:          yVe9pM368dfwdMwbrJIYYOxtDfmL05G8MMdF7TIQoUA=
Subject key identifier:   CB:DC:F7:D3:3A:43:17:25:A7:81:17:99:66:A1:F9:B3:6E:04:72:27
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584E5A49F1C1B0FFB4B983CAAEE8
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     203
IP address blocks:        192.136.176.0/20 maxlen: 24
                          204.10.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f1:c1:b0:ff:b4:b9:83:ca:ae:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=b1bf5178-459e-4b92-a6c8-6f7339cb349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:aa:c4:37:3c:73:71:19:e0:50:df:18:9f:
                    92:d0:c4:9d:d1:6b:be:c3:d7:5e:7d:f8:8f:d9:92:
                    d4:31:a7:b3:df:0a:71:90:12:b5:0e:c5:3e:0f:dc:
                    f6:aa:38:e1:64:ab:1a:75:08:eb:b5:4a:26:51:37:
                    bf:6c:6a:19:fe:d8:81:c6:e0:60:d1:c3:6b:9c:11:
                    5c:fc:60:ee:ea:9e:66:6f:19:90:3b:1c:c5:53:1d:
                    68:66:77:e7:bc:60:26:7c:1f:12:b5:b5:27:2e:4d:
                    45:09:b2:3e:76:64:78:38:14:4b:40:8e:99:a2:00:
                    60:40:bc:b7:ae:d6:5d:8b:d1:0f:67:97:af:07:65:
                    5d:5c:8f:61:97:9b:58:bc:4d:8b:f1:f4:cd:7f:19:
                    25:b6:a8:4d:2f:4b:4c:4b:55:85:22:45:4e:63:61:
                    22:69:68:f8:fa:fd:77:87:00:ff:06:c0:fa:51:fc:
                    ef:35:dc:60:e4:da:8a:39:79:e8:8f:b2:08:fd:e0:
                    e0:ed:2f:09:1f:aa:71:9d:24:6e:ea:22:c8:9f:54:
                    a6:2c:b6:13:f0:67:b2:e1:19:70:95:d3:21:24:7d:
                    a2:54:33:04:d1:0f:ab:b7:31:b5:41:f2:be:0d:88:
                    fa:f6:69:7d:d3:9e:8d:a0:d2:0d:23:11:8a:49:d3:
                    ac:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DC:F7:D3:3A:43:17:25:A7:81:17:99:66:A1:F9:B3:6E:04:72:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.176.0/20
                  204.10.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:8c:bd:16:9f:01:15:b8:ce:ca:f1:e6:e4:5d:72:56:db:
         58:83:9c:23:cf:db:56:b5:29:32:c0:b8:3f:6f:08:e9:96:5e:
         57:f2:35:75:4f:6d:ed:89:f4:5b:4d:58:2e:1c:2c:23:a9:cf:
         17:e4:a6:e8:66:28:c7:57:48:4b:0f:58:61:0f:51:38:8d:20:
         4e:06:38:e5:50:8d:7b:fa:4d:18:3f:17:3a:f1:11:13:03:7a:
         37:2a:98:f3:74:e6:03:2a:d6:81:f2:ee:22:d8:7f:49:60:6e:
         33:53:15:e6:0f:fb:d7:27:81:9f:05:a2:78:dd:3d:e6:5e:21:
         60:46:24:8b:a0:2c:2d:80:14:75:2f:89:2e:c4:88:63:d8:6c:
         d7:ae:1a:d5:d1:ff:34:be:30:f4:03:47:b5:07:49:0d:64:9c:
         37:31:3c:2e:00:d8:33:be:a9:d9:4f:eb:33:63:20:31:16:54:
         56:01:77:18:83:ce:18:3c:d3:67:4f:c4:98:9f:c7:dd:7a:dc:
         67:01:7d:37:ea:ba:63:b1:14:77:ed:77:5d:17:1f:07:bd:a5:
         a3:9c:d5:35:62:1a:d1:be:1a:9e:a9:00:66:7e:f1:f3:23:ab:
         ee:40:2c:ac:cc:8b:eb:c7:1b:7e:84:a9:6e:e1:41:5b:47:b1:
         b6:95:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:43:09 2026 by rpki-client