Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/07cce922-7693-31b6-9a31-84eb3ce4f4a6.roa
File:                     07cce922-7693-31b6-9a31-84eb3ce4f4a6.roa (raw, json)
Hash identifier:          uw6Qf0AxWD8CwMGt+pAJeg4tAXKqFtm6CkeYw48hj5Q=
Subject key identifier:   1A:0A:2F:98:44:1B:B4:96:23:17:FF:A3:58:33:7B:A1:A8:D4:A1:7B
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584E7634C5C3F17EA43FC6E66840
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/07cce922-7693-31b6-9a31-84eb3ce4f4a6.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     20295
IP address blocks:        208.98.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c5:c3:f1:7e:a4:3f:c6:e6:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=6afda1bd-e948-4723-be6b-35255bbde696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:04:fb:bb:41:45:84:b3:af:97:ca:03:44:
                    dc:d8:72:78:ea:04:5c:6c:e4:be:93:2a:0a:89:7e:
                    55:f0:b0:f5:2b:13:ac:59:6a:ab:c9:74:9e:b4:31:
                    57:af:03:0d:48:a5:e9:fd:8d:cc:02:30:a0:9e:69:
                    5e:ee:fd:e4:d5:bb:98:87:6d:98:d7:b9:7c:24:e7:
                    20:37:95:27:b6:ea:92:e7:58:55:e6:ea:3d:77:a3:
                    fb:65:f0:e2:fa:7f:33:51:3f:cd:bf:70:92:41:28:
                    73:e5:dc:7d:40:b7:51:d9:cf:35:76:c6:e2:81:56:
                    3d:1f:28:94:69:be:4a:4b:2d:df:e1:92:9c:44:11:
                    e1:81:bc:2e:c6:e1:8a:fb:a5:51:dc:b9:c3:45:06:
                    b1:b6:90:b0:db:6c:bf:3d:e8:28:21:ee:e3:64:8f:
                    4e:76:e8:81:83:f3:75:0a:99:df:ea:7d:79:50:b2:
                    d6:a8:d7:71:17:a2:1c:d4:3f:20:de:2d:74:b5:48:
                    a8:ab:0e:08:5c:4c:5c:36:a5:bb:f8:78:9a:85:4d:
                    eb:6e:bf:1d:78:f9:c4:29:08:a8:62:fc:27:a4:ea:
                    75:78:6e:93:a2:9b:39:08:36:0b:3a:b5:19:98:24:
                    3b:8a:12:be:70:b5:72:87:e3:2b:c6:f5:dc:c4:26:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0A:2F:98:44:1B:B4:96:23:17:FF:A3:58:33:7B:A1:A8:D4:A1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/07cce922-7693-31b6-9a31-84eb3ce4f4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.98.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:c5:2d:9f:f7:bc:17:a5:cd:99:64:b9:db:6a:2a:9c:3f:
         73:90:be:8b:41:d6:ca:13:98:98:49:3c:aa:63:27:92:78:77:
         11:d8:14:0b:6a:9c:d3:b2:22:03:52:9e:72:8c:1b:bb:ae:4c:
         86:fd:1e:cd:68:f9:df:36:e1:aa:ff:bc:92:48:3a:c3:93:8d:
         b2:2a:b7:2a:34:c4:d7:14:69:cd:fe:d6:fb:a6:54:fb:2c:db:
         6c:e8:fe:0c:9c:ab:54:3d:07:3b:e8:94:39:e0:c4:c8:09:52:
         db:71:49:1c:e2:fa:14:b0:15:c3:b3:88:39:37:87:fd:67:3d:
         cd:81:ba:eb:c5:be:0a:c1:e4:00:8d:0d:ff:d4:c4:38:1d:b7:
         c4:34:e3:11:d3:18:f8:05:f9:17:62:9d:c4:2e:c4:12:e1:ef:
         1e:d5:e2:af:93:88:e2:d5:f1:f0:b1:f3:ae:7c:f4:7e:62:24:
         d7:44:97:84:90:00:b8:36:9f:33:5e:e7:1a:33:c4:b4:67:a2:
         bf:36:be:15:0d:90:0e:6b:78:c8:7e:12:71:d9:ac:f8:3d:42:
         17:b8:b6:83:39:d0:e3:be:64:a5:dc:f0:2e:34:07:fe:b0:60:
         b9:14:dc:8a:81:6d:23:40:8e:08:6b:c9:02:a3:87:e5:52:df:
         d3:d8:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 01:21:12 2026 by rpki-client