Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb80c2bc-ad24-3e68-a8dc-91e324196117.roa
File:                     bb80c2bc-ad24-3e68-a8dc-91e324196117.roa (raw, json)
Hash identifier:          DqEYcUhwfue1Pl2vMRbKmWET8eqvBTYzPOZq3/XB0SY=
Subject key identifier:   A3:78:0B:66:E0:AA:62:3D:0D:03:05:7A:BE:D9:33:34:A5:CB:1A:26
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B09AAD732D707B6C48CA40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb80c2bc-ad24-3e68-a8dc-91e324196117.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397216
IP address blocks:        199.7.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:9a:ad:73:2d:70:7b:6c:48:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=1813569f-83ff-455f-af16-1f78de1c3785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:48:9b:99:58:96:29:9e:52:01:98:ef:ab:
                    18:73:0a:26:16:3f:0b:10:3c:96:d6:4c:ff:02:0f:
                    8b:7f:49:aa:9a:c6:cd:80:ed:98:d2:66:a5:87:08:
                    db:6d:ea:b1:5f:0a:fa:82:cf:92:77:02:2f:a8:e0:
                    fb:70:03:17:28:de:02:dd:27:cb:33:d5:0b:c3:e4:
                    ea:ab:05:7f:94:01:05:9d:1f:05:90:e5:e4:ad:42:
                    81:40:82:81:08:eb:cd:a1:c0:b1:a6:c6:70:6e:f6:
                    34:e9:e1:0a:57:ee:f6:a7:77:cc:94:48:32:11:d7:
                    31:43:3e:11:f7:21:14:96:f3:54:db:b0:c1:d5:d3:
                    d1:83:4f:7c:0e:86:dc:3b:15:53:ae:ca:bc:40:50:
                    5f:99:1d:59:cf:aa:35:08:55:3e:4d:b5:f1:24:b7:
                    1d:e1:27:51:9d:d3:06:aa:6f:e5:41:2c:a0:ef:86:
                    b2:23:ae:cd:a9:c7:13:63:a1:bc:35:0d:a3:88:ec:
                    14:14:89:8a:d7:e3:d4:c8:6f:47:9f:80:e7:33:28:
                    b0:37:30:db:0b:10:7f:c0:6e:6c:6a:41:60:2b:43:
                    83:18:17:42:b5:30:39:ef:a5:09:d3:a7:e6:a6:65:
                    8f:0b:21:4a:a7:47:19:e2:93:4a:34:6b:68:68:38:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:78:0B:66:E0:AA:62:3D:0D:03:05:7A:BE:D9:33:34:A5:CB:1A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb80c2bc-ad24-3e68-a8dc-91e324196117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:b5:87:e7:41:4c:eb:17:72:29:b3:f6:be:3e:b3:15:1e:
         28:27:56:8c:a3:50:76:67:de:1e:fa:05:f4:20:cc:61:b9:31:
         e9:e1:90:f6:92:b9:fd:35:5b:c6:95:a4:75:84:41:cd:40:e6:
         46:06:64:56:5b:d8:ea:d6:9b:5e:98:b1:4c:80:fb:80:57:ef:
         13:cf:ad:8a:37:46:c9:ff:66:dd:96:40:b8:d9:f8:99:19:86:
         da:0f:80:d5:3d:d8:3e:ea:fc:af:b8:7b:fc:2d:fb:44:b5:80:
         fe:54:74:2c:45:ff:bb:e5:42:43:e6:fc:20:2d:c5:2d:47:1f:
         b5:e9:a7:de:14:93:31:68:c1:f4:b9:8a:8f:10:de:3d:ca:0b:
         04:74:7a:3a:5e:db:d4:6a:e1:5b:ac:7b:c7:00:80:3d:79:d1:
         55:0f:28:38:91:5d:2d:04:88:a4:df:c3:44:a1:1e:13:1a:f0:
         43:e8:72:71:93:c6:2f:2d:5a:79:40:e9:fd:d4:7f:1e:f2:6a:
         39:cd:86:3c:27:68:1b:23:22:72:82:6f:d1:6f:0b:5a:56:9f:
         12:78:b0:ea:3f:09:92:99:ad:a3:c4:38:09:08:0b:02:9c:79:
         ad:2c:e1:57:99:23:45:4b:4e:e5:d6:db:5d:b8:ea:13:42:d7:
         8f:fe:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:06:05 2026 by rpki-client