Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/2b0af4c0-3cc9-318a-9dfb-d4043c3c724c.roa
File:                     2b0af4c0-3cc9-318a-9dfb-d4043c3c724c.roa (raw, json)
Hash identifier:          fsTBOEFzwixZVZSUXnBWT+cVVz6iS74EMYIybnuvn6M=
Subject key identifier:   A6:49:F1:01:01:90:C3:DB:23:B9:D2:F0:8D:95:A0:1D:0F:52:49:9C
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F4328584E4129DCE9E6AB53BD306EB9C0
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/2b0af4c0-3cc9-318a-9dfb-d4043c3c724c.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     611
IP address blocks:        198.164.35.0/24 maxlen: 24
                          198.164.36.0/24 maxlen: 24
                          198.164.37.0/24 maxlen: 24
                          198.164.38.0/24 maxlen: 24
                          198.164.238.0/24 maxlen: 24
                          198.164.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:dc:e9:e6:ab:53:bd:30:6e:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=49da79c6-4420-471a-8804-20c7ecc2ede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:ec:9f:e2:b5:a1:83:cb:08:ae:72:2f:14:
                    8c:d0:6e:89:0a:67:72:0c:5e:96:e4:6b:2e:77:06:
                    21:c7:8c:ae:c6:e0:f8:e2:44:dd:ab:2b:c1:25:31:
                    1f:15:2d:40:60:38:32:21:1a:d1:fd:cf:3e:67:84:
                    e6:31:73:04:15:5e:2d:40:68:2d:11:6f:43:be:33:
                    f3:b8:7e:df:e8:80:14:7d:f7:b5:86:2c:81:8b:b5:
                    c4:cf:58:a3:3c:cd:2b:d8:60:cb:45:06:9c:96:e4:
                    be:2f:80:b8:6e:2d:c5:b8:32:e6:88:ba:48:ba:69:
                    dc:83:65:ec:36:1c:01:b0:a8:dc:eb:21:ab:14:fe:
                    b5:9c:be:08:05:2e:68:75:9a:57:d0:81:95:72:a2:
                    57:bb:a0:b9:1d:7a:da:91:a5:f5:ed:b5:c4:a0:3a:
                    f7:b0:bb:88:07:b7:76:b7:d3:67:82:04:ed:b2:db:
                    31:a1:a8:77:3d:40:e6:d4:57:c1:a7:68:3c:00:f6:
                    fc:e1:31:03:62:24:82:ba:b2:a9:ac:7a:b9:33:79:
                    8d:84:84:56:62:40:0b:f3:01:27:ef:82:44:01:d9:
                    96:9a:97:44:5a:3b:05:21:14:06:ce:3b:27:83:d7:
                    81:90:a1:72:d6:d4:40:1d:4f:5e:18:95:7b:65:98:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:F1:01:01:90:C3:DB:23:B9:D2:F0:8D:95:A0:1D:0F:52:49:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/2b0af4c0-3cc9-318a-9dfb-d4043c3c724c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.35.0-198.164.38.255
                  198.164.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:16:42:f3:76:2e:82:4e:3b:e4:f7:51:a9:95:50:57:ce:c4:
         b5:65:11:54:a7:3c:f7:ea:c7:fb:1f:ef:e2:d2:ba:ea:ab:49:
         b6:ff:80:aa:d7:fc:f3:64:7d:56:a7:35:f0:53:49:df:80:d2:
         dd:92:c8:96:51:7b:23:68:b4:15:0d:ed:0c:e8:57:f9:58:80:
         ee:8e:50:3d:c5:96:02:71:d6:8a:b6:33:9f:be:10:e1:0a:2b:
         d5:da:9a:74:6a:6a:2f:ce:e3:5b:48:1f:8f:52:58:f0:49:4e:
         a9:34:2b:ac:fc:c9:e3:a4:e9:2d:8a:5e:2a:7c:df:d4:67:c9:
         1a:d4:78:9a:fb:3e:0b:36:17:19:6a:8c:38:da:e3:2b:cb:47:
         f5:55:32:8d:ea:cf:3a:ed:82:65:db:80:36:cf:97:46:74:de:
         8d:ad:c9:6d:e8:08:e5:a8:3b:d2:4c:46:26:7f:3b:8d:a6:4f:
         6b:3a:e3:9e:a3:c1:7a:4f:b0:77:ff:b1:6e:ec:dc:6e:4c:98:
         ef:02:14:93:4f:63:e4:ae:b4:8c:01:99:f1:46:cb:1c:5f:32:
         5c:d8:3f:c1:62:50:20:0d:50:44:83:fc:62:06:2c:5d:e2:b5:
         a2:ac:72:e9:4b:a2:d5:58:b3:a8:b0:62:c8:40:0c:e5:cf:f6:
         53:76:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:53:47 2026 by rpki-client