Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa
File:                     42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa (raw, json)
Hash identifier:          LqcVARVrFYDA8B/kvkR3yTCeS3H7pgikNly3DV2+wWY=
Subject key identifier:   09:48:52:33:33:63:3E:76:15:BC:D3:D3:19:64:C2:63:AC:49:89:D1
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E5D14A6D592F17DF4CA6ED2C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     10753
IP address blocks:        200.229.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a6:d5:92:f1:7d:f4:ca:6e:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=f0d42ce5-4fcc-4e9a-b353-b89b91c9f7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:00:36:e4:ee:b5:20:61:c5:55:16:42:6a:
                    ca:9a:f9:cd:08:05:76:db:c8:01:f3:c8:bd:a8:14:
                    e1:b2:22:22:c0:96:96:44:66:27:7e:8a:7c:2d:b7:
                    89:c9:17:3f:9b:c3:03:87:57:be:27:4f:d5:8c:49:
                    57:b7:b9:15:0d:f3:9f:14:82:4c:90:8b:44:de:6d:
                    4c:6b:08:d2:95:26:12:6d:bc:33:9a:83:f5:3c:7e:
                    2c:3d:af:76:45:1d:6e:df:fe:03:06:d4:c7:04:37:
                    b9:8a:b6:e7:57:41:f8:f0:42:d0:12:2a:6f:af:f2:
                    55:e1:97:45:6c:53:92:b5:53:3d:1e:ac:cd:0f:cf:
                    86:bf:0b:6b:17:c9:eb:ad:ee:a7:09:98:02:10:7a:
                    db:b1:46:5d:6e:10:35:f1:99:6d:67:b8:a5:8a:c2:
                    c8:a8:25:96:3b:39:0f:74:7a:e6:24:68:9a:eb:ce:
                    b2:a4:47:71:d2:2c:ec:f1:87:90:89:54:57:9b:5a:
                    b0:d2:1a:07:0d:e2:70:b4:39:de:df:af:fa:6d:1e:
                    06:39:64:0f:25:27:1b:21:49:8d:eb:c7:72:d0:c6:
                    ac:d1:51:67:c6:5e:75:6b:9e:50:15:a5:b8:4b:d5:
                    0a:b8:16:b8:83:23:a7:89:93:04:a5:c0:1b:9f:ee:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:52:33:33:63:3E:76:15:BC:D3:D3:19:64:C2:63:AC:49:89:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/42ecb8f5-eb8a-3fac-ac02-0dee7b134de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b7:2a:d5:a9:d0:fd:b2:93:22:b8:d1:7d:95:d5:ec:4d:88:
         c7:ac:dc:61:1d:ee:cb:aa:d6:bc:26:67:5d:08:93:0c:bf:8e:
         69:73:3a:ae:c0:09:da:52:99:a8:ee:83:15:ae:20:26:ad:f7:
         3f:ce:82:4e:e4:77:b5:4f:15:40:a1:12:13:d6:94:ca:e3:63:
         77:72:8b:08:0d:30:90:9d:74:c0:67:b5:de:e8:7b:c2:4a:5e:
         ea:64:85:0e:6e:84:e9:a5:c9:0f:77:48:e2:06:9d:4a:23:a4:
         85:6c:ce:c1:91:e6:7c:b7:d6:84:5c:87:5e:a1:01:8d:60:fa:
         62:eb:9d:27:a0:ae:11:71:f9:e2:c9:e3:75:cf:09:cd:40:92:
         5c:2f:ff:68:7e:b9:ac:a4:5c:62:64:3e:ec:ca:7d:3f:08:89:
         f1:be:73:c3:cc:a4:83:f6:5a:9d:0b:60:d5:f4:23:f6:69:39:
         17:1f:b3:e6:5d:ec:8a:64:5f:51:9b:3e:2f:b7:02:9c:d5:a3:
         a7:ca:d7:74:15:6a:6d:28:d1:65:db:eb:fc:15:94:1c:48:f7:
         87:db:05:ce:ec:36:bd:08:ca:dc:f2:43:e0:94:f6:da:6f:4d:
         78:e4:22:69:20:71:47:1b:39:fc:66:f0:0c:e7:10:d0:f3:43:
         da:0a:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:08:47 2026 by rpki-client