Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
File:                     b7134fac-817f-3d3b-94d7-fe93439e4a04.roa (raw, json)
Hash identifier:          lphmQ/hq0rZZ1RT3YjYI4jkiyN7BCUiqpsZ0K14jDHU=
Subject key identifier:   40:8B:6E:27:E8:57:57:BF:DE:97:BE:25:DE:5C:65:D3:50:41:CE:00
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584E5A49FF1B232034BA13A77180
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     20326
IP address blocks:        64.130.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ff:1b:23:20:34:ba:13:a7:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=1826ee39-f652-403d-bf79-d97e71a08349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:c8:a3:ba:91:aa:d8:37:94:5f:f5:3e:82:
                    17:a0:70:f7:33:fb:de:af:da:80:bd:ff:47:44:ea:
                    65:83:ca:35:5b:f4:23:0a:4f:b2:1d:19:ad:8a:63:
                    bd:01:d7:03:6d:db:70:0e:ca:11:84:8d:08:a8:ae:
                    6e:4c:ad:b2:27:2b:e9:c4:4e:bc:a2:07:5d:00:df:
                    8e:ac:64:e2:7f:bf:35:e6:7f:ff:03:a2:dd:24:df:
                    bb:5d:ec:29:7d:aa:99:05:d7:df:2b:51:d3:d5:b8:
                    60:cd:cf:f8:ed:7d:c3:19:7c:10:ad:14:ee:53:4d:
                    56:4e:8d:cf:8e:89:24:c7:22:c3:fa:ab:22:77:e5:
                    c1:fc:da:4b:2a:10:00:7a:f0:46:7d:a3:1c:c9:50:
                    45:7e:3c:74:3d:b1:3a:f9:96:45:5c:31:e4:d5:2b:
                    29:3c:19:42:78:ef:df:5d:20:01:7b:7c:5e:eb:d8:
                    a9:99:46:74:3e:a5:cf:d5:f6:b9:c7:0d:2a:5c:ed:
                    85:c9:b4:e7:b8:3b:8e:18:83:bc:49:9f:7e:68:1c:
                    fe:7d:73:cb:94:c8:4b:16:7d:ad:73:ff:ee:bd:53:
                    dc:1b:ad:dd:67:88:2f:c0:7f:77:32:f2:2d:d6:02:
                    77:0a:97:42:0a:ef:13:ad:bd:db:09:32:52:d0:ac:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8B:6E:27:E8:57:57:BF:DE:97:BE:25:DE:5C:65:D3:50:41:CE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:d7:b8:40:a7:f7:8b:bb:de:bf:b1:14:f2:84:9a:95:20:
         7a:5b:8e:e5:3c:dc:82:9a:2e:83:fc:86:4c:93:5d:3f:cd:30:
         9d:69:e6:0e:ea:85:4d:f4:23:4d:6e:5d:37:ad:2f:8f:80:f3:
         33:11:88:03:82:b6:af:d7:4e:6a:6b:29:72:0f:d6:c4:74:1b:
         15:ab:fa:05:be:f5:76:34:e9:c7:ff:ae:7a:54:ee:77:68:17:
         30:97:f3:6a:c7:5a:59:1e:b5:23:f1:42:97:aa:e7:c1:5d:38:
         16:8d:96:9b:fd:d1:25:65:13:bd:60:51:15:29:5f:40:92:b5:
         da:37:3a:77:29:27:8c:59:8a:d5:ad:19:c0:be:f9:c4:86:eb:
         97:92:a6:ca:e2:8c:c2:4a:7d:89:20:b3:a7:0e:dd:56:d0:1f:
         0d:b4:5b:7c:6b:48:23:b2:f4:15:67:4c:64:6d:05:51:05:d5:
         d5:8f:5f:16:d6:de:a2:28:cb:72:f4:ba:cb:2a:7e:a0:6f:a8:
         a4:6a:26:59:d0:ca:a4:f4:6f:ef:63:75:69:d4:f5:3a:95:58:
         50:da:97:89:f4:21:5b:f1:90:e6:86:f4:fd:34:b4:13:0a:8b:
         fe:48:24:73:87:e1:f1:45:98:37:c5:d1:17:6c:71:5d:25:06:
         3a:e9:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:12 2026 by rpki-client