Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
File:                     0dbdb44f-ac3e-376f-90dd-5a4848410620.roa (raw, json)
Hash identifier:          e6tGqoUJnGlCivfbas53I9doqw3NZ8P6KQ8WqSSn2rk=
Subject key identifier:   6A:CB:51:A6:96:06:6D:36:A0:BB:EA:CC:BE:25:7C:5E:D6:65:27:85
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584EA786EBCDD3C285873D5FC480
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:eb:cd:d3:c2:85:87:3d:5f:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eee5f352-367f-400c-be87-094aca3602d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:b4:2c:f7:3b:7c:fc:01:be:7e:87:da:da:
                    ed:e6:16:23:ff:fe:76:1e:2e:db:1e:4c:3d:a7:8b:
                    16:ef:ba:10:ec:8e:56:b6:e8:c9:69:cf:f5:cd:90:
                    6e:9f:ed:ba:cd:65:74:18:3c:ac:b7:b8:dd:d6:0d:
                    2c:98:18:85:89:f0:f6:f3:16:0a:55:82:b0:0e:c6:
                    b1:1f:9d:47:87:1c:7f:b8:25:35:04:3a:e8:35:ae:
                    cd:a2:57:99:c3:fb:19:7a:61:d1:94:1b:e1:82:59:
                    69:3c:3f:6b:ff:a6:b5:ff:f4:82:29:08:de:5f:4d:
                    de:db:d4:94:32:32:2a:37:1b:a3:32:5e:5e:34:ad:
                    9f:df:40:3f:81:3e:38:b4:cd:5a:87:55:c3:89:2d:
                    52:49:c0:0e:f5:1d:fb:cd:16:e2:e1:67:f4:e8:b2:
                    26:51:e2:71:57:eb:42:4a:0c:ed:4f:47:a5:68:81:
                    5f:17:9c:7e:71:9a:a9:43:20:34:39:bd:39:fb:45:
                    a1:88:f4:87:19:3a:27:14:73:e4:5e:b3:2b:f0:0f:
                    7b:ed:70:e9:c1:32:60:38:70:30:8d:1e:18:59:a8:
                    3a:40:c1:2e:f7:d8:26:25:a5:a4:a4:b7:17:56:59:
                    4a:0f:e8:ec:47:84:70:9b:80:a3:21:a6:be:7f:d6:
                    6b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CB:51:A6:96:06:6D:36:A0:BB:EA:CC:BE:25:7C:5E:D6:65:27:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:27:6d:00:d1:b4:5c:fd:e5:72:9d:60:70:39:5d:d6:1f:a4:
         b3:85:3d:fe:d7:d9:55:cc:8b:1c:af:4e:3e:3c:08:dc:ab:f9:
         2b:e7:6c:1e:ba:c2:ef:c6:6a:66:50:78:6d:05:1c:47:52:d1:
         69:40:e2:3c:db:3c:6c:72:2d:e8:29:43:da:9d:3e:8c:ac:4f:
         90:68:8f:5b:3a:5a:62:4f:85:27:b0:dd:d3:8e:cc:85:67:66:
         26:4c:48:cc:23:27:fa:75:96:25:0f:ba:ce:69:80:c5:e2:f4:
         92:33:dc:fb:aa:b0:22:d0:05:11:41:51:54:d2:6a:5b:5a:4e:
         9f:53:f2:e7:3b:95:6f:83:54:1c:43:27:85:33:c6:64:00:08:
         90:85:59:5d:c1:42:8c:29:5c:99:c2:d0:80:27:d5:3a:2f:d4:
         70:3e:8e:2e:74:94:7f:ff:c1:ab:ea:6d:b5:41:fe:11:45:2b:
         74:16:74:ba:77:7f:bc:e7:e0:db:e1:fd:e8:7a:48:83:3b:8a:
         61:58:d4:3a:ab:bb:60:c3:43:a6:bb:5f:55:d8:d5:20:68:69:
         a9:98:7f:b8:a7:a4:49:04:a8:2a:00:bf:71:8d:ed:12:30:10:
         b7:29:7f:49:43:8b:19:c6:2e:a9:32:98:fb:f1:da:48:e3:30:
         df:03:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:45 2026 by rpki-client