Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa
File:                     007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa (raw, json)
Hash identifier:          I3mglFk4+HaLpKt2BwBdZ7TR+YguWWWMcEZKC/cNVeU=
Subject key identifier:   4B:9D:74:29:65:74:3D:AE:C3:64:FA:8C:F0:2A:75:79:BF:D0:5A:56
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584EA5AA6F551BB149ED8A259E80
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     3629
IP address blocks:        199.109.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6f:55:1b:b1:49:ed:8a:25:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=4720f672-3c52-46f1-950d-5499794c2c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:fc:09:3c:58:18:4f:a4:2b:73:31:ea:f3:
                    1b:00:30:a4:fc:c6:46:6b:16:06:52:a9:84:8f:47:
                    01:b4:c8:3c:8b:15:1d:61:ed:c7:25:33:1c:e6:44:
                    69:84:6d:dc:18:87:73:8c:c1:7e:01:be:ce:ac:c4:
                    0b:1d:53:5a:b5:d3:bb:ad:cf:64:11:4b:e4:74:59:
                    ab:30:92:3c:d7:72:eb:1d:57:d9:ef:3f:31:98:ac:
                    37:0f:84:c6:a3:6c:d9:99:e5:d8:2d:b4:9d:ac:89:
                    1a:2b:74:63:ed:56:e3:50:23:23:b1:09:e1:89:b4:
                    65:a2:5b:d3:a9:4c:4c:da:25:b3:a0:1c:cc:0d:a4:
                    00:8f:c2:9c:eb:f0:ad:a8:93:7f:1b:25:3a:4b:1a:
                    a7:32:ff:87:69:c3:36:a4:19:b0:94:fd:0b:55:85:
                    79:c5:15:e2:51:30:e1:74:1f:56:ed:25:f1:46:6c:
                    eb:99:96:55:82:82:a9:35:20:03:d5:d5:07:98:4e:
                    6d:6a:84:a4:eb:2f:eb:47:f4:fc:e9:cf:49:b1:93:
                    6d:31:d9:6d:92:84:00:4f:1c:73:19:2d:ad:9f:30:
                    fb:61:44:02:b8:9b:6d:52:4d:fa:56:d9:f1:a4:b4:
                    77:e3:b2:db:05:06:85:34:80:92:bb:b0:8e:57:65:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:74:29:65:74:3D:AE:C3:64:FA:8C:F0:2A:75:79:BF:D0:5A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:85:9f:fa:20:af:27:e4:ca:94:a7:21:5a:68:af:4b:45:4d:
         46:ac:17:34:18:3f:b2:b5:d9:18:40:19:5f:96:4b:2e:60:35:
         af:98:6f:4f:7c:f8:3a:55:47:c9:06:61:27:ae:8a:b7:4f:d3:
         6c:6a:90:13:b5:36:55:93:94:79:86:b5:aa:a6:0f:57:61:f9:
         84:c3:1a:98:3e:70:15:b6:95:15:e5:bb:f0:1d:98:ba:52:0b:
         df:0c:21:93:2b:99:11:9a:3a:bf:9e:9c:0b:11:83:45:f2:76:
         40:44:b1:e7:6a:ab:88:9a:97:17:bc:8f:7a:48:06:10:ce:64:
         69:1f:cb:fb:ca:e4:b2:44:14:ab:6b:1d:ad:6c:69:69:f7:bf:
         b9:c6:31:f4:2b:b3:27:83:16:8d:0c:31:7f:93:93:fc:ec:1d:
         f3:a7:3b:e6:35:30:bf:93:95:2a:99:37:4f:55:41:61:d6:c1:
         be:e8:ca:50:5c:34:e6:36:e0:d5:7b:46:69:c5:ec:11:08:3e:
         53:b8:a8:df:9c:73:41:2d:65:aa:4e:69:ed:6d:d1:7e:2d:d3:
         a5:e3:91:ef:39:f1:4f:36:5f:b2:a9:90:f9:57:15:f8:3e:3f:
         7b:66:21:1a:e1:31:27:a9:f7:87:88:ea:b9:cc:1a:2d:91:8a:
         f1:eb:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:14 2026 by rpki-client