Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4713f01f-5b80-3cac-85a6-971ac5132813.roa
File:                     4713f01f-5b80-3cac-85a6-971ac5132813.roa (raw, json)
Hash identifier:          KwGEt0JmigtDnc3tG8muTJst3SXDnTYmAnf76ZQ0nYc=
Subject key identifier:   0E:E2:90:52:0C:D9:13:6F:47:D4:22:CE:10:15:AF:2B:B3:2A:B5:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64E6C535A1588B278EC040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4713f01f-5b80-3cac-85a6-971ac5132813.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     200005
IP address blocks:        170.199.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e6:c5:35:a1:58:8b:27:8e:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=40abd498-3151-40f3-bd0c-172a6274a038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:06:2f:85:67:90:39:56:bf:42:0a:a9:54:
                    2a:3a:fa:6e:38:00:c7:0d:c5:d8:c4:5a:25:69:ad:
                    2b:b3:0d:b2:e2:c5:b6:a1:b7:5a:71:0d:b1:dc:a0:
                    88:75:c5:cc:28:2e:18:23:86:26:91:a4:5c:73:90:
                    e2:49:5c:a5:ab:33:2e:1d:ae:e3:e8:0b:62:78:43:
                    95:93:bf:5b:42:17:9f:ec:d0:ce:07:23:02:ba:44:
                    b9:47:c3:ba:8c:01:09:6c:7b:be:84:9a:1c:22:cb:
                    18:3e:d2:9d:93:a5:f4:fb:d6:e9:df:ef:c8:e3:b1:
                    7a:e5:81:7b:76:6f:d6:f8:5b:2b:49:65:fa:bb:4a:
                    73:15:2f:ec:7a:61:33:02:a2:89:66:43:be:65:8b:
                    c0:af:06:a8:4d:62:c3:ff:ac:6f:5c:5e:ee:2b:67:
                    fc:28:17:eb:db:22:73:29:70:fa:58:98:a7:57:16:
                    0d:3c:22:3e:89:87:1a:77:c4:42:00:90:9c:53:e3:
                    a1:43:52:53:b8:56:0e:dc:78:c8:7d:a6:56:19:2d:
                    63:f3:14:3d:3c:4d:46:cf:8f:7b:32:64:d0:c9:51:
                    ee:af:ed:a6:66:5a:be:b0:2a:cb:5d:f1:7c:43:ad:
                    92:92:cb:6b:3c:e7:43:ca:25:53:b7:78:6c:03:70:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E2:90:52:0C:D9:13:6F:47:D4:22:CE:10:15:AF:2B:B3:2A:B5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4713f01f-5b80-3cac-85a6-971ac5132813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5d:f2:5f:1c:89:ef:39:8d:fc:10:5d:45:8d:84:78:ff:c8:
         a1:1b:9a:9e:6f:e2:e6:56:3c:17:62:ba:a4:07:4f:43:6a:a6:
         09:12:50:6d:6b:5b:a6:0a:8b:4e:0c:47:37:93:e8:d1:a9:a6:
         7f:4c:de:bc:7b:d9:56:97:ba:17:83:4c:3c:7e:61:59:e3:04:
         37:0e:e4:9a:85:92:96:0a:e8:3e:fc:8a:68:e6:6f:ce:02:7e:
         7b:35:f4:b0:9c:71:32:c9:1c:91:7b:f3:97:e3:2d:ff:99:8a:
         e0:c6:dd:8a:d5:6e:d4:b8:12:34:b3:a3:97:35:8a:f7:7d:3a:
         5a:57:a3:a5:47:40:0f:dd:6c:26:01:b3:55:3e:46:45:17:b9:
         08:3b:e9:8d:c6:37:90:16:8d:00:f3:39:01:37:79:69:a1:5b:
         bb:e4:37:66:1b:07:0f:3b:00:da:1a:e4:84:18:98:28:62:e1:
         7f:70:1a:50:5e:4d:b8:60:c1:1a:71:fa:92:8e:cb:32:a9:09:
         90:33:89:2b:26:f1:59:9e:0f:28:48:55:dd:37:8e:61:17:e1:
         d9:67:ac:3b:58:48:f0:b8:9a:8e:68:c4:5a:e3:de:86:31:8a:
         f1:d0:d9:e3:06:30:35:3a:70:65:65:17:14:a1:69:a8:1e:8b:
         de:5a:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:46:42 2026 by rpki-client