Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fbb5b959-646d-3f20-b15b-4388f569d60f.roa
File:                     fbb5b959-646d-3f20-b15b-4388f569d60f.roa (raw, json)
Hash identifier:          AG81daPsvpEVJexJF6s89RzqVl2/PRMIXXskaLUa98s=
Subject key identifier:   09:81:6F:F5:85:A5:FA:86:3D:66:8C:CF:0A:63:3D:76:37:C6:B6:FE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBC01F571DEAA22E38322FBC0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fbb5b959-646d-3f20-b15b-4388f569d60f.roa
Signing time:             Wed 05 Aug 2026 09:04:26 +0000
ROA not before:           Wed 05 Aug 2026 09:04:26 +0000
ROA not after:            Tue 03 Nov 2026 10:04:26 +0000
asID:                     19148
IP address blocks:        64.120.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:01:f5:71:de:aa:22:e3:83:22:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 09:04:26 2026 GMT
            Not After : Nov  3 10:04:26 2026 GMT
        Subject: CN=8485cff1-d579-4404-a03e-35e63093d379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:69:5e:a2:2d:07:83:91:76:6c:7a:e8:d2:
                    c8:83:64:7f:95:25:9f:3c:f9:7e:ea:53:92:0e:a6:
                    f5:fa:88:fe:8d:26:23:af:5b:bf:d6:89:61:40:3e:
                    23:71:26:61:40:3a:5b:6b:1e:3b:30:7e:67:fc:12:
                    83:a4:57:a4:0e:f5:ab:9c:c3:7c:3a:51:ca:cd:42:
                    32:cd:0c:c5:59:1b:0f:44:23:cb:d8:c6:5e:a7:95:
                    4f:b7:ae:d9:57:5a:6f:db:73:f8:fe:52:7a:89:63:
                    88:a3:fc:0b:a3:77:f7:5b:bf:89:bc:5b:49:38:32:
                    83:87:c6:28:e4:9f:a9:cb:36:e2:5b:ae:20:84:4d:
                    af:af:60:72:cc:18:e2:71:a0:c9:28:02:fa:97:60:
                    7c:16:a0:3b:49:3b:59:1c:cf:7c:3d:24:b1:0c:f3:
                    60:b1:f4:19:27:2d:9d:e8:60:43:db:52:72:29:22:
                    30:38:76:d9:67:74:31:51:d4:a7:d3:d2:d4:67:4d:
                    0e:61:70:85:cf:39:f4:dd:40:19:57:68:f7:14:61:
                    11:fb:04:b7:36:99:d5:d6:53:76:51:2d:d6:cd:b2:
                    58:9c:a0:ca:fd:3d:a4:78:ce:06:a8:bd:0d:65:fb:
                    8b:31:b4:19:d9:0b:47:5d:30:1a:17:df:97:21:2d:
                    b1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:6F:F5:85:A5:FA:86:3D:66:8C:CF:0A:63:3D:76:37:C6:B6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fbb5b959-646d-3f20-b15b-4388f569d60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ea:54:25:a9:bd:d2:0c:70:5a:bf:15:dd:c3:27:25:ba:96:
         20:35:32:aa:20:ca:c2:3c:ef:83:51:9b:da:fa:92:92:8f:9c:
         11:b0:60:aa:d8:19:e7:30:35:09:c7:dc:fa:f1:3c:00:ac:88:
         aa:8d:50:79:3a:6d:5c:8a:6d:79:a8:ea:eb:65:d8:88:12:4e:
         1d:b2:b6:05:98:a3:a8:43:7f:e2:32:2f:36:d8:6c:12:3b:b5:
         64:b1:cd:7b:0a:a8:0f:13:23:3d:ba:b1:50:26:8c:91:b2:32:
         75:72:13:77:62:5c:cb:95:e7:96:3b:9d:2d:19:f8:db:bc:ff:
         a4:44:37:ba:4e:4d:a8:33:cb:e3:c7:8a:50:73:e0:f9:f9:9b:
         10:ca:35:de:45:42:f4:30:b8:d4:d2:47:c7:a4:18:a8:d6:2c:
         9b:19:48:a8:dd:57:f5:2b:62:e5:18:10:82:68:ee:6b:68:d3:
         bc:73:f4:0e:94:3f:ab:03:51:42:0e:48:e0:79:9c:79:c8:cc:
         3c:2a:3e:aa:66:c2:8d:cb:04:23:3b:13:5b:de:db:ff:59:07:
         5c:a6:23:28:85:51:9f:da:68:9a:71:01:19:c1:f1:f6:eb:d8:
         63:8f:43:52:95:90:00:c1:bd:82:44:90:7f:e8:a5:97:fd:5f:
         95:b3:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:19:29 2026 by rpki-client