Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4/b6718df3-4901-3e0b-a7a7-514e24ca650b.roa
File:                     b6718df3-4901-3e0b-a7a7-514e24ca650b.roa (raw, json)
Hash identifier:          r6pMx80dTUZyvEhsWYohqGTgRJPvbxyiEh/kEYGo+00=
Subject key identifier:   87:82:91:66:F0:0C:B4:07:29:E9:C5:1B:DD:F2:A8:75:AA:8F:39:43
Certificate issuer:       /CN=737554bf-4f99-4277-a9e6-2b63e303c2e4
Certificate serial:       010D0C9F4328584EA794280D5FDABB1FE5D9AB00
Authority key identifier: DB:F5:58:9B:48:39:A8:D5:19:E4:1D:3C:13:B5:EF:33:7E:4C:1F:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4/b6718df3-4901-3e0b-a7a7-514e24ca650b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        204.126.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4/737554bf-4f99-4277-a9e6-2b63e303c2e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4/737554bf-4f99-4277-a9e6-2b63e303c2e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:28:0d:5f:da:bb:1f:e5:d9:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737554bf-4f99-4277-a9e6-2b63e303c2e4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0cc277f3-8146-4a5f-a179-70e0f43bc6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:60:be:d2:4d:8b:77:73:98:0d:15:04:29:
                    c8:20:30:d1:67:b6:06:76:db:62:4d:f0:4b:7d:e7:
                    67:c5:b8:93:1e:3d:8b:7f:65:b9:20:42:47:02:a2:
                    ea:ea:50:cc:b4:90:8f:36:b9:0b:80:12:29:8e:04:
                    ca:eb:c5:8a:94:49:03:ca:d6:bd:35:af:d4:ea:23:
                    43:87:94:3e:b8:17:65:d6:6b:09:40:8d:c6:10:dd:
                    10:bf:60:e5:b2:c5:17:cc:b1:f5:53:e5:83:69:27:
                    5d:84:39:7e:89:80:f4:f2:97:89:35:30:33:16:ca:
                    c2:92:43:cf:92:10:aa:e3:da:ec:42:75:05:8d:c5:
                    51:5e:29:09:eb:72:ae:da:26:22:5b:3d:af:9c:78:
                    c3:65:38:62:c9:41:07:23:c0:b2:50:bd:9b:f0:81:
                    7d:38:56:c4:b2:16:19:4d:fa:83:31:ed:05:60:fe:
                    29:60:71:98:ef:bd:c7:c7:07:c7:21:8f:70:84:78:
                    63:20:cb:3f:94:98:c3:15:6c:20:89:4e:b1:27:12:
                    89:2c:88:28:93:94:8b:8f:dd:a8:28:88:90:35:e2:
                    39:4f:33:54:49:1f:a6:c0:af:af:99:5c:84:34:bf:
                    70:55:d2:64:1c:c1:07:e0:9e:df:f9:c0:fb:42:c5:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:91:66:F0:0C:B4:07:29:E9:C5:1B:DD:F2:A8:75:AA:8F:39:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4/b6718df3-4901-3e0b-a7a7-514e24ca650b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4/737554bf-4f99-4277-a9e6-2b63e303c2e4.crl

            X509v3 Authority Key Identifier:
                keyid:DB:F5:58:9B:48:39:A8:D5:19:E4:1D:3C:13:B5:EF:33:7E:4C:1F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/737554bf-4f99-4277-a9e6-2b63e303c2e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:fc:b0:d0:29:fc:f6:01:45:7b:5e:51:fe:90:52:1b:eb:
         68:ba:d7:6c:fd:0e:e0:ad:d2:75:dd:9a:eb:25:43:a7:9e:ae:
         29:22:dc:38:4e:13:72:52:84:c8:94:ef:71:6f:18:30:91:8c:
         95:37:23:a8:f8:63:8f:f0:2f:f1:61:32:52:5d:dc:c0:14:2c:
         cc:98:f5:c8:7c:e4:02:cc:6d:87:36:8e:14:2e:c2:d9:29:80:
         c2:5b:91:4f:34:66:fd:97:1c:8b:28:f4:67:26:57:be:c8:a6:
         8a:3e:1a:c8:d0:62:a2:d0:55:73:49:d6:35:67:f7:cf:ba:e0:
         d0:64:a9:60:58:04:c5:a5:7b:da:e0:0e:7a:6d:8c:12:98:92:
         3c:3e:95:b4:4e:28:01:e6:b3:bd:a4:50:f5:d6:5c:44:47:fd:
         98:c2:c8:cd:c2:26:73:2a:44:e1:19:61:e8:14:92:22:38:db:
         cf:3d:cb:12:b2:10:6c:e8:a2:b2:b3:31:a6:84:30:34:71:c4:
         57:a6:8a:1b:10:b5:32:fb:5e:67:cf:46:aa:c8:05:62:73:58:
         f6:47:eb:ea:ee:00:40:a0:b5:15:3d:c2:60:ab:d1:d3:02:1a:
         f0:e2:86:a4:5b:6c:ae:b5:6c:e2:c5:af:8e:1c:c7:09:f2:a3:
         be:44:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:00 2026 by rpki-client