Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/7154b04f-933e-339b-8695-fa19bd4c0e61.roa
File:                     7154b04f-933e-339b-8695-fa19bd4c0e61.roa (raw, json)
Hash identifier:          xY5Jxvc9oHw8/8hdRWsuQBWAEG3FFrL3C84f9y6bWV0=
Subject key identifier:   0E:22:A7:E5:C7:5B:7A:70:A7:DE:9E:F8:D8:86:C4:9A:FA:C9:CD:DB
Certificate issuer:       /CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
Certificate serial:       010D0C9F4328584EA79463D3CC5874C1F03AA000
Authority key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/7154b04f-933e-339b-8695-fa19bd4c0e61.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15830
IP address blocks:        199.244.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:63:d3:cc:58:74:c1:f0:3a:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b5707bb3-5978-4dbe-8c13-24d30359a152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:dc:57:6d:2e:1c:82:11:f7:82:76:34:e0:
                    81:37:62:ec:63:6c:64:57:ed:d0:d1:19:4e:d6:2d:
                    d9:2f:7f:dc:72:9a:e1:c4:ed:ae:e4:ae:5f:51:20:
                    53:c2:5f:34:5d:ee:73:b1:97:89:49:0c:24:21:7d:
                    0b:16:ac:1d:68:e3:81:0e:37:ff:4d:0d:08:33:b3:
                    76:55:48:23:52:01:62:b7:77:5f:96:c1:af:f7:96:
                    50:94:3a:66:7e:34:18:03:f9:7e:32:6d:f5:e1:43:
                    af:ab:b1:df:cd:54:ae:f3:07:10:d2:b3:c3:48:e2:
                    8f:f9:f6:0e:44:a5:38:3b:69:96:35:f8:7a:8d:f6:
                    05:7f:88:4f:b3:a4:77:b9:7c:ba:f8:cc:0c:f4:32:
                    ff:76:94:09:d7:13:ab:3d:9f:36:8f:2b:af:9c:5a:
                    9b:99:92:3f:b5:75:10:70:3a:7a:46:98:23:a4:f0:
                    6f:21:91:e9:0b:38:79:43:d3:db:b2:78:e6:11:30:
                    fd:1a:75:38:65:98:63:4b:e5:3c:ab:04:ff:e7:de:
                    31:11:f8:74:1e:86:22:2e:1c:bf:e6:41:be:7f:8c:
                    ec:04:2e:ba:53:f7:24:5a:81:53:3f:3a:49:57:55:
                    35:73:56:9a:de:c3:28:e9:3e:ec:56:90:e6:2b:bc:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:22:A7:E5:C7:5B:7A:70:A7:DE:9E:F8:D8:86:C4:9A:FA:C9:CD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/7154b04f-933e-339b-8695-fa19bd4c0e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl

            X509v3 Authority Key Identifier:
                keyid:05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:af:5c:79:39:75:86:22:33:dc:34:88:87:44:06:2a:78:
         d4:28:ae:91:1d:f5:80:25:6c:34:f2:25:bf:77:5e:10:e9:ad:
         3a:96:b7:7d:5b:bb:51:af:f2:1b:1d:c4:10:ad:e8:74:6b:46:
         fa:22:8c:c7:ff:11:3e:38:17:46:c4:29:86:c8:08:d5:99:10:
         23:5e:7c:f2:5e:a1:4a:84:a6:e0:62:7a:77:5a:c5:b7:51:83:
         f8:ff:c8:75:b2:75:b1:85:14:cf:30:7d:0a:43:3b:0b:d2:27:
         4a:b3:48:d6:1d:79:5a:07:d1:36:98:9f:a0:43:81:1a:53:38:
         f0:8d:75:34:fa:8f:47:05:80:4d:ee:c6:17:1d:39:17:bc:fd:
         e4:96:8c:22:d8:fa:bd:30:f5:2b:3b:b4:a2:b8:47:43:44:9c:
         07:d0:41:fd:08:d7:af:c6:5d:d6:54:3a:cf:d7:0e:91:45:2e:
         2b:e9:ee:6b:c2:36:9f:bf:c4:e7:0f:6c:6f:d3:32:ff:ef:2f:
         8c:75:9d:79:a6:7a:4e:e6:c9:38:c2:8b:49:88:d2:05:5f:e1:
         c0:14:72:fe:ef:81:1f:a9:2d:70:cc:20:a8:98:f1:f7:c8:ba:
         d6:c9:cf:42:f1:d5:56:b5:89:88:fa:9b:36:a9:20:c5:0d:c1:
         95:df:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:56 2026 by rpki-client