Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/92bd98fd-e886-3cc1-a1a9-b7bdb39ad441.roa
File:                     92bd98fd-e886-3cc1-a1a9-b7bdb39ad441.roa (raw, json)
Hash identifier:          p5qvrZM+G8FG3OCP+MKydu+sF48OCRDEc86Rn975bw8=
Subject key identifier:   CE:7B:AD:50:50:9B:B4:A6:AA:80:D7:32:A2:15:55:CE:86:75:C4:90
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584E5A49EDC00BDFAB67753658C0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/92bd98fd-e886-3cc1-a1a9-b7bdb39ad441.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        204.11.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ed:c0:0b:df:ab:67:75:36:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=b762c4e7-751e-4699-bd1d-c320f7ead0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:59:8c:76:b7:9b:53:bb:eb:b2:fa:9d:02:6d:
                    f2:6c:7b:0b:23:8b:5d:50:60:a7:2a:a1:f3:c2:7d:
                    ef:4d:67:8f:02:9d:40:73:63:9e:68:1d:72:b2:7c:
                    4d:42:93:89:5d:84:6b:72:c3:2d:dd:f7:66:08:36:
                    8f:7b:a1:a3:93:72:e7:fd:6e:c8:12:8d:a5:09:a8:
                    05:36:9d:2a:37:62:bc:84:54:1c:da:23:13:c4:2c:
                    23:a1:ab:f6:11:dd:3a:99:b6:a9:c9:61:cd:97:c9:
                    b8:0b:df:a0:92:f9:45:b9:8f:59:f5:a3:44:2b:6e:
                    62:10:e8:84:36:9d:d5:1c:63:80:06:71:01:52:74:
                    54:26:6e:67:ba:98:ab:b9:53:05:ed:9b:b9:fb:6b:
                    ed:13:54:85:81:31:c9:b3:e0:1b:6a:55:3d:d4:e3:
                    bc:03:32:f9:9b:ae:39:51:7c:05:b9:ce:12:6c:58:
                    42:e9:f7:c2:3e:5d:74:8a:13:bd:81:35:ef:e8:11:
                    91:9d:42:71:28:07:68:8b:96:b5:c3:d8:67:c4:f8:
                    6c:59:0a:05:8a:e4:10:07:48:13:b2:dd:3c:8a:6d:
                    36:e4:19:23:51:bc:74:b7:53:d0:bc:a9:78:f2:d1:
                    c1:23:7f:bd:35:13:67:6a:af:e7:cb:79:b6:61:41:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7B:AD:50:50:9B:B4:A6:AA:80:D7:32:A2:15:55:CE:86:75:C4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/92bd98fd-e886-3cc1-a1a9-b7bdb39ad441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:99:38:e3:a6:3a:28:cc:56:fa:c9:2c:4c:c9:9a:4a:4c:be:
         b3:58:11:b7:13:a0:ec:da:69:51:be:b4:e6:90:af:b3:8e:3e:
         35:af:64:28:60:a6:89:49:07:f8:ec:1a:3c:96:9d:2c:70:58:
         6a:a3:e8:de:6f:c9:04:c4:6a:6b:0a:bb:77:e0:05:6c:cb:9c:
         0e:77:5c:0c:91:e0:9e:0e:5b:51:cc:80:d6:61:73:15:8d:fe:
         4b:00:66:d0:fb:51:9b:9b:37:ff:6c:d2:43:40:a6:74:2d:5e:
         c0:fe:7d:70:46:88:9f:65:3c:23:7d:b5:af:11:b4:aa:c4:6d:
         81:ac:ed:13:ea:dd:6c:a5:ca:50:d9:76:91:fc:16:28:74:a7:
         70:4d:df:b4:64:76:b4:3b:b0:0b:28:d4:8d:0e:25:ed:a8:cd:
         b1:0f:6d:b2:11:6e:64:44:a6:cd:f0:82:f8:c3:f3:9f:1b:33:
         f4:12:56:b3:d1:cb:42:0b:af:1f:d2:b4:6f:e7:7f:f4:f6:07:
         d6:7c:00:3a:6c:5f:66:68:0a:59:1d:83:3b:a0:ce:6a:d4:3e:
         ae:97:f0:cb:12:f0:17:06:86:0b:fb:c3:5d:cf:8e:ba:e0:01:
         99:0f:7e:73:10:10:46:13:b3:40:69:0a:95:dd:b2:1c:2f:8a:
         b8:d9:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:10:48 2026 by rpki-client