Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/ccb03dad-ff0f-3f03-a4ea-092ab39591a2.roa
File:                     ccb03dad-ff0f-3f03-a4ea-092ab39591a2.roa (raw, json)
Hash identifier:          7Rhcqpw4wsSnWNVfvYIrbQ1D8bjENoalEifZqvwtMQY=
Subject key identifier:   C5:7C:35:7C:AC:A9:CF:E8:8E:E8:13:E5:01:68:E0:7A:A4:27:D4:01
Certificate issuer:       /CN=1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a
Certificate serial:       010D0C9F4328584ECF983E17C09FA1ADE76D5680
Authority key identifier: F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/ccb03dad-ff0f-3f03-a4ea-092ab39591a2.roa
Signing time:             Wed 12 Aug 2026 09:27:35 +0000
ROA not before:           Wed 12 Aug 2026 09:27:35 +0000
ROA not after:            Tue 10 Nov 2026 10:27:35 +0000
asID:                     16509
IP address blocks:        140.232.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cf:98:3e:17:c0:9f:a1:ad:e7:6d:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a
        Validity
            Not Before: Aug 12 09:27:35 2026 GMT
            Not After : Nov 10 10:27:35 2026 GMT
        Subject: CN=9a4aa7f3-b962-468a-b9f4-83aaa25f0d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:12:2c:48:e3:90:2d:85:b7:15:72:ce:db:
                    06:bb:bf:6d:bc:ae:bd:b3:5f:31:9a:c9:cf:dc:ed:
                    42:8c:05:7d:c9:bd:4e:61:87:07:9f:a0:88:82:7d:
                    ed:15:0a:8e:8d:87:b6:6e:f7:cd:66:78:b4:7e:25:
                    12:14:0a:7c:de:d0:75:5f:7e:1e:5f:d0:ad:c4:84:
                    b8:5b:9f:58:a2:97:08:1b:a8:8e:be:af:31:c1:82:
                    48:ed:33:93:47:33:78:47:6d:de:a9:ff:d2:bb:b8:
                    67:a9:64:55:ae:cc:4b:6d:54:9d:54:e0:fb:9d:a9:
                    34:53:3e:66:c0:ac:9c:68:4b:d9:80:6a:59:f9:9e:
                    73:89:bb:9b:e7:46:4f:70:8e:09:e3:a0:ae:c6:33:
                    b9:19:89:ea:10:22:96:b6:58:26:31:78:e4:8b:83:
                    6d:75:83:16:e0:f9:2f:fd:54:ac:26:b4:4e:33:d0:
                    b1:3c:ae:31:d7:58:ad:14:45:03:e5:e6:2e:92:d7:
                    4e:8a:ec:30:49:1f:fa:1d:98:dd:ca:6d:b6:d3:84:
                    87:14:72:66:4e:96:51:6a:e4:62:8d:8f:42:83:76:
                    c3:fe:b9:3c:d9:6a:0f:7a:f4:aa:62:13:1b:be:28:
                    81:66:1f:a5:77:c8:b9:dc:36:ae:97:a6:1b:0e:de:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:35:7C:AC:A9:CF:E8:8E:E8:13:E5:01:68:E0:7A:A4:27:D4:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/ccb03dad-ff0f-3f03-a4ea-092ab39591a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.crl

            X509v3 Authority Key Identifier:
                keyid:F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.232.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:39:be:49:ea:b3:0f:b8:30:58:49:3f:fa:73:32:99:d0:
         b4:b0:4f:71:92:0e:dd:2a:68:46:7b:70:2f:4e:04:0f:4b:8e:
         f8:61:b5:46:01:36:81:09:25:78:9a:91:97:3b:40:88:5f:4d:
         4b:f8:c9:6a:94:9d:c1:ed:b6:34:86:e1:2d:23:f9:7b:a1:cf:
         95:c8:e4:e8:d3:a5:5a:a0:ab:15:ea:af:f9:9e:bd:24:68:6c:
         60:87:96:f5:45:02:0f:03:ba:da:d2:a7:08:7e:4f:ed:fb:fe:
         a9:0a:0d:c4:9b:81:bf:78:21:93:98:3f:a1:53:ae:01:c9:ae:
         1e:c5:e5:66:aa:19:23:fa:c9:58:ec:ca:28:0a:a7:4d:10:76:
         3f:97:a8:c1:b3:76:a5:f6:c2:db:a5:09:87:ae:39:86:8e:2c:
         cf:48:38:5a:24:24:b9:d6:13:6b:2c:19:e1:81:4c:cf:7d:58:
         2f:7e:27:ef:da:97:46:d8:75:ee:96:dc:e6:79:f5:07:cf:fa:
         06:ff:4f:af:87:57:45:1c:95:34:a1:b0:12:c2:8f:34:df:aa:
         24:4c:cd:4c:ac:e3:07:fa:9e:c4:6b:33:84:72:83:dc:01:6b:
         8f:06:79:c0:7b:ca:da:63:c2:00:a5:11:ab:15:ff:36:57:95:
         00:c0:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:03 2026 by rpki-client