Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccafd877-18cb-3204-b739-f009d29ea792.roa
File:                     ccafd877-18cb-3204-b739-f009d29ea792.roa (raw, json)
Hash identifier:          MUedoci4f/qbP8u5YOcPhHNnN8hrq7hNhR6ptukCNgQ=
Subject key identifier:   F6:76:15:AE:EC:88:48:42:05:F5:E7:58:33:69:33:2C:C6:36:2B:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78C353F8C9D3BC8C8DB0400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccafd877-18cb-3204-b739-f009d29ea792.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        173.12.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:35:3f:8c:9d:3b:c8:c8:db:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cfeca8d4-e1a6-40c3-9b82-2422dd5b3822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:35:df:f6:fb:e4:8c:b9:27:ab:ae:85:6a:
                    80:14:96:f1:0d:b0:88:ba:01:ba:00:f9:20:0d:84:
                    4e:3b:64:17:2f:a0:8e:ed:9b:64:d9:7e:26:55:c9:
                    db:d3:ba:b6:d6:76:d5:e2:87:a0:2d:00:c0:b8:2c:
                    1f:8d:92:a1:90:90:4d:d9:ab:11:8e:ba:20:35:05:
                    2f:bd:d2:25:86:aa:73:c8:4c:0a:ae:69:33:19:ac:
                    1e:36:1b:6b:ce:d5:2b:30:62:85:8b:81:bb:8c:9a:
                    77:a2:e6:ce:bb:f8:10:25:02:d3:fa:6a:fb:88:1f:
                    9a:c4:c5:db:37:0f:3e:4d:bd:16:70:dd:2c:80:c1:
                    12:7d:24:22:8e:1e:8e:e5:ce:f5:58:53:29:5e:71:
                    50:1a:d9:af:3e:25:48:5c:e3:b7:1e:3d:1f:00:4f:
                    a4:c5:af:b4:21:8e:10:be:1f:35:19:02:98:d9:f8:
                    3f:8b:10:5e:6e:7b:1a:0e:f5:48:7e:fd:fe:5f:72:
                    5d:4e:bd:5f:63:2f:9e:8c:16:91:02:e8:b7:88:c7:
                    66:93:2b:26:15:45:42:3d:ef:59:12:cc:b3:7c:5c:
                    bd:32:4c:ea:e6:e6:30:06:cc:0b:68:0f:f4:cf:cd:
                    29:7b:8c:7c:9a:f9:b8:26:06:3b:67:70:9b:a9:ef:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:76:15:AE:EC:88:48:42:05:F5:E7:58:33:69:33:2C:C6:36:2B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccafd877-18cb-3204-b739-f009d29ea792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.12.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:d6:00:ff:84:f5:44:a7:0b:59:7a:e3:fb:02:35:84:f9:
         6b:1a:5a:c8:f8:96:60:be:ad:c0:bc:9f:87:34:88:f7:fc:cd:
         1f:2c:f5:72:c8:4f:dd:aa:c5:fb:ce:11:f4:ea:98:59:41:de:
         8b:80:ca:5b:51:97:b2:2a:e2:d2:20:93:af:72:26:bf:bc:1b:
         a7:eb:3a:13:12:53:71:25:d8:70:c9:8c:3c:ad:be:9f:d7:4f:
         56:e0:e2:40:0d:e8:ab:7a:48:7f:34:67:9f:cd:47:13:85:ae:
         18:a1:24:24:30:b9:ac:3a:a8:f2:c7:52:46:f7:fc:29:71:61:
         31:3c:dd:0c:1e:03:77:80:9f:6f:83:42:54:de:ca:5a:31:65:
         b3:be:59:dd:b2:6b:2d:a5:b1:b5:6d:41:d6:ba:90:95:48:f2:
         de:44:1f:e9:91:bf:a3:e7:2f:b7:65:45:19:50:b1:2b:3f:e1:
         d0:57:72:b4:b7:79:e0:09:f0:a2:a1:2f:39:a4:fc:33:47:b8:
         f8:94:77:34:e9:63:aa:9a:e4:9c:97:2a:e2:12:da:95:1f:ad:
         e7:18:05:5d:04:ea:bd:d3:77:4c:87:6e:8f:a6:93:8a:ad:c3:
         ae:f1:a3:49:ae:e1:6e:0b:d0:62:78:2b:9c:11:88:a0:f7:c1:
         5f:b6:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:07 2026 by rpki-client