Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa
File:                     41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa (raw, json)
Hash identifier:          uxc08dh0S1T2sXO+erAY/Ymgd4QDCJj9eh82T5uclaY=
Subject key identifier:   BC:E3:08:CB:38:BA:05:CB:1D:99:68:86:34:74:93:B2:60:28:64:DA
Certificate issuer:       /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
Certificate serial:       010D0C9F4328584E66DA3A41D42D20BC9897CCA8
Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     393462
IP address blocks:        192.35.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3a:41:d4:2d:20:bc:98:97:cc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=b916ad1f-f05e-4acd-9e95-6c99864875c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ca:42:a8:61:11:52:60:7b:0a:b7:e4:6e:eb:
                    9f:43:f3:87:06:ad:20:75:9e:7b:71:96:f8:9a:a1:
                    30:43:07:43:c8:fa:e7:8a:a9:7c:ec:aa:89:40:06:
                    11:68:44:45:5f:5f:72:ab:d5:4a:76:be:1c:e5:74:
                    5a:cc:37:8a:60:b8:83:49:e3:39:65:f3:c3:56:b4:
                    fe:11:ec:7b:d9:49:b8:1f:52:fb:61:6e:00:1b:ae:
                    6f:5e:6e:09:7e:44:a4:26:5e:42:b1:3a:bf:8e:fa:
                    f7:a1:c1:c0:31:13:53:55:5c:b5:57:1f:a3:42:11:
                    04:bf:36:6b:7a:51:aa:1f:5f:5a:5f:d7:b3:6b:74:
                    48:bb:71:0b:57:23:2a:95:47:1d:5f:c6:97:87:8d:
                    05:93:c0:de:d2:7a:f9:85:e4:b0:6f:62:80:05:5e:
                    9e:31:8b:e7:97:b7:a4:ae:ec:c9:ec:a7:1f:d2:75:
                    f7:ab:93:7a:c1:95:47:be:4f:96:66:af:66:cb:a3:
                    56:38:fd:9c:4f:6a:09:58:d5:7c:ef:ed:73:fa:c6:
                    a5:1f:02:8c:40:6e:66:f4:1b:df:d1:ac:d2:f6:29:
                    9f:08:ff:28:c5:bc:a4:b2:17:b1:41:3a:87:61:43:
                    1a:b2:d2:bc:09:87:6f:d9:a3:86:79:60:8b:36:f9:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E3:08:CB:38:BA:05:CB:1D:99:68:86:34:74:93:B2:60:28:64:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl

            X509v3 Authority Key Identifier:
                keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:9a:45:c1:b2:56:10:ca:4d:42:a0:dc:2a:b3:7f:18:bb:
         8f:87:d2:98:77:f3:05:7b:03:7f:52:73:e0:99:29:b8:bd:96:
         bd:ab:f6:24:c1:77:fa:95:c9:a2:d9:c3:16:29:7a:0a:30:19:
         2f:ef:20:a8:48:04:32:a9:e6:fb:ef:81:59:13:bf:3b:e6:8e:
         3b:4f:a6:2a:c6:19:c6:9a:23:59:2f:f1:9c:ca:24:87:fa:d4:
         e1:d1:2f:12:dc:c2:99:42:12:4f:c4:46:41:32:49:4a:2e:34:
         ef:41:15:2d:6d:f6:08:20:d4:b4:51:d8:17:79:02:13:f9:87:
         21:e6:20:4c:b7:91:bc:b7:43:87:ea:c9:24:58:d8:03:4a:71:
         05:e9:37:fd:47:d4:4f:de:b8:9d:32:5e:05:42:70:71:b4:b3:
         eb:4b:54:df:02:ef:79:b9:df:8f:dc:d1:45:66:2c:ee:89:db:
         96:c9:44:77:47:07:5a:07:82:19:3f:85:1a:5d:2d:a9:6e:82:
         b8:eb:7b:4d:ca:63:46:5b:c8:ea:2e:25:8f:39:ed:d9:28:33:
         e9:ed:84:3c:71:17:9c:bc:3a:1a:47:86:b2:42:92:7a:02:76:
         82:48:c5:b3:73:ec:9c:14:53:76:4c:41:89:c7:79:9a:48:eb:
         64:f9:92:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:49:52 2026 by rpki-client