Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/39322994-ba7d-39d1-ad64-8dfdf0e954fe.roa
File:                     39322994-ba7d-39d1-ad64-8dfdf0e954fe.roa (raw, json)
Hash identifier:          JZqqwyX2TH+a871fXn0hzTklg4iJNoCdct2IlitnyP0=
Subject key identifier:   B5:EE:5B:45:C2:0F:D0:8F:A2:3E:78:40:28:EA:AB:7A:72:3D:26:7C
Certificate issuer:       /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Certificate serial:       010D0C9F4328584E3CF9C5A65267DAEC9D604A80
Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/39322994-ba7d-39d1-ad64-8dfdf0e954fe.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     10753
IP address blocks:        192.228.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c5:a6:52:67:da:ec:9d:60:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=d5ddf573-3b85-44bf-9e0a-72accdfcf500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:66:2d:ca:7d:ce:1b:1a:33:f2:64:63:03:
                    db:8e:3d:ba:97:63:f6:39:45:18:85:9c:57:ba:14:
                    2b:0b:69:c7:05:1a:fd:25:fc:61:7b:a6:85:22:9e:
                    e1:31:f2:f8:c4:13:ce:73:bb:7c:05:ce:f2:26:08:
                    13:6d:fe:4d:40:03:fe:df:21:e2:c7:6b:b9:d5:a6:
                    f2:19:8b:e1:a8:67:21:65:b5:0b:4c:32:eb:a7:31:
                    7e:3e:ae:96:2b:85:05:27:2d:d0:aa:e4:7f:e4:73:
                    09:30:20:32:c2:7b:94:01:42:f0:11:56:19:66:09:
                    55:fc:3e:31:33:02:7a:e6:11:d5:4c:57:90:85:00:
                    a3:6b:00:f9:d0:a4:96:f4:11:40:a9:2f:5a:ed:3f:
                    63:2e:20:de:bb:2e:31:d0:a3:49:f9:6b:89:97:c5:
                    39:7e:cd:cb:fd:5a:c2:ec:97:9f:17:be:1a:4c:79:
                    be:d3:d7:83:78:64:bb:b0:4b:4e:df:f4:5c:a5:25:
                    bd:6f:6a:12:dc:79:ed:f5:1a:f7:40:19:ec:f5:80:
                    23:07:b9:60:5c:49:d5:97:b2:96:85:c2:61:25:c0:
                    91:71:1c:db:8f:f1:c8:3f:2a:48:1a:56:cf:f8:14:
                    ac:f6:a6:8c:7c:19:26:55:0b:3e:4d:24:cd:bd:d2:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EE:5B:45:C2:0F:D0:8F:A2:3E:78:40:28:EA:AB:7A:72:3D:26:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/39322994-ba7d-39d1-ad64-8dfdf0e954fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:a9:f4:ee:2a:73:08:07:ed:03:99:04:d3:56:63:da:b2:
         fc:ea:98:7f:40:b6:86:2b:9a:58:7f:2d:8a:23:82:b0:2c:5b:
         68:ca:7d:46:5f:d1:e1:5a:93:91:05:1d:24:5d:73:4e:a7:f3:
         74:58:a6:f8:78:b5:ef:8e:22:1f:bf:67:a3:bc:80:7f:7b:db:
         50:07:24:28:e3:54:2f:73:52:29:60:54:3b:42:20:82:16:4d:
         b6:ac:54:8b:c7:31:c2:e7:b3:3a:1e:a9:a9:61:22:50:be:fe:
         0b:ee:30:47:b4:cb:98:67:6d:03:59:af:0e:f6:4e:77:d6:36:
         bb:d2:49:c3:dd:3c:48:3e:8a:bd:f5:2e:da:bd:a8:8b:3a:ed:
         37:55:65:a3:b3:af:45:60:70:2e:2d:8a:b8:2a:50:58:20:c7:
         84:c0:77:35:ed:04:bc:54:2e:80:3d:4c:d4:c0:13:67:33:0b:
         2c:cb:0c:c4:e1:73:2a:fa:aa:73:72:6c:c2:18:94:04:21:12:
         8c:6c:23:b0:3d:c6:45:d7:45:fa:79:0e:a5:e5:53:bb:6e:31:
         68:53:b0:78:13:f2:c7:b2:3b:57:0b:d4:2e:33:b1:52:a3:80:
         0e:c9:68:76:33:5b:b7:37:a7:83:24:96:45:1e:26:f9:5b:0d:
         a3:f6:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 10:14:14 2026 by rpki-client