Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/81c8c6dc-4fd0-30aa-9b02-54b074516e00.roa
File:                     81c8c6dc-4fd0-30aa-9b02-54b074516e00.roa (raw, json)
Hash identifier:          ee9OwFPpDXsXULqV2ZYVyTI/DBm6/5e+VMotEaO3PdU=
Subject key identifier:   59:91:44:86:2E:F7:E8:1E:FF:F6:8B:8E:27:D4:D4:F9:CC:A5:3B:B4
Certificate issuer:       /CN=35108378-f5ea-460b-b05b-51d13b62a6da
Certificate serial:       010D0C9F4328584E9BE50848000E2818DC529D80
Authority key identifier: 61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/81c8c6dc-4fd0-30aa-9b02-54b074516e00.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     27500
IP address blocks:        199.91.192.0/21 maxlen: 24
                          2620:f:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:08:48:00:0e:28:18:dc:52:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35108378-f5ea-460b-b05b-51d13b62a6da
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=a784935a-18bf-4a8f-a796-c030e27ef99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:bd:6e:85:3c:f2:ce:a1:7d:35:2b:35:23:
                    cc:2c:a2:c1:a7:d5:c6:5f:55:d6:b6:b2:b2:33:e0:
                    a4:e6:14:b7:31:9f:d4:33:52:98:0c:54:f9:19:64:
                    99:0e:b9:39:d1:b0:d8:a6:3c:40:8a:e5:10:05:e5:
                    c4:ca:5b:f7:de:2d:8a:bb:00:1d:5c:c3:bd:52:f7:
                    46:1e:e8:00:8c:4e:fd:be:79:d8:f1:5a:72:10:64:
                    02:d8:67:ee:bc:74:41:02:17:09:ca:3d:9c:ed:44:
                    c9:5f:8a:6d:13:15:c9:1c:19:1c:86:0e:78:da:d4:
                    24:7f:fa:fb:41:cb:bf:cd:10:a5:e5:48:59:50:21:
                    a0:74:13:d2:0c:d8:15:39:c1:ea:ec:43:6d:8c:1a:
                    39:11:9d:c8:b2:e2:2e:49:52:22:93:e9:8a:72:42:
                    f4:e1:83:0a:47:93:b9:3c:95:b8:09:44:87:16:b6:
                    a1:95:b0:2c:e1:10:dc:51:91:c4:e2:fe:75:43:73:
                    bd:4c:cd:86:aa:16:49:27:15:f1:4c:88:90:4b:3c:
                    c9:9d:5b:e6:90:99:2f:90:c8:9b:2b:f9:bb:50:81:
                    c8:79:65:1f:af:fa:9b:dd:6b:8b:d8:4f:65:56:78:
                    83:e6:c3:8a:8a:62:aa:bf:8d:a1:02:19:b8:6d:54:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:91:44:86:2E:F7:E8:1E:FF:F6:8B:8E:27:D4:D4:F9:CC:A5:3B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/81c8c6dc-4fd0-30aa-9b02-54b074516e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.crl

            X509v3 Authority Key Identifier:
                keyid:61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.192.0/21
                IPv6:
                  2620:f:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:51:e9:36:4b:e8:e1:5b:25:71:fc:61:e8:f9:ab:8b:c7:
         51:76:da:ef:81:37:b5:bd:64:b7:a4:f3:03:f8:eb:f7:21:b9:
         4a:11:9c:e7:46:6d:05:cf:28:7f:6f:db:5a:a2:96:94:23:aa:
         30:e4:a0:bd:a7:61:ed:7a:00:61:39:5a:db:78:38:a7:db:20:
         fe:5b:f9:8d:1a:d0:77:fc:0d:3a:00:d9:bb:f0:f0:83:6b:27:
         41:11:c5:e6:6a:3a:7f:4c:0a:f3:a9:b7:62:33:91:f6:de:8b:
         f2:73:25:62:25:61:6a:12:26:c4:da:95:8d:54:97:7c:f5:ab:
         05:bc:fc:d6:99:78:6b:03:b1:1e:00:63:ee:97:71:e2:f1:ce:
         87:e0:91:03:09:b2:ba:50:29:5a:13:56:c1:d9:ed:3d:12:f8:
         22:86:30:a8:92:32:02:e5:cc:99:bf:db:50:a8:31:d9:70:74:
         54:60:c0:f1:4b:86:e9:e9:d0:2d:64:6f:21:02:e7:d0:b3:7c:
         0e:f6:95:b8:66:09:39:ca:b6:d7:f7:0d:54:c2:b3:c3:54:bf:
         ad:48:41:62:e9:94:37:7a:5e:fb:a4:a5:a8:4e:8a:e0:7d:a7:
         bd:86:0c:f2:f3:be:41:7e:3b:ec:6d:33:cc:8b:26:a2:09:e2:
         f8:79:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:09:36 2026 by rpki-client