Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d0e282-17f0-34f8-b30e-65aff08a8294.roa
File:                     41d0e282-17f0-34f8-b30e-65aff08a8294.roa (raw, json)
Hash identifier:          v/jRymzgSZ9awjcCI47oz17N/GqtcgXe91EGQeZFp60=
Subject key identifier:   8D:45:73:40:52:7A:50:66:E9:5E:A0:EE:E0:89:15:BA:11:F3:A7:AD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FD2E5A25FA57198FCB580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d0e282-17f0-34f8-b30e-65aff08a8294.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        184.150.240.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:d2:e5:a2:5f:a5:71:98:fc:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=856bedd4-b231-4d6f-a62f-687eb0fcd839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ef:04:48:cb:26:a1:26:97:bc:66:fe:e8:29:
                    e5:67:4d:11:75:43:2f:70:0b:8d:f0:ac:cd:46:2c:
                    92:7c:ae:4a:fe:aa:5f:21:16:ce:a9:70:92:03:fc:
                    08:03:e9:21:b6:4f:8a:9e:b0:10:fe:eb:8a:ac:a1:
                    fb:27:cb:c1:22:98:01:cf:da:eb:4d:03:3c:3e:90:
                    78:09:0a:06:00:62:40:eb:cb:dd:80:c7:ac:4e:2a:
                    1c:18:de:7e:0e:c0:fe:e8:d9:ae:39:5a:bf:e5:63:
                    4a:6c:53:59:b4:50:02:60:77:83:9e:0e:aa:ae:c9:
                    99:ff:59:f1:2d:a0:12:55:b4:db:af:45:c9:62:58:
                    d6:63:53:75:8f:12:a0:c5:a4:e5:16:2d:48:05:16:
                    0b:db:52:4c:fe:5e:db:dc:69:3f:2b:db:de:2c:b1:
                    c3:77:fc:bf:b4:a2:d4:ba:27:a6:c9:f4:99:86:f4:
                    bb:5e:79:31:1e:6c:00:a0:07:86:9b:ab:e8:90:eb:
                    3f:b2:7e:d4:01:05:c3:58:e3:6a:ae:f8:ed:f0:ff:
                    5d:b1:42:4d:90:5a:05:5f:b3:06:10:94:3c:71:87:
                    d2:84:bc:6c:2a:6d:31:0b:65:a3:37:f8:74:a9:d8:
                    50:fb:c8:d6:f6:77:cf:79:d7:91:67:aa:90:91:76:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:73:40:52:7A:50:66:E9:5E:A0:EE:E0:89:15:BA:11:F3:A7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d0e282-17f0-34f8-b30e-65aff08a8294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:5a:d4:2e:41:d2:ea:45:7f:2e:b5:b5:91:bb:41:80:af:
         96:a5:7b:00:35:80:d4:04:35:9e:08:77:ae:13:4b:4e:13:23:
         91:d7:46:5c:73:79:ae:04:c5:81:c2:e3:0d:80:90:01:96:ee:
         d4:cd:1a:39:81:2b:79:95:ef:e2:45:73:ab:59:64:1c:f8:1e:
         eb:44:b9:d8:09:d5:fb:41:26:4a:44:9f:ca:07:4f:7e:06:a2:
         bd:05:c0:02:ed:ee:51:d2:38:36:3c:09:53:32:aa:3d:d6:b7:
         22:07:03:b7:71:ef:12:95:3f:5b:0d:49:3e:66:4d:17:ac:0c:
         19:c4:ed:b4:46:50:a0:17:f5:d8:76:71:ee:67:66:18:de:69:
         30:d1:6d:9c:50:55:68:4f:11:e0:22:77:5d:15:b7:09:19:e5:
         14:88:28:4b:9f:c3:f9:0c:1e:4a:01:13:ab:f3:c7:be:41:d0:
         2f:d2:f2:c2:9e:53:84:47:f8:91:92:3e:eb:b6:98:7f:47:a8:
         13:30:e3:e1:ac:51:c5:86:9e:ab:7b:b2:d9:94:fb:6e:63:eb:
         7d:04:6d:54:2f:48:5f:d7:ca:0a:44:fe:9b:b9:65:bb:f9:7a:
         f1:b5:ca:bb:e8:15:ef:ff:4e:03:94:07:55:5e:1c:1a:01:e5:
         fd:45:2e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:54:51 2026 by rpki-client