Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa
File:                     18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa (raw, json)
Hash identifier:          JSQB8iO1EE3iNgKUZzfFKz3N/4ego/BUJ6Fe/ZS8DAg=
Subject key identifier:   69:8C:DA:EE:94:D8:20:D2:EF:7F:75:32:FE:D1:47:90:46:C0:55:F3
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584EA798D389179EFA0E2F6EC500
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     134365
IP address blocks:        107.151.244.0/22 maxlen: 24
                          198.44.170.0/24 maxlen: 24
                          198.44.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d3:89:17:9e:fa:0e:2f:6e:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=77b3c484-7c2c-4efd-b223-3549d9d08eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:6a:35:bb:19:88:d2:08:8f:7d:c9:fa:64:
                    7d:3f:61:48:fe:85:95:a8:9d:d7:9c:69:8f:75:b0:
                    28:e9:46:33:83:b3:9d:25:7d:50:2a:4b:e5:2e:6c:
                    ee:2f:7e:77:c1:9c:e5:d2:5b:38:80:d2:85:bf:99:
                    f4:81:0b:1d:51:b6:65:e0:63:5e:a4:a4:cb:30:fc:
                    32:cf:ff:6c:26:58:6e:5c:47:27:84:01:27:29:6a:
                    d8:fd:97:ce:db:8d:7f:7a:5c:dc:f3:ee:52:af:52:
                    69:0a:9c:b2:49:cb:92:b9:33:a6:38:58:8a:c2:a6:
                    fa:ac:84:69:61:eb:92:82:fe:6a:99:37:3f:39:97:
                    36:aa:aa:04:70:60:ae:d7:28:71:46:16:e9:aa:22:
                    2b:b5:66:88:54:4a:86:3c:fe:3e:51:c3:f4:e4:c9:
                    d1:42:bb:ca:65:bb:64:68:8c:89:32:d4:a2:53:2f:
                    1e:b5:41:ee:f5:4c:a2:b6:a2:49:58:59:14:37:d8:
                    1c:7c:5b:9b:f6:ec:75:fb:eb:5a:d5:d7:3b:7d:39:
                    26:ee:13:4f:53:8b:29:68:6b:83:c9:93:67:95:14:
                    b8:9b:ec:80:ba:6f:1a:04:b6:86:28:80:1f:ab:7c:
                    82:e6:41:79:4d:4e:24:a1:78:86:b6:c9:8e:d9:a4:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:DA:EE:94:D8:20:D2:EF:7F:75:32:FE:D1:47:90:46:C0:55:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.244.0/22
                  198.44.170.0/24
                  198.44.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:42:ac:a3:8b:08:79:75:c9:f9:5b:a3:ff:62:8f:cb:f3:24:
         c4:8d:2e:ae:9c:2b:a8:67:30:82:92:23:3a:ec:22:9d:94:2e:
         f6:78:68:70:6b:db:97:4f:d3:f3:58:dc:5e:26:71:28:b2:78:
         67:fd:7f:5a:f3:56:17:6e:e3:05:8e:e9:24:2a:b4:26:d4:9c:
         02:27:c2:b9:7a:e4:da:1e:c5:74:e3:48:75:da:b2:05:5c:0a:
         fd:58:b0:71:52:0c:b3:e6:2b:01:d0:3b:0b:47:ae:5d:9b:ba:
         b9:a6:d4:57:27:61:be:5d:54:ef:a0:04:74:7e:e6:77:5a:8b:
         92:46:6b:dc:d4:c2:85:b4:40:8a:d7:eb:4a:04:7e:81:da:9f:
         1c:b8:68:5a:6a:4e:4a:f3:3d:3c:ad:c4:be:1a:a4:05:fc:f6:
         21:a6:3c:1e:5a:f0:6d:20:8d:b5:67:0f:17:c1:16:c9:2a:47:
         a9:06:ef:df:48:9e:8b:99:40:3e:6f:a3:b9:37:70:4f:63:da:
         b3:38:60:a2:b4:37:c1:7e:d0:20:04:66:d8:07:b7:9d:4e:75:
         61:1f:a9:ed:ef:56:b7:20:e3:3d:df:b9:63:55:47:de:96:2f:
         58:74:c3:5b:8a:80:e1:29:9b:61:8c:f1:ab:e6:7b:54:73:97:
         23:32:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:41:59 2026 by rpki-client