Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa
File:                     38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa (raw, json)
Hash identifier:          aCkLULs/W3ImHO7V7OoxNjA8yIreRO4TaBHLuuRb0Q0=
Subject key identifier:   53:BF:EC:97:13:7A:1F:F4:93:2B:79:6D:F0:60:F3:0E:49:21:A5:DE
Certificate issuer:       /CN=7cac21fa-fb8a-4352-9772-6995e344f72c
Certificate serial:       010D0C9F4328584EC20C6F581409830F0933BB00
Authority key identifier: 4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     20055
IP address blocks:        205.196.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6f:58:14:09:83:0f:09:33:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cac21fa-fb8a-4352-9772-6995e344f72c
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=13c99f5c-4a63-4775-b27c-aca107f98afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:93:9d:1a:88:fa:57:9e:78:0b:0c:64:47:
                    0e:6f:3f:a0:07:52:c5:e3:ac:71:b5:c2:f4:9f:85:
                    c8:0c:87:81:45:b5:14:bf:93:ff:5a:0c:6a:da:b6:
                    e5:9b:fd:a7:13:3e:52:41:0a:1b:c4:94:80:bd:ef:
                    3d:d6:b9:4f:d7:fd:bc:40:fb:55:59:ad:38:1c:76:
                    72:41:d2:70:24:9e:8b:ea:2d:1f:55:78:fb:4a:cc:
                    b3:b9:2b:c0:92:14:46:d7:82:ca:41:30:1c:e2:fe:
                    5f:72:2a:c2:22:0d:1d:3b:ce:a1:30:fc:4c:f0:6a:
                    0a:52:f2:0d:b0:34:60:b2:ec:91:7e:a8:40:b7:40:
                    ad:59:5f:be:4f:4c:53:3f:96:da:fe:6e:1c:26:e2:
                    3c:15:fe:75:c8:e0:74:74:f4:0d:0d:8d:bb:6f:4c:
                    61:27:8e:6b:08:ce:11:dd:17:c5:9a:0a:11:ad:8b:
                    52:dc:d3:ab:ae:c9:a2:c0:68:ec:30:aa:ba:75:ed:
                    c6:c8:11:c1:61:ee:23:7e:12:65:e3:79:a0:c6:4c:
                    92:d7:bc:a7:3b:b2:96:70:9e:20:05:80:5f:2a:69:
                    7d:96:35:89:14:77:e0:99:b6:7e:13:e3:f7:eb:f0:
                    81:92:54:44:6a:ab:f6:45:40:f9:1a:cd:bd:6e:79:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:EC:97:13:7A:1F:F4:93:2B:79:6D:F0:60:F3:0E:49:21:A5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/38a9b888-91f6-373b-8ebd-4e5d1283e80f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl

            X509v3 Authority Key Identifier:
                keyid:4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a0:e3:64:00:22:2d:cc:be:c0:15:bf:85:92:d6:63:d2:bc:
         63:f9:73:39:3d:13:4a:7a:cf:98:36:56:41:b9:31:3e:63:84:
         33:b8:1b:da:c1:61:9c:61:68:9f:09:71:ab:10:cf:42:93:3e:
         14:5d:2f:6b:dc:5b:05:30:54:9f:61:e7:09:9d:a7:50:2b:9d:
         f8:a7:66:cb:e0:39:fc:10:1f:c1:17:35:d1:b0:eb:ae:7c:13:
         38:7e:b4:91:5e:e7:61:d2:d9:d2:49:b7:d5:61:11:b5:e1:c1:
         9b:2a:80:4f:ea:41:11:4b:a7:cf:d2:60:d0:ed:04:72:11:47:
         ba:0e:49:b9:ac:49:46:25:a6:f6:cd:bf:ad:19:5a:69:5f:e9:
         7e:8d:73:78:c8:1c:84:69:f6:4a:3c:15:6c:ac:92:af:99:4f:
         06:59:af:cd:e7:cd:b1:cd:ef:f5:09:8f:32:cb:51:3a:83:fa:
         37:aa:c0:f2:dc:d6:e2:3b:38:b9:0f:be:32:ab:2f:f5:12:df:
         b4:b6:a9:8e:53:24:9c:d0:e3:45:2a:fe:6a:66:94:bf:d0:48:
         49:66:83:b9:b5:f8:2b:45:b3:75:2d:8d:3e:92:15:8e:06:d8:
         a0:d3:54:a5:a0:29:da:b4:45:68:56:50:47:c7:f3:c3:22:b5:
         43:21:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:08:27 2026 by rpki-client