Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/05c0a5cd-992e-378d-8cfc-0c079cedb0ab.roa
File:                     05c0a5cd-992e-378d-8cfc-0c079cedb0ab.roa (raw, json)
Hash identifier:          dbzCfVS6KSjUXhy0qIzDhvWvmfoomb/SID1v5BdpAzM=
Subject key identifier:   95:79:F6:AE:1D:59:15:B5:48:5D:16:0B:87:9E:E0:EB:6E:24:6C:F4
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EA445230E7A3AA26B5117A260
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/05c0a5cd-992e-378d-8cfc-0c079cedb0ab.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6922
IP address blocks:        204.158.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:23:0e:7a:3a:a2:6b:51:17:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=0c2e2b12-fa87-4d5f-b4ad-0cbe13c7b6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:67:c2:96:db:52:12:4f:0f:ee:d5:e3:3c:
                    af:52:9f:7d:d0:f2:ab:c7:b7:66:86:1a:51:40:81:
                    8a:9c:6b:12:df:5b:02:6a:4b:27:8f:11:86:f6:85:
                    fa:d7:4a:ca:64:27:c5:04:03:1e:6a:2e:19:d3:87:
                    42:9d:df:1f:43:7e:f7:78:10:0c:f9:c7:dd:42:14:
                    72:14:c9:62:fe:a3:00:69:43:db:72:f3:66:14:7e:
                    19:d8:bd:a5:0f:f9:3d:69:12:dc:05:fe:b8:21:39:
                    42:39:e3:5b:94:7c:fa:50:be:01:34:0e:48:0f:1f:
                    63:28:17:ad:9d:ae:c7:30:fa:70:51:90:dd:dd:54:
                    01:8b:d1:97:97:21:d3:b7:50:e4:92:c8:b6:8d:ec:
                    ad:59:35:0b:da:8d:28:ba:37:18:c4:5d:14:2e:67:
                    d4:c4:f8:67:8c:55:41:17:d1:53:9a:2b:a1:9e:87:
                    32:c9:fb:c3:5f:02:84:5b:36:46:d8:a6:b6:4f:93:
                    ab:03:2e:08:3b:72:92:4a:87:e5:68:6a:b1:fc:23:
                    6f:75:54:a0:ef:12:3c:1c:a8:bc:e1:da:82:27:18:
                    df:58:da:ca:fc:56:3b:89:9a:22:00:ba:2c:ff:57:
                    0a:8d:59:63:ca:ef:ae:ae:74:52:8b:e1:cc:3a:c6:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:79:F6:AE:1D:59:15:B5:48:5D:16:0B:87:9E:E0:EB:6E:24:6C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/05c0a5cd-992e-378d-8cfc-0c079cedb0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:d8:d0:7a:80:2b:62:44:cb:ec:27:63:94:34:89:52:b7:
         67:6e:e0:7b:18:84:ee:14:7a:07:9f:e5:fe:14:6f:8d:38:3b:
         59:e5:2c:4f:fd:14:92:1e:c8:b8:7e:d0:8f:31:06:9a:44:83:
         99:10:21:5a:47:77:52:25:8f:87:05:45:59:e6:3f:25:62:33:
         c7:74:be:44:f5:32:78:7f:0c:79:86:09:f9:e2:c2:05:2b:ac:
         0a:f9:c9:e8:8a:57:cb:8b:46:85:37:35:73:76:6a:55:52:d5:
         14:67:f6:d3:f6:58:32:c1:17:24:49:f6:65:0c:69:a5:48:32:
         29:2f:0a:be:1e:46:60:8c:71:36:12:74:53:7d:30:89:4d:49:
         3e:2c:48:18:c6:4c:f5:b6:15:b4:13:e5:25:c6:2c:3c:90:a7:
         fb:dd:72:20:ee:72:f0:b7:68:55:0f:1a:37:1f:de:53:8a:d2:
         10:86:9d:57:a6:01:ec:8f:12:cd:ad:94:c2:e9:66:da:dc:71:
         4e:e2:92:e3:ab:a1:d6:37:09:f9:c4:c4:d5:02:2b:c0:7d:33:
         e9:7e:2d:cb:19:68:d3:46:c8:e4:25:a6:67:40:dc:1a:32:db:
         e3:ec:56:e3:d0:17:7b:97:47:86:b7:22:34:0b:4c:e9:e1:84:
         0d:e0:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:46:34 2026 by rpki-client