Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa
File:                     d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa (raw, json)
Hash identifier:          5ivzS5DQSo/UdFdwgddEJACQsoLWcKmNBOvMecyhEDk=
Subject key identifier:   65:5D:B5:46:61:8D:6C:13:90:CD:F3:56:EE:9B:34:B9:DB:AC:27:AE
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584EA78F43D2F375094D383F2D80
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13984
IP address blocks:        209.151.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:43:d2:f3:75:09:4d:38:3f:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b75a0b7b-66af-4aea-85b2-869f0b2fc5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:72:8c:12:80:f2:71:30:24:d5:63:ab:b4:
                    85:4e:b9:91:cb:db:5d:8f:4e:f9:36:c8:29:d5:82:
                    da:fb:c8:12:af:f2:b3:da:c9:c7:b7:c5:a5:b9:db:
                    74:2c:c1:80:39:6f:5c:b3:a0:ce:03:9e:f0:89:a8:
                    b3:88:fb:f6:2d:65:ca:b6:02:e3:b9:1f:f4:00:43:
                    22:24:17:5c:c1:fe:aa:e8:bc:25:e2:dd:ae:a2:0a:
                    66:5e:3d:2f:ea:8b:d2:96:c0:6e:71:a8:61:8a:38:
                    46:c8:6a:f7:fd:81:bb:9a:32:af:9c:06:99:5e:6e:
                    44:90:d7:7c:3d:49:da:ef:6e:ed:e9:32:73:69:10:
                    00:f5:c8:e0:cc:b8:05:3c:e0:22:5d:7d:91:ed:8b:
                    bf:3b:61:2c:7b:e0:fb:1c:17:47:00:48:18:a7:d2:
                    75:30:9a:ef:c7:3e:ba:6c:6f:e4:14:b8:2a:7e:18:
                    ca:92:f5:21:a4:82:f2:af:2e:d1:55:cc:5b:c1:64:
                    df:90:09:89:76:35:a2:47:83:c6:28:7e:8e:b3:f6:
                    c4:32:f0:82:eb:55:bd:1a:73:6f:70:8a:62:f0:16:
                    5a:4e:1a:ea:2a:8e:75:91:11:2a:d8:74:05:46:9b:
                    fc:68:38:04:09:c2:2b:d6:98:c3:61:cd:90:72:c1:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5D:B5:46:61:8D:6C:13:90:CD:F3:56:EE:9B:34:B9:DB:AC:27:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:7d:1d:59:39:07:ea:95:bf:44:5e:41:f4:05:e5:1b:98:
         6e:90:a9:53:5f:13:96:d7:59:df:14:ef:fa:af:f4:bf:d3:33:
         36:a9:42:9a:fd:ac:ce:57:49:c2:e3:37:64:9c:db:7d:e2:2a:
         3f:91:ff:7c:87:bd:04:cc:7a:e2:41:51:43:d9:90:96:d2:d8:
         b2:b7:ec:e7:65:40:28:7c:44:c2:4f:28:3f:b0:9f:d5:9c:d5:
         8c:a2:49:e6:6e:8d:b8:69:6c:25:24:7d:85:f5:ba:cf:70:f3:
         ca:29:6f:da:80:38:f7:a9:81:a2:8f:7b:f6:b2:f3:b4:5e:3c:
         11:77:2d:8d:36:68:03:83:45:73:ba:34:80:88:2e:ee:b8:1d:
         71:75:92:72:95:c9:d7:05:f0:8f:eb:86:50:26:f8:2b:be:28:
         88:eb:8b:4f:48:3f:d8:28:85:07:96:86:1d:72:3e:91:17:61:
         cc:94:c6:2b:ab:fd:5f:f1:48:20:a3:92:69:7c:06:11:22:94:
         ed:c5:3e:25:e9:d8:06:c5:3f:9f:3f:54:4f:9b:00:34:b3:a1:
         17:e7:7d:80:0b:72:1e:75:58:7f:1a:04:df:dd:cf:52:13:10:
         30:41:bb:16:8e:29:2e:68:3b:08:a7:66:60:96:cd:1f:06:cb:
         d0:21:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 12:37:27 2026 by rpki-client