Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/1f13042a-63a3-3fba-80a8-d5b59def998d.roa
File:                     1f13042a-63a3-3fba-80a8-d5b59def998d.roa (raw, json)
Hash identifier:          tB+vRw+B1N/4aVxWMZNpx9LNx/f5W151+vuzTYBNyI8=
Subject key identifier:   FD:43:BA:92:13:2B:05:F6:F6:6A:8B:E5:92:3D:63:86:DE:19:EC:09
Certificate issuer:       /CN=30d537f2-f871-4f81-b20b-ae04610c521d
Certificate serial:       010D0C9F4328584E7E94EEC6FD8493A0A49F3100
Authority key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/1f13042a-63a3-3fba-80a8-d5b59def998d.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        45.41.240.0/22 maxlen: 22
                          216.146.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ee:c6:fd:84:93:a0:a4:9f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d537f2-f871-4f81-b20b-ae04610c521d
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=6cc4eab0-041f-4fbc-be12-07f224dff30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:d6:cc:2c:09:d2:79:9f:31:e2:32:e7:5c:
                    ee:61:8e:97:fe:43:3f:36:99:c6:7d:c7:44:37:f3:
                    81:1e:01:0d:10:81:0a:77:de:1b:22:7c:7b:c5:47:
                    1b:6e:53:6a:6e:24:48:8c:25:74:fc:f9:37:41:2b:
                    52:4e:4b:35:b3:b3:de:28:f5:6d:7f:68:be:ab:fa:
                    5c:6e:6a:39:d2:92:ca:5e:3f:17:ed:b1:3f:2d:f9:
                    e0:cc:79:54:de:63:d0:f0:cc:3b:ab:ef:98:37:2f:
                    6a:fa:b4:53:89:91:28:2d:0f:a8:0e:33:46:3a:5c:
                    36:08:d6:7d:a9:c1:ef:61:73:c7:bc:75:f7:d7:01:
                    13:fe:16:b8:18:f2:92:cf:4d:13:ba:fb:a7:8d:27:
                    ca:29:94:47:06:87:5c:ba:9f:36:1b:d5:c6:71:9f:
                    95:6b:af:b1:22:e0:b8:d2:0b:45:22:e0:95:18:4d:
                    25:cd:b8:f7:72:be:3a:0f:81:b0:d1:53:0b:49:6a:
                    59:0f:ce:a1:4a:1e:7c:c2:6e:b2:fe:23:64:15:38:
                    7e:d9:f8:29:ae:c2:1f:2d:f7:9f:1f:76:ef:dd:88:
                    2f:ae:f3:17:1e:59:02:23:2e:7f:46:be:5b:b7:08:
                    ca:28:3e:82:7c:4d:68:31:c3:db:df:5a:82:e2:57:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:BA:92:13:2B:05:F6:F6:6A:8B:E5:92:3D:63:86:DE:19:EC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/1f13042a-63a3-3fba-80a8-d5b59def998d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl

            X509v3 Authority Key Identifier:
                keyid:0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.240.0/22
                  216.146.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:71:9f:63:61:09:a2:fa:1c:e7:8d:3c:90:09:5f:95:2c:
         18:1f:ad:5c:be:2a:2f:cc:3c:84:1e:45:64:f3:b1:7b:43:92:
         a0:3f:a6:1f:c7:bc:ab:6f:ac:65:86:a1:f6:68:8b:1e:a7:7c:
         f0:f7:70:55:d4:25:2a:4d:32:a4:04:9b:69:75:48:52:56:f8:
         f8:3b:d6:1f:b2:7e:d7:59:78:97:ac:51:90:b2:e1:29:c6:85:
         21:0e:a4:3f:cc:dc:f7:b0:da:8b:9a:79:a9:46:88:1f:df:4d:
         cb:47:c8:45:50:38:dc:9f:67:6c:cd:1e:7e:c9:9c:59:32:80:
         6d:6d:22:fb:13:d7:79:62:85:8b:a5:e4:df:8d:61:1c:80:84:
         0a:20:0f:7d:9e:61:e6:e4:25:c1:64:48:78:8c:69:22:74:5e:
         67:37:e4:fd:54:2c:d3:13:ad:aa:c0:bc:66:e6:51:d7:61:9f:
         0b:6e:8b:af:d0:7c:6b:bd:06:12:09:11:8e:84:cb:ac:a0:ee:
         f2:b5:61:24:ff:28:11:81:9e:ab:35:fd:03:a5:19:99:ec:8b:
         6e:5a:26:f6:95:04:da:22:bd:54:80:81:35:fa:dd:60:d3:fb:
         7e:f2:e8:f7:45:21:15:4e:e3:24:95:95:c8:f0:69:2d:43:56:
         b1:db:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:22 2026 by rpki-client