Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8575fc9c-e9b8-35e0-8684-7b2364cb4c18.roa
File:                     8575fc9c-e9b8-35e0-8684-7b2364cb4c18.roa (raw, json)
Hash identifier:          +qPyOoBdEEuEjG+UkcWyecDm+764IOrkmd+WVqaZsXM=
Subject key identifier:   39:E1:05:44:9A:DF:B3:11:18:BA:55:55:00:AD:4D:E5:7E:A2:64:25
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796CF9F551D4FC0E4193F40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8575fc9c-e9b8-35e0-8684-7b2364cb4c18.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36850
IP address blocks:        198.85.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:cf:9f:55:1d:4f:c0:e4:19:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5e1ab125-c3da-461e-9efe-6674803a360a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:c8:a8:ee:c2:aa:87:08:0f:95:10:47:bf:
                    9b:bf:ff:4c:f1:bb:38:32:1b:2f:5b:2b:d7:44:89:
                    31:93:48:76:19:1b:f0:24:cb:d1:c0:1c:c2:0e:e9:
                    78:a5:ea:69:96:21:6b:23:1a:74:da:c6:70:50:f4:
                    15:d1:ad:55:fd:5e:c6:ef:9f:cc:f1:af:ea:46:81:
                    78:81:72:32:e3:be:3f:d0:a2:35:fd:63:40:26:23:
                    7b:0e:cd:42:78:e4:f8:18:48:6d:f6:43:67:2b:71:
                    b8:98:d4:74:eb:c0:ca:81:7e:2d:fd:f6:d4:67:49:
                    ea:c6:ea:e6:da:1a:c8:19:a2:08:3d:41:73:21:60:
                    63:20:f5:31:d2:68:61:80:59:52:b8:30:c9:93:2b:
                    38:3c:15:c0:6d:24:3e:7b:d5:d6:46:c4:ea:a6:9b:
                    0e:d3:a9:c9:e0:cc:7b:b0:82:68:98:39:df:76:7b:
                    cc:b0:9b:7a:86:f1:b5:0d:b3:93:16:74:82:a7:85:
                    9f:82:5a:1e:4d:35:04:8f:79:7a:87:32:94:e6:33:
                    2b:89:4e:dd:84:98:92:e4:6f:6c:23:a9:10:bd:2e:
                    d9:19:db:b3:84:c2:cc:fc:c6:ca:97:c0:53:18:79:
                    fd:5b:20:21:45:0e:df:5f:0d:18:e7:65:bd:20:cc:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:05:44:9A:DF:B3:11:18:BA:55:55:00:AD:4D:E5:7E:A2:64:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8575fc9c-e9b8-35e0-8684-7b2364cb4c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.85.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:75:2a:ae:c3:2a:68:3a:6c:b0:c0:9c:4d:b6:90:7b:d6:16:
         e2:2b:18:92:7b:e8:e6:ba:59:e7:2c:b9:0a:1e:6e:be:a8:b9:
         a9:c1:bb:c6:8d:b1:5c:d9:26:f2:c2:1d:6e:4d:ff:cc:c1:76:
         7d:bd:79:64:18:f9:5f:6c:c2:89:a4:0a:4b:d9:a5:44:7a:89:
         83:d6:34:2e:e4:10:2a:3a:f3:df:92:ea:4c:d9:97:a7:94:3a:
         5a:8a:55:18:23:0e:e3:f3:53:71:47:49:98:21:5b:1a:64:00:
         43:9b:e3:41:b4:1a:94:73:43:74:55:2d:41:dc:74:4e:91:11:
         b4:b2:16:01:57:27:89:b2:81:9c:04:4d:67:fe:8c:9d:03:86:
         cd:f0:1c:23:43:24:fb:47:10:71:30:f7:8e:a3:a2:0b:4a:67:
         b4:0e:57:4c:e2:6a:70:a5:40:a8:6e:c2:46:0a:49:d0:ea:ef:
         59:d3:94:99:eb:b9:4f:c3:49:7d:51:45:f4:08:38:13:7c:55:
         79:13:db:4c:0e:ae:c1:99:eb:43:ec:29:c3:1f:7d:43:e7:3c:
         63:f5:46:d7:0e:29:90:b0:47:34:f3:c3:a4:60:7f:1c:b7:37:
         9c:11:98:45:ad:c1:43:0f:ef:e4:13:a2:7c:42:33:a2:ab:63:
         70:58:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:21 2026 by rpki-client