Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/260745ae-bef2-365b-8eef-452e34540bc6.roa
File:                     260745ae-bef2-365b-8eef-452e34540bc6.roa (raw, json)
Hash identifier:          u9tAW3rlsezj1eOheG/tTDkGHl7fYiozbxNYapC26mo=
Subject key identifier:   C2:B2:87:92:E0:A8:38:F0:3B:90:F3:0F:8D:2A:23:A6:63:A9:15:49
Certificate issuer:       /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial:       010D0C9F4328584E2D9F245DC5D6BECD0D03B120
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/260745ae-bef2-365b-8eef-452e34540bc6.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     13325
IP address blocks:        204.22.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:24:5d:c5:d6:be:cd:0d:03:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=75e53f4b-828e-435d-8d33-c571ed3eafc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:ac:b0:e8:cf:12:d7:68:de:ef:47:9f:de:
                    20:cf:9d:19:cd:ee:de:cb:9c:d4:b3:d1:b7:7a:38:
                    40:12:0b:e7:1c:36:52:59:ba:44:f7:2e:ba:a2:9b:
                    1f:e7:45:48:77:a2:4e:f2:58:68:28:60:18:78:cc:
                    1e:40:9d:c5:f1:af:c4:31:23:41:fb:4e:f0:1d:44:
                    21:96:d3:91:a1:dc:94:b8:e9:36:0e:2d:f3:c6:f1:
                    ae:e2:a6:6d:00:bc:e5:23:05:91:47:1b:8f:25:9a:
                    08:c4:4b:99:ce:0c:52:f9:48:22:4e:78:1b:38:37:
                    b4:c8:7f:3e:d1:c2:4e:3e:81:af:af:47:d0:51:2b:
                    34:8f:6a:89:95:84:c0:87:39:df:4f:05:95:c4:81:
                    73:cf:1c:0d:ad:f0:31:f1:83:b9:9a:f5:3a:46:b6:
                    71:83:05:0b:42:1d:96:6b:91:da:a6:69:90:b8:2f:
                    f4:6b:0c:1a:89:64:2d:17:15:a6:dc:ff:76:77:60:
                    51:f6:1e:30:db:1e:2c:0a:a8:0a:4b:42:66:c4:18:
                    d5:d1:39:82:61:79:3a:ec:e1:aa:84:e6:40:47:53:
                    52:df:63:e5:10:38:49:54:ce:87:c5:9f:3f:49:67:
                    86:3a:f9:73:e4:7f:30:8a:2c:93:d8:f3:64:37:d8:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B2:87:92:E0:A8:38:F0:3B:90:F3:0F:8D:2A:23:A6:63:A9:15:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/260745ae-bef2-365b-8eef-452e34540bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl

            X509v3 Authority Key Identifier:
                keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.22.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:94:c9:04:d4:d8:48:a1:f5:49:1a:6c:e6:7a:17:a4:d8:
         79:72:c7:1a:a8:aa:6b:c4:fc:e0:c6:a4:ac:d5:fc:f4:e5:f5:
         35:5a:7c:f1:41:a5:83:2f:78:f4:30:57:17:4b:b6:15:71:83:
         1e:17:ba:fe:22:30:77:dd:0d:a9:0a:c7:e9:77:35:76:17:aa:
         67:c7:ad:06:89:c2:2b:6a:e4:2f:a4:15:6d:9d:4e:fd:69:0f:
         9a:4f:11:4c:ca:55:a6:31:61:49:4f:58:64:da:7c:87:6e:5f:
         1b:49:40:aa:4e:2e:bd:28:c3:03:53:41:9a:df:1c:3a:91:a8:
         29:e1:b2:74:da:cd:d8:4d:06:25:6a:f9:51:02:98:04:9f:a9:
         3e:b0:44:0f:62:83:64:6e:f2:23:6a:f1:fc:2f:f2:95:36:a2:
         19:af:e9:a2:89:3f:20:80:74:20:0e:83:4e:86:e9:30:a0:f9:
         10:7a:60:0e:2d:63:81:5b:c8:63:c4:9a:f7:63:47:21:a4:06:
         af:e3:eb:da:c0:1c:45:0b:14:c7:a2:8c:33:ad:76:a9:66:8b:
         af:75:38:13:23:86:61:53:c6:74:7e:a2:38:13:e0:ff:01:b3:
         60:0d:70:89:10:be:8f:e2:ab:3f:e1:3b:5f:71:71:f7:21:ff:
         a7:f8:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:50:16 2026 by rpki-client