Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/1f7bbee8-7f53-39cf-99e5-6b5170d38c98.roa
File:                     1f7bbee8-7f53-39cf-99e5-6b5170d38c98.roa (raw, json)
Hash identifier:          hoAtnNxbI1jfbIwmHYbVsM/l9ER+cb3w0WAIFI3taPE=
Subject key identifier:   AA:A6:C7:26:D3:1C:01:C2:7E:AA:BB:C3:7F:3E:E2:FE:B7:28:C2:C8
Certificate issuer:       /CN=23b9386a-5c2a-4a69-bd44-c9076f51301f
Certificate serial:       010D0C9F4328584EAA518A4B9AF08FFDA73E5E20
Authority key identifier: A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/1f7bbee8-7f53-39cf-99e5-6b5170d38c98.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     36489
IP address blocks:        199.116.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:8a:4b:9a:f0:8f:fd:a7:3e:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b9386a-5c2a-4a69-bd44-c9076f51301f
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=13b6e075-284b-4f6f-90e8-1bb736c2c343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:8f:64:8f:0e:2f:27:aa:33:34:10:2a:6e:
                    2a:1b:ce:e5:55:a8:f3:b1:db:43:81:06:db:48:45:
                    df:14:e2:b6:39:f4:cb:04:fb:b4:3e:f4:b6:e2:ad:
                    70:4a:2a:2e:8d:c2:71:b1:3b:4c:31:63:8a:31:c6:
                    3f:61:d0:76:c2:e3:d1:00:48:50:3e:57:da:6f:52:
                    5a:18:47:5f:0d:8c:72:f8:d9:b7:bc:1e:f8:e7:0c:
                    10:4e:d0:5f:8c:44:ee:68:7a:68:be:27:3f:9c:e7:
                    71:b2:d8:86:88:71:54:df:7b:e7:25:df:89:b3:00:
                    8d:d7:5c:3c:f2:a6:60:59:d2:27:dd:d1:ee:8a:81:
                    b7:db:68:02:88:7a:7c:d7:98:59:64:a4:72:53:7b:
                    0f:67:1d:5f:82:4b:cd:78:75:bb:89:30:29:8c:71:
                    85:1e:07:31:4a:98:13:32:4e:3b:6a:05:26:47:de:
                    3d:b7:cc:47:53:c4:82:58:9c:21:35:d9:0c:0e:ad:
                    cd:f2:8e:9e:f4:9e:cc:1b:6a:6b:6e:93:01:78:ed:
                    db:50:41:ee:de:bd:fa:95:83:8a:62:41:ac:30:f7:
                    9e:68:97:f6:ff:86:98:30:5d:89:af:a5:4c:17:51:
                    14:a0:9f:1a:ab:50:0a:e1:2c:37:68:75:b1:fe:0b:
                    05:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:C7:26:D3:1C:01:C2:7E:AA:BB:C3:7F:3E:E2:FE:B7:28:C2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/1f7bbee8-7f53-39cf-99e5-6b5170d38c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl

            X509v3 Authority Key Identifier:
                keyid:A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:82:e2:a8:09:28:49:29:18:bf:bc:2b:25:09:c8:22:ac:
         1c:cc:a0:56:99:d8:d8:c5:77:e8:1f:57:cf:99:f4:48:8d:bc:
         d8:7c:1c:a2:ed:b6:b5:91:86:96:c5:82:f1:25:f4:53:60:85:
         2f:9f:b4:89:4e:78:62:7a:ee:1c:7f:1a:4e:fb:d1:63:7e:36:
         e7:e3:73:0b:6f:b4:16:be:24:e8:ae:e1:47:58:14:28:98:59:
         88:79:01:e4:ad:43:0e:53:c5:25:74:cc:b7:4c:bb:22:f5:fd:
         7d:2e:1d:04:af:c7:a1:3e:b3:e8:39:3b:d0:19:c6:21:33:e3:
         b9:3a:eb:bd:8d:b9:38:00:12:4f:99:13:a0:35:b5:fc:b0:a1:
         ed:52:03:5a:de:ef:ff:6e:f6:45:79:39:a4:5f:f5:2c:d1:e2:
         9b:32:1c:f9:4a:64:3a:a7:d8:d2:86:f7:da:48:f7:49:26:40:
         f2:3f:f5:d9:4c:f0:21:23:0a:ec:05:fa:e2:f0:55:e9:61:5a:
         1e:33:a0:de:eb:fb:36:04:f0:0c:4a:e3:67:f8:c0:0b:e5:5e:
         d4:07:19:cc:35:f8:17:94:da:df:8c:f8:62:e8:0a:59:d4:2a:
         b0:53:a1:65:83:ed:07:cc:fe:70:90:44:90:0a:c7:df:df:6a:
         7e:84:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:55 2026 by rpki-client