Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa
File:                     e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa (raw, json)
Hash identifier:          akwAAAM8uamAme6ur2Qo4LSZfG7AxFGJS9+/97ve8Mw=
Subject key identifier:   0F:E1:68:9E:D9:1F:85:E3:C1:2C:5C:F1:9B:5B:1C:05:4C:BD:7E:07
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584E5FDF5EA0FC4A3365857B3080
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     21949
IP address blocks:        207.22.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5e:a0:fc:4a:33:65:85:7b:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=34ff76cd-08d0-482f-82ed-ad4c037c34ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:10:f5:de:dd:7d:4d:61:43:80:8c:05:c9:
                    7b:64:97:59:de:77:88:95:06:9a:88:ed:fe:fe:f6:
                    ad:38:53:ea:7a:7b:3a:69:65:a0:62:1f:63:27:ca:
                    dd:32:fb:db:28:53:1c:4e:be:91:af:5c:ce:00:ea:
                    09:93:60:c2:98:9d:e5:c8:96:ff:db:4f:eb:a7:7e:
                    46:33:74:e1:a4:96:75:64:a1:e5:2b:83:10:e8:ac:
                    b2:31:57:cc:dd:ed:82:ae:66:e6:0d:0c:71:ca:6e:
                    b2:d1:b8:74:87:a2:0b:b6:37:93:e0:94:83:b6:d3:
                    2d:80:3e:67:a9:4f:f0:7a:f3:f0:d6:6c:69:33:63:
                    41:5f:3f:22:67:46:b0:39:ce:a5:25:7b:9a:56:99:
                    44:6f:25:9c:9e:99:51:c8:a2:ac:c2:f6:75:e1:b8:
                    68:5d:4a:6b:d1:31:55:b7:f7:2a:f3:c3:6e:2c:5e:
                    2d:4c:88:b6:53:b8:1b:37:ae:54:cb:b3:39:fe:e8:
                    09:19:33:23:44:1f:fd:5a:b6:b1:8f:01:5c:cf:6b:
                    6e:66:18:46:04:2d:9d:f2:92:22:8f:26:a1:25:66:
                    8a:ea:3b:90:72:0b:4d:3f:63:0b:2a:9c:08:af:42:
                    77:2d:90:7c:12:5d:22:11:02:93:f3:de:36:08:a6:
                    30:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:68:9E:D9:1F:85:E3:C1:2C:5C:F1:9B:5B:1C:05:4C:BD:7E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:6b:60:60:85:87:96:d6:2d:99:a4:eb:dd:c8:0c:a1:7b:
         a4:26:a0:97:31:1e:85:ff:71:b4:5e:99:df:42:31:a7:f3:31:
         d1:c4:11:8c:c4:f0:ff:07:03:fc:42:fe:51:57:59:a2:9e:18:
         24:bb:6f:23:79:36:50:2b:22:6c:8e:83:91:e3:68:17:7b:53:
         68:3d:c3:12:18:23:22:aa:7e:b2:9d:34:60:bd:6c:56:17:1b:
         d7:c2:17:5e:15:d1:c0:3a:d3:8c:39:1a:42:e8:1b:5a:dc:c4:
         f5:eb:c1:20:c3:6f:67:d8:c3:44:dd:32:b1:98:51:cd:eb:46:
         6b:2a:3a:18:48:2c:bd:4f:a8:9c:b0:68:8c:99:30:10:de:91:
         50:3d:a0:d4:dc:e3:2b:e2:c8:66:c1:35:29:0d:3b:dc:bf:a3:
         6e:6f:55:5a:62:ec:02:dd:90:1f:d8:e4:02:a7:93:40:bd:d8:
         0b:e1:85:51:9f:cc:65:d9:9b:46:07:2a:e2:a4:a4:eb:4f:14:
         e1:15:34:d9:ea:8b:3d:8d:fd:c3:15:56:d6:da:a4:b3:1f:55:
         17:32:8c:ff:4b:2e:36:d3:9f:28:0c:75:ef:d0:c7:cb:3a:4c:
         55:9e:2d:d6:f2:e2:04:56:86:93:7e:2f:5f:9a:97:e6:aa:38:
         75:fb:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:00:27 2026 by rpki-client