Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d820bfa6-d9b8-3502-943e-af359fe603a5.roa
File:                     d820bfa6-d9b8-3502-943e-af359fe603a5.roa (raw, json)
Hash identifier:          vKjNlVz2ZHl9F9zhEJsOBiultMcz3K5r4FD3QD68jw8=
Subject key identifier:   5E:61:04:F5:E9:99:A8:D6:DE:B5:B6:53:42:7D:74:6D:11:91:13:07
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E5BAF56B93DC5B970C58E1400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d820bfa6-d9b8-3502-943e-af359fe603a5.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     11359
IP address blocks:        216.222.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:56:b9:3d:c5:b9:70:c5:8e:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=73a89fe5-d19d-41e7-9869-ce912a4aee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:b5:20:e1:64:92:df:cb:79:c6:e6:c5:db:
                    18:53:a9:71:d9:0b:99:52:10:02:e9:2c:18:5e:37:
                    5a:32:56:42:e8:2c:08:f4:c2:b6:74:cf:af:5d:ed:
                    bb:85:de:33:2d:75:80:b6:f4:f8:1c:cb:27:ed:9f:
                    fe:80:2c:a0:be:2b:eb:58:ca:1a:33:ee:55:dd:88:
                    39:31:be:b3:2a:14:2a:de:d3:67:4d:76:23:ec:91:
                    0b:e4:14:7c:bb:09:97:f3:5f:da:11:55:e3:28:ca:
                    77:66:b0:a0:be:48:bd:96:94:3b:b0:b3:d7:ce:c8:
                    cd:61:fa:3d:11:76:18:a3:2a:e4:a9:9d:b9:7a:19:
                    df:ca:37:ee:0e:b6:26:dc:28:28:61:8d:01:3d:1b:
                    79:48:df:30:ec:c3:f9:ba:5f:c6:21:dd:59:a2:fc:
                    7d:f3:46:42:8e:4a:4a:c8:4b:11:bb:d9:58:cf:d9:
                    28:44:8f:6c:dd:cd:48:7a:f1:ab:2c:e8:f6:4f:26:
                    4c:75:6f:2b:3c:60:84:ee:9a:6c:8d:88:8c:94:26:
                    99:23:af:d5:b3:6c:a5:1d:b3:e1:37:96:7d:a1:88:
                    b0:1f:9e:b6:6a:ca:e8:0e:ea:2d:31:5e:61:77:2d:
                    3e:a1:ce:49:26:2a:11:dd:fa:1a:dd:d2:00:d2:5f:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:04:F5:E9:99:A8:D6:DE:B5:B6:53:42:7D:74:6D:11:91:13:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d820bfa6-d9b8-3502-943e-af359fe603a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:19:44:7c:64:ce:ba:c6:f6:1f:87:55:2f:43:60:1c:51:b9:
         d3:d0:71:09:a2:13:8b:d2:b0:0a:c2:ad:4e:9f:56:0f:2a:eb:
         70:a3:de:94:f8:e8:f3:75:fa:ed:e6:74:34:1d:07:79:81:f0:
         ca:b4:ae:38:41:54:18:0d:30:49:91:90:9b:cd:70:47:f5:d5:
         47:78:56:46:13:57:30:c6:ff:24:a4:7f:cc:17:a1:32:99:a8:
         33:5c:7b:3f:9f:38:e0:c9:a8:33:5d:57:85:41:99:a0:c4:21:
         af:90:11:54:e8:7d:14:6a:fc:a1:f7:99:d5:12:95:bd:2f:54:
         73:5f:ea:d4:94:70:23:13:78:4d:7e:2c:ba:8d:6f:9c:56:42:
         a1:ab:4b:c3:04:16:5b:2d:bd:d0:82:2f:12:60:dc:52:ac:a5:
         af:7d:2c:93:b2:d3:de:2d:b1:4d:a2:70:50:a7:15:ac:7c:72:
         a8:16:ed:d7:f1:48:35:df:b4:6e:07:59:e2:2d:d1:56:9f:03:
         18:a7:c2:f5:55:1e:cb:80:ab:0a:50:9a:d5:52:80:54:de:3a:
         9c:95:53:ad:a0:2e:cf:47:ff:22:00:56:c8:27:ea:0e:54:61:
         c3:e4:0d:2e:44:c8:37:fe:e4:41:eb:a2:9f:0b:bd:69:48:51:
         fc:d6:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:49:47 2026 by rpki-client