Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa
File:                     3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json)
Hash identifier:          b1V6/Bk7+07n8n2Uwk+2zwYOfBdpGUr4bKqZ7yjfCOI=
Subject key identifier:   49:F5:00:53:D0:94:91:A1:61:73:99:C2:40:95:06:76:67:97:C2:8A
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F4328584EC7A1C77491C17C8CD358C380
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     7224
IP address blocks:        192.111.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c7:74:91:c1:7c:8c:d3:58:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a06f7d99-9288-485f-a38b-95e7f3f83a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:dd:1c:75:26:ca:a5:c6:25:07:35:ee:b8:
                    73:f5:43:1b:0a:7e:51:d1:97:88:7c:4a:bd:96:0f:
                    50:f8:84:c9:23:4b:76:0d:1c:0b:30:a7:a5:dc:c3:
                    cf:e6:54:c6:8d:68:e5:14:48:ac:67:31:af:17:6a:
                    d9:0a:08:f7:ed:15:91:c7:88:ab:8f:8b:50:92:9d:
                    bf:12:fd:a4:f5:4b:ff:3d:8c:d2:3c:94:46:e3:22:
                    26:a0:5a:76:17:a3:af:b1:cf:ef:bd:85:7e:e1:fd:
                    e4:83:54:59:b9:e6:8d:de:ff:3f:50:ef:58:4c:9f:
                    2c:09:a4:3c:7a:c5:8e:36:95:9a:cf:60:07:ca:a5:
                    b9:dd:cf:ff:4c:e3:4d:7b:14:84:78:5f:a5:b2:10:
                    5e:df:a9:cc:70:d6:29:7e:ec:87:63:82:94:08:77:
                    22:84:ca:c5:c4:5c:f3:a1:f3:09:9d:3a:09:0d:9d:
                    64:95:f7:0b:e6:c7:77:e7:f8:88:c0:7a:b3:da:fd:
                    d4:41:b5:f2:45:a2:47:e7:db:4d:f1:ef:e8:40:ab:
                    32:81:c1:f6:9f:a1:8e:e3:96:3a:59:5f:b0:62:b4:
                    9f:e9:6a:65:e6:bb:86:98:31:d8:8d:de:a0:9f:2b:
                    42:23:5c:df:f6:67:74:ba:9e:ea:86:63:9d:55:33:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F5:00:53:D0:94:91:A1:61:73:99:C2:40:95:06:76:67:97:C2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:60:42:51:4b:8d:09:bc:fd:b5:15:62:ea:a2:06:59:69:79:
         70:72:2f:54:8c:a6:3e:b7:91:7e:16:70:5c:6c:ac:b4:b1:27:
         ce:ff:5e:12:6c:76:1f:34:b5:c3:f3:9f:4c:3c:bb:72:63:d6:
         c9:85:fd:b9:29:c0:b6:0b:6a:3a:73:63:f3:75:f4:f8:cf:fa:
         a0:ca:69:38:a3:15:1b:01:0e:ea:c4:24:b9:79:47:7f:21:3e:
         88:a1:f3:be:ac:29:eb:cf:7a:cb:15:67:cc:2f:4d:91:f8:d3:
         5a:8d:b3:65:78:88:e9:d7:41:19:03:12:82:92:64:46:29:39:
         70:ab:70:b6:db:c7:f7:06:ad:42:fb:1c:c1:92:23:90:4d:16:
         43:16:28:18:e1:eb:0a:8d:68:c8:2a:f9:0b:04:4d:a0:15:ff:
         bb:8d:ad:f6:26:42:36:f5:20:9f:b8:ca:ee:7f:44:39:d9:74:
         9b:e0:38:43:6a:35:8e:ec:a6:ca:70:c4:e5:f9:16:39:88:06:
         ce:26:26:84:c6:4c:6a:df:25:40:c9:ce:6d:bd:46:4a:13:e8:
         0d:e2:ba:35:cf:58:5d:ff:00:5f:ee:27:bb:69:d9:92:8c:f0:
         33:46:0b:0a:3d:1e:10:63:85:8d:9a:88:58:66:2b:6e:48:24:
         ca:86:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:38 2026 by rpki-client