Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa
File:                     f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa (raw, json)
Hash identifier:          afn3Hm5Ojj07rbsYk3ci79+o+8DxT0pSVQuuWdkHxSU=
Subject key identifier:   38:3B:5D:9B:28:6D:0B:C6:43:1D:EC:DB:18:6D:21:A2:07:99:57:75
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E78FF7B42998D9B40AA5707E0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        216.249.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7b:42:99:8d:9b:40:aa:57:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=9b8a84ba-7498-4d08-ac87-72dd1ae4290f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:12:dc:96:46:c6:04:00:1a:b7:bd:ea:bc:
                    8c:47:b9:26:b7:2d:d9:ad:33:2b:86:e3:88:27:1f:
                    95:dc:d1:42:78:ad:65:3a:98:b4:0f:73:32:6c:ac:
                    f9:3c:b3:87:db:68:2e:b2:24:81:24:dd:35:b2:bd:
                    ab:b4:59:94:57:d4:71:7e:74:36:b8:e4:c4:92:39:
                    61:d0:3b:c5:14:dd:9f:51:60:20:aa:cd:74:9b:03:
                    3b:4e:ae:eb:9e:c1:dd:dc:c9:5c:1a:0a:c0:7b:26:
                    07:76:fe:8c:4c:2d:6d:73:30:91:a3:d5:d9:f9:ea:
                    be:dc:63:e7:18:6b:48:4d:05:6e:e2:d3:b4:80:11:
                    9a:be:0d:20:a9:d6:5a:e5:b3:ef:5f:e9:72:c0:34:
                    45:66:c9:aa:ed:c4:c8:45:64:fa:c2:e3:86:ee:2a:
                    e0:72:67:01:6e:68:dc:68:83:e4:a3:30:75:71:ac:
                    15:84:10:26:a6:5f:b8:2e:5b:52:17:c4:11:e5:64:
                    83:76:81:c1:b4:bb:20:52:91:c6:e8:9d:88:2a:12:
                    b6:90:fd:af:68:fa:dd:bc:aa:cc:aa:e1:ec:8a:24:
                    11:87:15:c1:c1:af:09:bf:3b:3b:f2:54:0a:5a:5b:
                    ea:1c:73:de:6e:22:06:82:d9:c9:94:97:50:c7:8c:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:5D:9B:28:6D:0B:C6:43:1D:EC:DB:18:6D:21:A2:07:99:57:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2abfdc4-6b80-3c2d-96b8-c52af3ebd731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:f5:20:06:1c:cf:aa:5f:00:e7:cd:9d:c6:2e:0f:2d:93:
         76:8d:14:20:9a:79:05:52:5e:f6:62:83:6b:0a:f1:76:9d:ed:
         d8:c6:ce:12:e4:58:8d:72:ed:2a:0a:ef:04:b6:98:90:c4:66:
         76:49:05:32:d3:32:c7:70:d4:14:b5:17:2b:26:3e:19:55:35:
         96:3e:16:d2:cd:d0:d0:ce:95:e2:d8:ec:42:58:1a:1f:c2:ee:
         33:e6:1f:78:08:0d:89:33:ed:70:59:b7:a7:de:c0:d5:97:81:
         9b:ca:9f:8a:50:31:7a:a2:18:45:01:34:75:92:bb:e4:a3:60:
         f1:a5:02:5e:e5:50:1d:43:f7:95:c8:47:d9:72:37:37:5f:15:
         65:b8:97:7d:3e:1d:0d:99:ab:14:a0:a9:64:a2:a8:b0:e7:89:
         79:8c:e0:7d:54:b1:06:6c:d4:68:2c:12:f1:78:39:bb:7a:ab:
         b5:35:d9:eb:81:b8:d4:be:ac:68:4c:9b:ef:97:aa:b1:65:35:
         02:95:57:7a:16:a5:2d:ad:86:96:d3:20:64:39:5f:eb:ae:64:
         af:f7:96:3d:17:f3:6f:67:7f:80:6d:99:9f:bd:07:08:09:d1:
         56:23:85:86:7c:f8:0f:1a:c8:50:f8:e3:c4:35:2f:bd:12:bc:
         dc:f1:b0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:09:01 2026 by rpki-client