Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/9c5f621a-d796-37fd-b35d-c2792102fc26.roa
File:                     9c5f621a-d796-37fd-b35d-c2792102fc26.roa (raw, json)
Hash identifier:          sLA8WtoFciFBk1lwCpQi6FP7EB7K37CrU8UTXFZ9OhQ=
Subject key identifier:   FB:78:6D:87:5D:C0:5A:71:85:5C:BE:88:FA:9C:2A:36:C2:BB:1D:08
Certificate issuer:       /CN=a91f81ff-5317-40f4-a544-5df2e3358a57
Certificate serial:       010D0C9F4328584E9BE51825FDB256E9DBF5BB00
Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/9c5f621a-d796-37fd-b35d-c2792102fc26.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     40628
IP address blocks:        204.62.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:18:25:fd:b2:56:e9:db:f5:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=82561fb0-de41-42ea-893f-c072e7281a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:09:ad:7b:42:9b:ee:62:7f:00:bf:60:af:
                    e1:a2:13:ca:2c:97:27:eb:20:ea:e9:cb:e4:85:67:
                    90:a1:60:5b:8a:89:4b:d4:e2:58:d1:9f:c6:b4:7d:
                    1b:0f:2a:80:81:00:5e:2a:9d:38:70:00:ba:1b:66:
                    de:fb:40:90:8a:f5:ca:21:9c:d0:ac:f0:c6:b9:5c:
                    50:95:d7:3b:0f:97:95:74:7a:24:30:e6:b1:7b:9a:
                    a0:62:59:8c:c2:85:66:22:a6:62:95:1b:57:8d:03:
                    35:81:2c:a1:19:91:0b:fe:07:34:1c:21:0d:31:bc:
                    76:94:e2:93:a3:e7:ce:77:60:eb:4b:4f:49:c1:22:
                    6c:38:0b:1c:56:3b:d6:71:92:87:94:2b:34:fd:fd:
                    c6:e7:d0:d7:56:29:b1:fd:20:62:2d:3e:3c:e6:42:
                    14:6e:5d:b0:64:6f:46:9d:57:d7:3e:a5:f6:2f:42:
                    17:d2:08:a5:aa:e7:4a:e9:c0:ef:b2:bb:91:46:24:
                    14:a3:75:8b:02:e9:4e:b1:f2:1f:00:a3:41:30:e5:
                    b9:7c:3c:1e:4c:7e:d0:4f:20:f6:47:f1:14:dd:4a:
                    e5:37:5f:b4:5c:1c:ba:04:22:1f:4a:72:1f:d0:61:
                    95:41:3c:2e:1a:b6:23:2c:9d:a5:64:e6:9e:3e:cd:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:6D:87:5D:C0:5A:71:85:5C:BE:88:FA:9C:2A:36:C2:BB:1D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/9c5f621a-d796-37fd-b35d-c2792102fc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl

            X509v3 Authority Key Identifier:
                keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:78:e0:f6:33:52:32:0d:18:c1:65:6b:c9:f8:8b:08:ba:
         d4:9f:a9:f5:35:df:85:76:b5:47:17:4a:19:5e:ad:79:d5:ee:
         20:25:f6:3e:4b:3e:ab:3e:4d:fb:9e:b1:2d:95:48:32:44:95:
         8d:74:cc:a4:a4:2c:91:b1:6d:c5:e4:f6:e0:00:b4:44:f0:d9:
         70:b7:4a:3c:55:a6:69:d3:ea:a4:3a:2a:aa:1a:f2:08:8c:93:
         bc:1b:e2:18:1f:6f:97:d6:9f:1a:34:7f:b4:9f:35:c7:bb:80:
         7e:fe:9e:d1:fb:c9:7b:00:82:7d:4d:9f:83:97:fe:f9:f5:b9:
         27:27:a3:dd:32:7a:71:4a:de:3b:e2:a8:ca:cf:18:41:05:e6:
         b5:cc:e5:cb:cf:8e:9c:12:6d:aa:58:40:94:03:7a:88:b7:d2:
         69:b2:23:60:fb:31:6b:60:13:5c:a0:7f:5c:c3:17:33:a0:80:
         5d:a6:28:7e:41:63:a0:fd:6d:aa:f9:c5:8a:ce:59:55:b3:51:
         cf:3a:89:fe:4d:75:ac:3c:64:59:b4:90:99:12:63:2f:43:a1:
         6d:ce:10:41:a5:2f:af:fa:d5:c2:59:6f:fb:f5:e0:9e:5d:67:
         56:96:78:d7:82:0f:0c:fa:ef:d0:f9:1a:7b:6d:c0:70:0f:ec:
         9e:34:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 09:27:39 2026 by rpki-client