Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa
File:                     40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa (raw, json)
Hash identifier:          gH+YAqBUzEM6V4Nl5MMzeGNtdkQOWcvptrwc5r9cdcA=
Subject key identifier:   0E:FD:2B:EC:B1:08:EF:91:EF:F6:55:97:6E:CA:0C:2B:E4:32:1E:19
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E3E5F3682C76F3ABB21FAE408
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     25899
IP address blocks:        199.193.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:36:82:c7:6f:3a:bb:21:fa:e4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=509185b2-b473-4527-909d-2ee3a45c2527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9f:a7:3a:08:fa:39:84:f0:2a:09:c7:a4:ee:
                    7d:17:f6:2a:8d:4a:fc:0a:30:8e:2c:88:59:7a:6a:
                    f8:ab:e5:0a:d7:3a:92:b4:d6:75:3b:22:f6:0d:3b:
                    44:7f:6f:ba:4c:7b:d8:5d:73:f1:22:d0:31:f0:6d:
                    4b:bf:58:95:42:c6:25:a2:fe:8b:9f:45:b2:96:03:
                    e1:cf:21:21:69:02:9b:b1:60:9d:cd:51:58:f7:06:
                    44:67:57:b5:89:b7:cf:e8:72:e4:51:39:f1:29:49:
                    31:31:74:37:05:8a:be:37:ff:3b:d3:ba:6a:17:e0:
                    83:60:0f:76:ee:27:13:c2:01:b8:a3:49:e0:3a:b1:
                    36:41:42:78:71:72:3e:2f:2b:63:43:63:31:c9:7d:
                    37:15:d0:4d:9f:8f:10:68:a4:2b:56:a1:f7:3a:72:
                    f6:11:90:82:8d:a9:c2:63:34:2f:1b:16:13:c8:ba:
                    71:87:a6:2f:38:fd:c7:16:8c:08:ec:be:f4:37:6b:
                    0f:9f:b6:ad:84:92:9c:42:de:82:fe:65:e8:81:8e:
                    78:e8:62:29:62:03:19:a6:23:61:a9:f8:8c:81:0e:
                    ec:62:b2:18:c1:27:77:5a:b3:92:30:dc:73:e3:10:
                    6e:10:c7:3d:5e:67:d0:b3:66:85:f6:db:19:90:ac:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:2B:EC:B1:08:EF:91:EF:F6:55:97:6E:CA:0C:2B:E4:32:1E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:00:65:36:76:66:ec:e7:2b:ec:e8:2c:46:44:6e:20:2e:
         47:92:f2:3d:3e:14:45:8c:b8:3d:86:70:bf:f8:3c:05:e6:89:
         2e:1e:d2:25:ac:a0:56:b6:43:74:62:ac:02:ed:c9:c4:d6:e1:
         20:11:a2:01:92:53:f2:62:8d:27:ac:27:39:14:a9:1a:63:0b:
         95:46:bf:c3:e0:21:94:63:95:ac:79:16:af:0b:35:1c:a8:59:
         69:6b:46:f3:41:be:7b:e5:d4:e2:05:0a:90:f8:3b:ce:2d:0e:
         fb:3c:d0:ea:12:fa:53:0b:08:37:ad:8a:98:0f:22:ac:42:5a:
         09:9e:76:f9:3b:c2:98:0c:10:dd:6b:1e:2d:e8:2a:a9:17:e0:
         c0:a1:d3:a6:3a:b5:de:c3:3d:13:84:59:81:7c:6a:18:4f:66:
         6e:17:c0:ce:7f:69:a9:75:be:32:53:17:9d:a6:8f:4c:2c:2b:
         c5:62:83:8b:b1:ef:e2:43:01:07:65:6f:84:27:36:4f:6e:e3:
         1d:e2:ac:fe:5e:7a:0a:01:38:4d:40:85:43:f5:a6:73:be:98:
         07:4e:6c:74:cb:a2:8c:69:be:9e:61:3b:ac:27:17:9e:13:1d:
         a6:bd:c6:05:8a:3e:64:af:fe:06:fa:ef:37:18:17:c5:86:47:
         9e:ad:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:51:18 2026 by rpki-client