Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa
File:                     22885b19-ffae-32cf-b022-3d5558dc4f90.roa (raw, json)
Hash identifier:          TYdSCXBswFShyql4W8kSLicimDwNBKaf9Yn+RDBhzm8=
Subject key identifier:   88:08:90:26:EC:55:4E:1F:62:EF:C2:73:07:19:EC:C6:8E:F0:1A:90
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584E709F7C0D34639B2FC3DCAD40
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     7029
IP address blocks:        206.245.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7c:0d:34:63:9b:2f:c3:dc:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=b9a1dd53-3233-40ea-b5b9-332df217bfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:e1:a6:f5:46:dd:55:2b:3c:f7:20:cd:92:
                    84:99:ad:2e:5e:d8:ff:1d:da:95:07:b4:c9:9e:cd:
                    d7:4c:38:27:02:18:60:4e:50:44:84:69:e3:40:57:
                    b1:64:e5:fe:2e:07:45:22:79:3c:69:ca:f5:6c:00:
                    1e:2e:ee:01:98:f8:61:b3:7d:a2:5f:19:19:6d:74:
                    7b:28:f3:ab:7c:a5:53:6e:e0:3f:c4:94:34:46:4f:
                    6b:ad:d5:b5:42:10:1e:fa:5c:5c:ec:9e:23:99:33:
                    b5:8c:6c:be:96:89:d2:79:e8:df:f2:e1:ba:01:ba:
                    1e:a8:76:70:15:5e:30:25:2c:e9:90:bb:71:d8:97:
                    07:8e:72:73:02:9d:41:dd:90:fa:b8:27:7c:c1:8f:
                    50:04:31:ec:03:53:18:79:94:4f:e0:de:e3:50:ac:
                    05:27:0d:56:0f:b5:f2:71:2e:ed:94:c6:b4:a4:f1:
                    4d:79:06:d8:7d:b8:7d:82:68:e6:42:37:a7:1f:fb:
                    ac:40:65:19:f6:3c:52:7e:4c:4b:da:33:b1:99:7b:
                    16:92:20:78:46:1d:b4:cb:c8:12:59:46:ed:c3:b9:
                    5a:dd:93:4c:77:15:09:f7:f4:54:5d:4e:4b:da:f8:
                    ce:c1:18:a1:79:b4:3d:14:0b:f4:f9:02:b8:8d:98:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:08:90:26:EC:55:4E:1F:62:EF:C2:73:07:19:EC:C6:8E:F0:1A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d2:8c:46:0e:2b:ba:79:a2:43:cf:f8:ea:fd:d8:8a:30:54:
         ca:24:d8:13:c4:f6:74:0a:c3:38:e3:d2:10:36:30:0a:3e:09:
         94:aa:64:da:44:3b:97:42:95:22:d9:b8:d6:96:bb:11:29:18:
         fb:3a:85:cf:39:b5:6c:e7:ff:26:c4:72:5c:a5:a3:5f:7d:81:
         87:1f:36:79:9a:c0:e1:1b:a4:cd:9e:a4:b1:36:10:e5:14:8e:
         f9:30:0b:3c:99:6b:34:83:cb:16:35:60:a4:8b:82:c9:d5:42:
         77:28:6b:fc:f3:b6:4e:0b:fe:c4:fd:d1:cc:3d:6f:23:d3:6a:
         b0:85:06:2f:cc:70:f6:c0:08:75:02:a5:fc:38:8a:14:6e:e2:
         6c:3a:5c:b1:67:24:c2:ec:f1:ad:f3:46:f8:89:8b:12:df:63:
         39:f3:67:c7:e1:6e:f1:08:77:4f:1b:f5:22:24:1a:c2:3c:77:
         30:f7:c5:57:3c:5e:65:6e:08:83:51:8b:e4:a8:60:66:f6:02:
         79:3d:3a:8a:d3:5e:2b:b1:9d:0e:43:98:a9:0a:52:06:41:ee:
         63:64:cf:d4:7b:07:5f:dd:65:46:2f:65:c3:b5:b9:50:4a:58:
         41:9b:ba:77:9f:13:fb:22:b6:21:0c:d2:61:92:4b:eb:c7:13:
         98:38:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:19:44 2026 by rpki-client