Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa
File:                     a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json)
Hash identifier:          0t93zkiGAhtho7m+zBxZ60HBTNou55MOEjtvlWULezA=
Subject key identifier:   48:EC:78:19:97:A1:FF:C6:BA:41:CE:81:F4:8F:F5:56:6D:63:44:BB
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA79C3E4E812EE5312C815A80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11404
IP address blocks:        199.91.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:3e:4e:81:2e:e5:31:2c:81:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=17e8d66a-0e6d-40cc-b948-550e60c19754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:82:63:fe:07:c4:80:30:af:eb:d5:1c:9f:
                    22:b6:dd:a3:54:35:1f:e2:78:fd:88:29:55:ba:3a:
                    4f:88:de:6f:b3:8a:3a:76:83:98:4e:5e:e8:3b:05:
                    c7:53:7d:ad:9d:32:e0:e1:04:ae:98:66:76:81:36:
                    d8:90:50:fa:80:66:44:98:b5:1e:8c:3c:7d:bc:fe:
                    ba:00:da:36:81:19:c4:37:87:35:08:1c:f5:13:cf:
                    fe:3b:ad:1f:85:6c:79:ec:16:11:93:ff:43:3d:ff:
                    73:ad:2d:1f:8e:fd:75:05:9f:dc:b9:ce:c9:dd:12:
                    8f:4d:a8:ce:5c:cb:a4:da:fe:3f:99:a5:c5:74:b3:
                    4d:81:a2:98:06:76:45:25:6c:7f:91:a8:db:d0:79:
                    cd:50:90:e4:c4:96:e4:a5:ac:39:69:b7:22:01:fa:
                    93:36:28:4c:bd:10:a1:8b:78:e1:1a:d4:56:8f:3f:
                    70:a4:35:23:11:71:38:e9:1f:ed:93:21:80:78:9b:
                    37:ab:8f:d6:8a:bc:f3:26:c4:b7:47:7a:c0:64:fb:
                    9e:93:2a:43:bd:ac:2b:74:12:14:a7:36:a7:4e:43:
                    c9:18:66:a7:ca:ca:64:63:6a:39:be:c2:68:79:56:
                    eb:cf:7e:e4:59:7b:c7:3d:24:b7:b1:52:72:77:87:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:78:19:97:A1:FF:C6:BA:41:CE:81:F4:8F:F5:56:6D:63:44:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9a:00:35:29:8e:3c:0f:c4:32:71:77:a8:71:11:ff:c3:e4:
         4d:70:f3:d9:11:56:5d:65:1e:5a:cc:df:7a:37:ca:45:71:63:
         b2:1e:0d:f5:a9:d4:8b:a9:45:b5:13:4c:6e:ff:63:e6:c7:b7:
         b9:77:1d:4c:c1:bb:83:0c:f1:ee:13:58:fe:1f:2d:0e:59:52:
         0d:2a:0c:8c:46:52:ad:ce:5c:f0:17:f5:59:06:6d:38:67:fd:
         4b:58:b0:08:f7:e1:1a:80:67:ff:96:4e:40:6a:05:c3:b6:fc:
         cb:f9:cf:5b:a9:c6:89:77:d3:63:17:7a:fe:38:f0:1e:ed:08:
         bf:f5:38:51:1c:1a:b3:8e:a1:ef:d4:c5:1c:8a:3f:1a:7b:2f:
         f9:08:56:4e:b2:ec:91:35:32:b8:bf:55:7e:d6:b4:b6:d1:6c:
         da:c8:9b:bd:2c:1a:9a:cf:39:fb:2d:1c:dd:94:0d:01:64:17:
         91:89:da:fa:9c:21:10:bd:a8:7b:5b:2f:77:e3:e4:62:7b:92:
         2a:87:1c:ba:84:6a:0a:56:7c:2c:42:50:4c:08:f0:2e:db:c3:
         29:0f:5c:ef:fb:81:ca:6c:a5:a7:c2:dd:d3:2d:43:cb:29:1d:
         2c:e3:1f:d3:3d:ca:47:bc:7e:4f:05:f6:23:37:01:bb:be:65:
         e7:c7:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:27 2026 by rpki-client