Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
File:                     af9473bf-b67e-357e-95a9-91892269d8f7.roa (raw, json)
Hash identifier:          makmGU/tJaFy3/LCVwwmuH98g8YNP+xE5UTNfB/KJpw=
Subject key identifier:   68:D2:31:25:8E:A6:4B:76:45:CD:E2:A9:DF:79:64:C8:02:68:F6:6E
Certificate issuer:       /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial:       010D0C9F4328584EC371BEAB4BFA10B3EA312D40
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        208.79.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:be:ab:4b:fa:10:b3:ea:31:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=3f4931e8-4493-4199-ab10-290fc9606ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:be:04:e1:f1:93:cc:80:1a:73:c2:28:39:
                    43:c1:39:67:e9:50:f0:78:8c:76:21:da:db:86:bd:
                    36:e0:c7:35:52:fd:50:fa:68:19:29:56:c6:b7:3b:
                    0f:f0:87:34:5b:33:64:d8:94:fa:70:6d:7b:49:98:
                    f3:76:ad:46:43:2d:d8:b4:3e:8f:03:17:96:33:e5:
                    46:ed:5a:a7:9b:45:47:48:b0:c3:5e:57:f6:78:25:
                    74:ed:b8:7d:75:0e:bc:50:69:83:14:bc:98:08:3b:
                    6d:2b:60:0d:b5:60:d7:d2:dd:a3:0f:ba:f6:95:a7:
                    10:24:72:ce:59:4b:1e:2a:28:b7:3c:a8:3c:69:a0:
                    f1:e4:fc:2b:62:d8:6f:9b:13:27:cd:e5:2e:af:58:
                    0a:33:1c:48:28:8d:d1:34:42:43:72:32:29:2a:e1:
                    0f:90:d2:fd:fe:19:20:9c:1a:7c:28:74:f3:e6:85:
                    c4:c0:b4:91:2c:ef:34:ee:64:e9:fe:b9:92:8d:f4:
                    d8:31:29:0a:17:75:96:10:fb:18:97:e1:c7:17:ca:
                    06:00:97:c4:ec:9e:98:20:ed:4b:2d:d8:93:7e:fe:
                    0e:46:12:00:be:40:49:4d:ac:21:47:fc:8c:81:b4:
                    1e:06:9a:e6:08:9f:ba:31:81:52:d6:55:24:2c:52:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D2:31:25:8E:A6:4B:76:45:CD:E2:A9:DF:79:64:C8:02:68:F6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl

            X509v3 Authority Key Identifier:
                keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:11:55:ed:44:cd:e0:8e:2e:4b:25:f3:ce:14:3e:bf:a0:bf:
         91:a2:25:fa:d3:97:4b:fa:03:95:57:8a:49:23:bc:ab:f3:7e:
         02:31:db:58:57:cd:fc:a2:ac:f3:39:ce:35:c4:26:ad:45:72:
         e0:ac:e0:fb:23:3d:e8:d0:35:69:28:bf:89:25:4b:05:46:8d:
         78:ea:f6:02:4c:d7:5e:f0:f6:04:a5:e1:c8:cd:3c:3a:e0:40:
         95:a4:2b:b8:11:a1:75:78:5b:f7:89:7b:2d:04:c1:9f:96:41:
         a8:dc:8e:e6:ad:cf:d0:39:f7:3d:0a:4c:2c:1e:a1:25:2c:69:
         80:df:34:54:6e:ce:85:ec:4d:09:92:d9:50:c5:3a:54:3f:48:
         b3:22:9e:17:1d:54:ab:40:2d:3d:02:3b:26:32:b5:cb:2f:dc:
         d1:62:f0:83:d5:17:33:43:b4:9f:cd:5d:0c:a1:55:b3:bc:00:
         f0:25:5b:34:66:d8:a8:2c:0d:e4:fd:11:2b:cb:9f:e2:fc:48:
         2a:2a:04:e4:15:46:d2:6e:ff:da:7e:4a:63:c0:7b:ba:61:ce:
         45:9d:7a:2f:aa:2b:6c:bd:78:dc:a2:ee:10:59:9c:42:d2:cf:
         2e:04:09:c3:3f:0e:a7:fd:ea:8f:4d:23:87:f5:70:1c:59:9a:
         76:30:1d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:13 2026 by rpki-client