Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60/c85c9c54-b2f2-3fb6-9a35-3f3dd2317a66.roa
File:                     c85c9c54-b2f2-3fb6-9a35-3f3dd2317a66.roa (raw, json)
Hash identifier:          B4ZtXCOWtaz88pkrCi0Rtuwhz4cTlFhQdlb+OCmRIWA=
Subject key identifier:   D4:40:82:BB:87:71:88:B3:44:66:43:71:95:71:D3:E9:33:54:BE:62
Certificate issuer:       /CN=cb0f0325-81cb-4081-854e-1e6fed31af60
Certificate serial:       010D0C9F4328584E4AEF736F47008D0E22957200
Authority key identifier: 09:35:33:2E:CD:24:1C:05:D4:CE:D4:AF:02:41:09:E8:A7:FD:95:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60/c85c9c54-b2f2-3fb6-9a35-3f3dd2317a66.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        199.164.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60/cb0f0325-81cb-4081-854e-1e6fed31af60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60/cb0f0325-81cb-4081-854e-1e6fed31af60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:73:6f:47:00:8d:0e:22:95:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0f0325-81cb-4081-854e-1e6fed31af60
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=7056b136-a6a1-4894-affe-983c07f720bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:50:66:75:a4:a8:ce:96:3b:46:4a:4d:06:
                    05:ad:d9:e6:ec:97:51:44:4c:fe:3b:6d:29:a7:ec:
                    d0:e6:1a:4a:7d:a7:63:a7:de:5b:ff:f8:87:3a:7a:
                    9c:cb:99:13:5d:57:51:68:a4:c7:c3:dd:1a:1f:2f:
                    2c:77:2e:c4:e7:fe:56:e6:fa:2d:83:d2:13:a6:9a:
                    71:83:bc:24:d8:c0:b7:e8:b9:fd:24:9e:8e:11:20:
                    cb:f4:f5:21:96:54:39:ec:bd:f0:ec:89:0c:6c:17:
                    f9:75:cd:65:f2:10:43:c2:2e:f2:95:84:9f:13:0d:
                    fd:0b:22:ba:d7:19:85:12:f1:10:f1:d0:a4:26:64:
                    90:e4:c7:33:ba:fc:a5:d1:ad:92:37:c3:2c:a6:2a:
                    bc:b0:10:1c:88:a6:03:3c:68:5c:aa:d4:df:aa:89:
                    0c:19:13:df:d1:de:24:1e:46:d1:5a:b4:aa:ed:26:
                    3b:a8:33:2b:47:b6:c4:9e:93:9c:57:58:ec:9a:8b:
                    57:66:a2:ee:e5:b3:41:bb:f8:a9:9b:65:19:c1:16:
                    ee:a6:8d:ee:10:dc:ae:b9:1b:1f:4b:b0:d6:9b:90:
                    72:60:3d:02:32:59:3c:1c:a0:9f:d1:94:bc:69:f2:
                    35:d8:da:53:ba:36:4e:01:93:b4:86:45:e9:29:50:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:82:BB:87:71:88:B3:44:66:43:71:95:71:D3:E9:33:54:BE:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60/c85c9c54-b2f2-3fb6-9a35-3f3dd2317a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60/cb0f0325-81cb-4081-854e-1e6fed31af60.crl

            X509v3 Authority Key Identifier:
                keyid:09:35:33:2E:CD:24:1C:05:D4:CE:D4:AF:02:41:09:E8:A7:FD:95:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cb0f0325-81cb-4081-854e-1e6fed31af60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.164.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fb:92:84:e4:61:9a:12:03:98:ee:fa:54:ea:43:c4:85:5e:
         5a:81:5d:b2:93:c8:ec:f6:3c:44:7e:9f:1a:29:9f:78:71:f3:
         dd:a8:ca:58:2b:5a:29:35:3d:2b:36:07:a4:03:0b:b3:5e:34:
         9c:88:64:61:1b:60:ce:45:15:f5:c6:5f:82:21:53:08:47:ca:
         9b:d6:38:44:d9:55:97:67:89:dd:c9:eb:5e:1f:27:04:f1:70:
         ef:d7:46:e6:82:67:a2:68:d2:ed:fd:45:9e:59:c3:94:83:01:
         4d:7e:f7:98:30:7a:11:4d:4f:0c:c1:03:c8:96:a4:ae:39:cc:
         80:1d:76:3b:3c:df:d7:0e:13:5e:eb:e6:bb:b2:34:dd:d5:27:
         e0:ec:4e:c6:99:66:28:9a:0e:2f:e0:0a:20:bb:70:dd:44:7b:
         6d:28:72:09:ce:32:6b:8c:d8:48:aa:3d:32:db:ed:ee:70:08:
         f1:ef:e4:e8:95:32:b5:1a:0c:66:93:bc:c5:78:93:58:39:c6:
         cc:7e:47:e8:67:2d:2f:00:2f:e3:7b:1d:96:b8:5f:af:1c:1a:
         c1:44:d6:cc:06:ec:49:05:01:3f:9b:d6:68:53:3c:db:10:fb:
         b0:d2:17:fe:4c:f3:e2:cc:a1:7a:26:d2:fe:5e:5c:05:60:d5:
         82:db:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:24:32 2026 by rpki-client