Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa
File:                     72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa (raw, json)
Hash identifier:          gBMcptsHeCo4c0F/eS3c6iXEDDkRCXFLrmHbi7TZ4uQ=
Subject key identifier:   93:80:63:FE:19:D7:08:C9:E2:8E:64:1A:E4:C8:46:FF:4A:20:FE:F4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E2D9F13B2E41B76A1399E6500
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        198.251.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:13:b2:e4:1b:76:a1:39:9e:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=6b8705d3-88e5-4c1d-9209-9b69a820d9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:de:99:a0:6b:45:50:dc:36:58:a5:2d:87:
                    e0:a8:c8:67:82:84:e1:c6:5b:09:a9:6d:a4:55:bd:
                    06:d5:b1:17:77:16:e7:03:14:28:61:ae:4b:79:9c:
                    f5:6e:69:d8:e9:0d:fc:b5:5a:12:f2:c1:eb:c2:f9:
                    f7:a7:19:9b:82:94:71:c7:8e:8b:65:ac:3c:24:9b:
                    a2:9d:40:9f:37:f4:94:53:48:a6:79:cd:37:1c:f2:
                    a7:eb:b5:21:46:95:0c:38:f3:9b:fe:2b:53:73:e6:
                    05:6d:aa:ed:00:00:1b:62:bc:4c:db:a8:0a:af:d0:
                    ee:fa:c1:e6:fd:6e:48:d9:67:bc:9a:39:81:e0:77:
                    65:e0:f3:e8:dc:56:6b:e6:50:c6:ee:18:d6:69:3a:
                    ad:a9:c1:df:7a:8b:3b:00:04:af:e4:b8:f3:10:71:
                    40:09:59:fd:9c:2a:85:a6:6a:36:be:9c:5f:4f:08:
                    6a:5b:de:2a:64:16:be:09:fa:eb:d3:6b:60:1d:1c:
                    a7:23:78:7e:85:44:1c:14:f5:8b:3f:08:9a:96:fd:
                    c3:1e:96:96:95:74:67:21:dd:d7:06:79:ea:ad:93:
                    2b:64:34:30:b6:c5:3b:90:c4:31:f7:7e:90:4a:51:
                    e3:18:e0:ad:38:b5:9c:71:5d:0b:b0:f1:74:38:bc:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:80:63:FE:19:D7:08:C9:E2:8E:64:1A:E4:C8:46:FF:4A:20:FE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:f7:c3:04:74:04:d0:28:d3:a3:dc:c6:5f:58:e7:69:a0:
         a5:21:dc:f9:b5:3d:af:08:d5:28:ad:0c:3b:a0:4a:30:66:73:
         c0:4b:84:f3:75:63:9d:5d:5c:9b:83:c9:04:5f:48:9e:41:4f:
         30:01:26:dc:9f:e3:86:65:12:b4:86:bf:73:79:7a:57:a0:3d:
         8f:6d:f6:93:d6:89:e8:11:40:90:f7:4e:00:a5:34:27:55:8a:
         2a:f3:e3:2d:8f:ab:2a:13:d0:e0:bf:98:d6:23:55:e0:6c:d9:
         8f:5d:a8:cd:d2:0a:db:f6:32:bf:66:23:eb:46:d9:08:7c:2d:
         b4:c0:5c:91:9b:f5:3c:f2:a1:6f:3b:f7:23:5f:26:eb:cb:6c:
         cc:b4:72:f2:e4:b3:5b:fa:f3:e3:a3:0c:38:90:34:f1:a2:f7:
         64:00:23:33:4d:3f:a1:c1:62:9e:80:c9:bf:19:39:2d:ea:a5:
         24:82:91:0f:49:b2:e5:ad:da:e1:ce:3f:46:9e:5e:5d:7a:ba:
         1b:30:87:7a:01:f1:68:d5:85:c0:60:e3:96:26:84:e1:c4:fd:
         9d:aa:47:f9:7e:60:94:7e:9c:03:f0:ca:02:35:0d:de:4a:ef:
         f9:5b:2a:c4:aa:53:9c:db:55:3f:0d:76:f0:87:35:60:0a:85:
         5f:ae:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:09:52 2026 by rpki-client