Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/79584053-6480-36b6-ba05-a038436f1a8f.roa
File:                     79584053-6480-36b6-ba05-a038436f1a8f.roa (raw, json)
Hash identifier:          ZhxI5Jyaj8R0zHk9FVxIFrkf33+7oExbX2o7UoPatt0=
Subject key identifier:   4C:4C:B8:EE:B2:BC:3E:87:EA:8B:9D:6D:B6:BA:DA:6B:2F:5B:DD:89
Certificate issuer:       /CN=0a272229-8b75-460f-8428-1997894397c8
Certificate serial:       010D0C9F4328584E28DEB6EBABD03D12A0B34100
Authority key identifier: C1:83:F9:43:BE:EE:AB:DD:E9:98:38:4E:B9:30:82:68:BC:A7:8B:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/79584053-6480-36b6-ba05-a038436f1a8f.roa
Signing time:             Sat 13 Jun 2026 16:09:35 +0000
ROA not before:           Sat 13 Jun 2026 16:09:35 +0000
ROA not after:            Fri 11 Sep 2026 16:09:35 +0000
asID:                     17279
IP address blocks:        208.86.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:de:b6:eb:ab:d0:3d:12:a0:b3:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a272229-8b75-460f-8428-1997894397c8
        Validity
            Not Before: Jun 13 16:09:35 2026 GMT
            Not After : Sep 11 16:09:35 2026 GMT
        Subject: CN=effa2576-82b2-4487-ba49-5e08968f3254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:31:b4:c7:6d:86:37:ab:54:98:c5:41:0e:
                    e9:4a:61:00:ad:c7:60:4e:e2:66:12:1f:68:cf:c0:
                    22:d7:84:20:95:c4:71:53:34:85:70:70:26:ac:9f:
                    c1:75:11:ed:9b:df:32:51:0b:a8:b1:18:f6:bf:32:
                    e4:7c:e3:a4:22:f0:7f:30:31:52:9a:c7:4e:20:62:
                    83:77:dd:6d:b5:47:0a:f5:cc:3a:af:0b:2b:a1:d3:
                    1d:82:91:d8:b7:e2:13:ec:a9:e3:d6:55:12:f2:fe:
                    08:7e:08:8c:7d:e2:8d:3a:28:ab:08:0b:5b:dd:fb:
                    5a:0b:6c:1c:01:44:bb:ae:ea:d6:85:3b:98:64:50:
                    4b:be:91:99:8b:29:74:09:b7:7d:e3:a9:cd:72:f9:
                    37:98:40:20:f0:c0:f7:5a:e1:f9:39:d0:38:ec:ec:
                    e4:51:8f:b6:3d:59:e4:0f:c5:69:c3:c9:0c:65:58:
                    d5:1f:16:7a:6e:af:71:12:7d:e4:c5:86:b7:87:53:
                    7f:75:dc:1f:90:4b:de:1e:e3:27:bc:f4:65:27:b3:
                    e8:e2:ea:11:fd:2e:19:d6:9c:a0:56:6c:b3:b9:c8:
                    45:b0:04:a3:98:23:65:ee:e2:17:d9:36:67:e8:b3:
                    28:eb:c9:99:4b:e9:2f:6f:ea:57:66:4b:97:32:ad:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:B8:EE:B2:BC:3E:87:EA:8B:9D:6D:B6:BA:DA:6B:2F:5B:DD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/79584053-6480-36b6-ba05-a038436f1a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.crl

            X509v3 Authority Key Identifier:
                keyid:C1:83:F9:43:BE:EE:AB:DD:E9:98:38:4E:B9:30:82:68:BC:A7:8B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:38:20:dc:c7:7e:cc:4e:f8:11:5e:60:24:ae:89:f1:92:
         b5:01:5e:ed:b2:7e:0e:d4:c3:98:59:71:89:49:d1:b6:aa:4e:
         43:1f:4e:8c:ca:02:2c:17:bb:df:45:36:9d:59:1f:a4:2a:e0:
         01:2a:70:83:a1:b5:3a:3c:0b:1d:c8:2e:70:6f:a0:41:7c:5f:
         28:c5:3c:14:c8:cf:69:87:b4:4b:2c:bf:fb:f5:aa:e8:80:4e:
         57:f3:75:97:a1:1f:08:d7:4e:af:27:6a:f4:cc:c4:ab:3f:2f:
         f2:61:17:84:e3:8a:e5:95:ba:3d:2d:98:8c:f1:a5:f7:b9:f2:
         4e:70:59:d3:7f:d0:ff:3a:96:32:2f:a9:82:45:48:14:9e:4b:
         f8:1f:ba:f4:f0:32:f8:6b:ff:22:f8:77:b0:e1:0e:83:d7:09:
         5f:f4:58:15:ca:8c:ad:a3:e3:10:ce:d8:08:11:af:db:91:d4:
         44:b4:09:9c:47:f9:95:1a:b7:29:e1:8e:61:f4:59:5b:ae:2f:
         03:78:49:cb:f4:6f:5e:2c:4e:af:08:7d:1d:b7:10:95:cf:d9:
         4b:24:c7:4c:41:dd:e4:e1:48:de:da:e6:6b:39:44:57:bc:49:
         ff:b1:92:74:8f:45:4f:50:e1:b7:96:75:b8:85:46:78:2b:5f:
         90:08:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:17:12 2026 by rpki-client