Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa
File:                     cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa (raw, json)
Hash identifier:          6GFOx1NQk7pmwrpQExSv15f/akuHfGJxt3NsrtIjGIA=
Subject key identifier:   08:5A:3D:E2:A8:BF:B2:8D:9B:9D:45:89:A8:58:C0:E4:72:B4:5D:D9
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584EDC91FD0D7F0C60F947120200
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     27419
IP address blocks:        138.84.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fd:0d:7f:0c:60:f9:47:12:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=cb6f5793-80cf-4bf9-8d4d-e3643532b269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:22:36:b1:ee:20:ff:1e:b0:cd:9d:cd:97:17:
                    31:93:e7:5a:2e:78:80:07:06:36:c6:b0:15:18:62:
                    de:fe:e6:7a:4a:bb:c4:1c:99:87:5a:ff:3f:b4:28:
                    23:86:9a:36:7f:b0:3c:dd:35:77:56:2b:79:ce:61:
                    be:13:9c:6d:78:d6:d4:b5:eb:fe:8a:c0:b6:cd:97:
                    84:05:ff:ee:88:a2:71:96:41:49:5c:86:3e:8d:21:
                    bd:c9:cc:4c:fc:f4:4f:32:58:f3:07:9c:ed:fb:bf:
                    02:97:1a:b5:c1:2e:d8:3e:b8:96:76:60:c7:7c:95:
                    8c:23:51:8a:ef:13:3d:7a:53:f9:e1:37:48:2e:56:
                    ae:5d:ce:85:1f:1d:88:02:2e:b2:fc:4a:18:cc:5d:
                    61:bb:0d:a2:da:c7:b8:69:96:74:55:c9:11:cc:3a:
                    df:fb:d3:bf:11:8d:72:aa:2c:ab:4e:cb:67:cf:08:
                    00:e9:dd:ba:a1:f3:ef:8f:9a:34:f8:c5:c9:5f:3d:
                    67:99:55:ab:ec:d3:35:13:fa:3d:db:6b:3a:50:04:
                    9f:df:ff:01:c7:e5:25:90:11:86:d0:20:3a:08:92:
                    6c:84:80:a8:cf:eb:44:61:e1:28:2b:5c:ed:8e:4f:
                    62:16:44:da:38:ac:b1:00:e7:82:84:5e:18:70:bd:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5A:3D:E2:A8:BF:B2:8D:9B:9D:45:89:A8:58:C0:E4:72:B4:5D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:8b:b4:d5:85:f8:43:bf:32:b0:b3:e5:53:ee:22:79:7c:
         a6:2e:94:44:a6:d2:e3:94:d5:42:ed:4b:2c:3c:a2:cd:5b:71:
         37:73:8e:e1:74:5b:02:2f:bb:33:d5:0a:13:07:bb:f5:fd:0a:
         1b:dd:64:13:13:cf:5c:78:25:b6:a3:4c:7c:e8:de:3c:84:7b:
         fa:d9:f8:56:c2:e1:19:c7:a5:8a:ce:d5:6f:85:ea:93:48:ef:
         b6:97:a6:12:b0:c5:f7:ee:eb:80:82:a5:7c:1c:77:67:4c:eb:
         ff:be:97:aa:d0:5e:3d:41:84:52:8a:9b:49:c5:a8:3f:49:ee:
         d1:9b:b1:d4:c1:80:9b:00:3e:39:52:39:52:d0:a5:c0:8c:78:
         b0:39:3e:37:7e:41:b8:fa:32:f3:9a:b0:6a:59:c7:27:4d:9f:
         f7:b5:6a:45:83:ea:ae:01:dc:9b:94:ef:94:30:e1:76:76:44:
         c3:81:ce:5d:88:10:04:4d:22:95:f5:44:ab:1e:c4:83:11:c1:
         c3:a4:46:29:4b:dc:6e:10:57:84:1d:6c:01:6b:0b:80:de:8f:
         f3:d7:d8:a1:d4:eb:f1:f4:fa:d8:34:90:1b:b8:8c:89:b6:52:
         04:1f:c8:6a:3f:58:2f:59:d3:b2:e7:46:c8:64:b9:0a:a8:f8:
         b4:cb:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:03:14 2026 by rpki-client