Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
File:                     5cc41769-a8f8-3609-a674-3c555a34b77b.roa (raw, json)
Hash identifier:          rxurCjMT8/QrWdDo79ZVHDReWtmKKGFariFUv+9Nq7s=
Subject key identifier:   FA:78:C5:36:17:23:70:32:0C:68:67:8A:A4:1E:48:33:67:E9:69:94
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA798BB60C6101910BCA980C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        199.126.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:bb:60:c6:10:19:10:bc:a9:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cd2bcf3c-2885-459f-b03a-0113d16c885c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:61:89:78:4f:14:5c:49:38:60:0b:e7:be:
                    2d:e2:25:b9:87:73:f5:8e:9f:af:49:54:a6:11:3a:
                    b9:d9:66:4b:66:1e:60:df:e4:e3:e4:e0:89:36:8d:
                    df:a5:7a:9b:a7:61:91:1e:aa:da:bb:ff:5d:3d:2c:
                    2e:41:ee:eb:2b:b9:80:21:5a:a0:bb:cd:cd:cb:47:
                    ab:34:b2:aa:71:c3:a3:79:88:f8:b0:9c:e2:8c:f7:
                    b1:e6:de:69:73:a4:0d:82:7e:d0:e0:e3:13:a8:d4:
                    31:c1:fd:18:81:4f:a6:35:92:62:53:04:27:3c:e3:
                    64:18:67:94:ee:55:a9:8c:6e:6d:ed:1d:ec:16:61:
                    b7:c8:12:b3:d2:09:7a:d1:87:58:c7:4c:bd:f1:b8:
                    90:e6:30:ab:d3:7e:a3:5f:65:b0:b3:0a:b2:f1:9b:
                    bb:38:6b:ad:c8:fc:26:6a:38:87:87:42:58:10:f2:
                    34:d9:ad:16:fd:9d:2b:cf:78:d0:97:69:5e:4f:be:
                    80:50:15:b6:0a:75:02:25:09:c4:ca:6c:b6:7c:a9:
                    7b:94:83:70:17:35:4d:65:76:fd:c4:60:0e:d9:02:
                    7c:26:0d:bf:5a:90:0b:bb:e9:a9:06:b5:0f:5e:81:
                    23:72:9c:7c:1d:1e:21:b2:f3:d0:9a:4d:d8:fa:01:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:C5:36:17:23:70:32:0C:68:67:8A:A4:1E:48:33:67:E9:69:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:e7:96:e2:f5:67:7f:db:fd:e2:d1:2e:61:cb:35:64:b0:
         0b:e7:4a:45:33:09:33:62:be:28:42:4e:06:bf:4c:e8:57:d0:
         5a:a0:39:80:f8:eb:e0:df:54:12:0a:c3:69:f6:16:f1:31:96:
         3e:15:e0:05:da:00:44:4b:c1:6e:bf:cc:cb:d5:c8:94:10:12:
         b9:05:39:b7:94:44:8d:c1:01:2e:61:6a:17:43:f4:11:88:85:
         0f:4c:f4:1d:2d:88:fc:fe:dc:0e:9d:6d:2e:ed:19:78:8d:41:
         24:ed:05:ee:cd:dd:0d:79:48:7a:5f:b0:44:53:51:69:0d:8f:
         96:c2:ad:cc:33:34:63:00:fc:66:d2:f8:cc:e3:e9:d7:3b:85:
         36:1e:d3:af:aa:37:9e:4f:c0:ba:4e:19:5f:b1:aa:46:aa:0b:
         46:85:10:58:87:45:ec:d5:7f:8a:c4:79:c0:d8:3c:c7:f9:ab:
         b5:f7:08:20:b9:2d:1e:b0:2e:8f:69:01:60:24:9c:bf:dd:2a:
         ca:e0:8e:bd:e4:1d:81:47:dd:f7:c8:50:0e:1b:47:2c:b8:43:
         e8:fa:a7:db:3e:cb:19:d6:a5:3e:b6:3b:b6:9a:48:62:dc:f5:
         f1:5e:45:69:ea:7f:ec:d8:08:b6:94:ff:19:24:b4:03:9a:38:
         eb:3e:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:43:22 2026 by rpki-client