Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/05e4aff6-f70e-328b-be50-6ef5dc6ea1ae.roa
File:                     05e4aff6-f70e-328b-be50-6ef5dc6ea1ae.roa (raw, json)
Hash identifier:          vAAbz9WhPj/iJNOjIIRSgmItgy3MLqNYCVMq+4L3GoY=
Subject key identifier:   C7:69:3F:0C:68:76:A1:1A:52:7A:40:B4:86:37:84:50:F3:8A:90:9C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EA790386097EF3F442B84FE40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/05e4aff6-f70e-328b-be50-6ef5dc6ea1ae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18186
IP address blocks:        207.57.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:38:60:97:ef:3f:44:2b:84:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=856f698c-9748-4f5d-add4-3694fd7f5ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:02:d6:81:39:dd:61:b2:cb:a1:16:2d:71:
                    52:dd:47:0c:4a:6e:da:1a:9a:1c:ed:ee:f1:c1:c9:
                    e8:2d:69:af:2e:68:16:28:bf:d9:01:00:e9:76:0f:
                    34:42:c3:c4:1a:8d:67:63:9c:de:5a:17:ad:f9:49:
                    88:25:cb:79:fd:bd:63:77:f7:75:c5:4e:a1:03:5c:
                    e0:5c:42:29:f9:60:8d:b3:02:1b:e2:2e:07:e3:29:
                    9c:dc:39:95:cd:80:91:3d:13:19:57:6c:48:e1:06:
                    0a:17:c3:5f:5e:1c:a3:44:2c:50:37:43:50:92:ee:
                    ff:49:a3:d2:1d:4b:86:a7:b3:8a:d0:2e:b3:15:be:
                    f3:83:dd:88:5a:df:76:9c:30:7a:9d:4d:9b:7a:ea:
                    40:a1:24:98:76:25:0d:38:68:c6:92:de:d5:6c:84:
                    92:b0:bf:74:8a:57:e6:af:92:b1:5d:ff:dc:17:6d:
                    13:23:a7:a0:16:c4:21:b7:cb:dc:ce:1c:a1:ed:f5:
                    d3:1d:0f:51:3b:9b:3d:43:21:1e:87:e8:82:84:ad:
                    c9:31:78:6d:b5:0d:29:51:e7:a1:7d:d3:64:0f:f2:
                    80:67:a8:82:5a:60:3e:0e:a2:44:f7:7f:23:c7:93:
                    ca:af:63:61:26:ca:04:42:a9:14:bb:9b:7c:c6:58:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:3F:0C:68:76:A1:1A:52:7A:40:B4:86:37:84:50:F3:8A:90:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/05e4aff6-f70e-328b-be50-6ef5dc6ea1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:8b:61:dc:94:13:df:65:c8:06:4d:b1:7a:1b:3b:01:c2:
         9a:11:d1:dc:04:75:bf:e2:3e:f6:03:27:3c:be:7c:2d:62:6d:
         86:a4:73:3b:e2:a3:9c:00:96:f9:28:53:4c:eb:f9:d6:27:1f:
         d2:c8:a2:80:18:73:f6:fe:7f:47:05:72:97:d2:fe:5f:31:dc:
         39:9a:80:d2:de:ad:e6:57:dd:a4:a4:eb:13:ae:fb:99:76:4f:
         aa:01:0b:35:b1:a6:6e:14:d7:44:a8:db:34:39:b5:33:a9:54:
         10:73:41:c2:b9:20:62:38:b7:58:94:22:a9:1d:eb:45:7d:0b:
         a4:0b:95:7c:f0:12:da:b1:5c:19:96:6c:63:3c:08:9d:fb:68:
         c0:cc:0f:c2:19:da:9d:58:61:81:92:cb:ff:f9:3f:3a:5e:51:
         1c:91:5d:3d:ea:d6:43:0c:e8:5b:9e:2f:c7:ce:bb:de:d0:4d:
         82:92:a6:44:ba:9b:24:c5:61:36:4f:e6:5b:c4:51:36:a0:bf:
         c9:9f:2b:46:63:d9:ed:59:06:04:f0:85:6b:d6:21:7b:2e:18:
         21:4c:76:58:24:bc:a2:1b:a9:c8:da:6b:3e:19:5a:d1:d8:3d:
         b4:a8:cc:25:d5:d2:0f:d8:e7:2e:09:f8:53:6c:d8:a6:c6:65:
         28:9c:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:48 2026 by rpki-client