Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa
File:                     7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa (raw, json)
Hash identifier:          hiv77rn+ei2X2PpE9sk2k1TuzSc6cfevN0kHLRWfTAQ=
Subject key identifier:   0B:FE:DC:0B:85:EE:42:19:56:8E:AE:64:B1:95:17:4F:A4:E7:64:A8
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584EA7871DD94C3ADC3EA17F5000
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13445
IP address blocks:        199.59.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:1d:d9:4c:3a:dc:3e:a1:7f:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1bfc6f71-0e4e-4615-950b-100745a6d8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:70:6d:cc:9d:ff:94:3a:d5:64:32:cd:82:
                    47:41:42:b7:3c:8c:ce:6f:50:35:26:b8:d6:1e:d0:
                    4b:eb:b9:1b:77:fd:70:b9:bb:75:b0:bf:ea:c9:c7:
                    47:79:35:8b:76:c2:98:5e:22:4d:35:ad:8a:f6:5b:
                    3f:73:7f:4d:d3:0c:c5:9c:73:e0:da:f5:f8:f8:fd:
                    38:00:18:d7:4e:5e:07:b7:fb:b2:1b:0e:dc:31:d3:
                    7f:49:2f:2f:d3:ad:2c:a4:52:7c:73:1e:b7:bb:6d:
                    73:ee:f3:b9:8b:e1:e2:c0:c1:71:48:4b:bb:be:66:
                    c2:d3:3c:5a:ea:95:d3:5b:1e:15:0b:c9:71:b8:77:
                    05:95:5a:5f:a9:76:4b:6d:97:a4:d3:93:6f:93:35:
                    b6:5a:46:74:02:93:3f:5b:e5:eb:8f:d1:73:cb:04:
                    dc:0a:da:03:96:6c:65:a3:57:71:bd:4b:8c:bf:45:
                    4c:4a:dc:e0:b6:18:d1:b4:d0:f1:c9:2a:4e:1b:30:
                    b9:ca:27:c1:11:30:24:8b:56:4a:7b:fb:88:86:3a:
                    ba:84:8e:58:9e:62:16:1e:d0:82:2b:c4:09:7b:fc:
                    eb:a3:c4:db:6c:16:37:d6:ea:c9:6e:b2:57:84:1e:
                    a4:05:c4:3c:eb:53:52:e7:c5:5e:92:ca:79:b1:9d:
                    f6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:DC:0B:85:EE:42:19:56:8E:AE:64:B1:95:17:4F:A4:E7:64:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:43:de:b0:46:e7:8d:53:7a:cc:fc:71:6d:54:cb:ce:b5:e9:
         78:24:b2:03:33:c8:db:0d:84:0c:51:c0:b4:fc:b1:11:41:ac:
         2f:6a:f2:ce:cc:d2:8b:a4:9f:7c:d9:20:d2:75:f6:98:21:d7:
         12:08:3d:03:4b:dd:19:15:b2:98:d8:2f:28:5f:c9:fe:c0:dd:
         33:da:3e:e0:d0:b0:cd:29:ed:7e:cf:09:ee:fb:01:6d:bc:f5:
         32:20:17:5f:2b:60:ec:18:e3:bf:e0:aa:f0:01:34:af:a4:d4:
         f8:7b:d3:92:b5:45:b2:5a:2e:3b:45:13:1c:dd:4e:71:25:4a:
         29:80:d3:7c:f8:bb:8c:1d:c7:72:6e:5f:e9:97:8f:7a:4b:2f:
         db:9c:e4:19:3f:e9:1d:d0:b9:48:41:9f:41:5e:6f:92:fe:3f:
         df:0c:48:b1:b8:c2:18:0e:96:f1:95:9b:5c:e3:b4:19:fc:2e:
         5e:1e:95:dc:7d:27:19:71:60:fd:4d:12:58:01:93:ec:d7:58:
         44:02:5e:da:8a:17:5f:de:ef:bc:e4:31:be:f6:0a:70:53:58:
         9d:9d:2a:72:c6:2b:e0:e8:6a:cb:6a:87:01:e9:35:ee:94:d4:
         ea:c9:d6:63:ca:82:8b:6d:f2:b8:9c:48:e5:03:5b:62:b3:f5:
         3d:35:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 17:23:19 2026 by rpki-client