Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ac22d18a-910d-38eb-9c32-973ed0c51a10.roa
File:                     ac22d18a-910d-38eb-9c32-973ed0c51a10.roa (raw, json)
Hash identifier:          d4O1tdoE4Fb2LFuFx+r8hzM+2QWae1N7n3BGHMXw5mE=
Subject key identifier:   05:21:2A:53:04:60:66:2D:70:96:B7:90:28:C5:6E:6A:CE:BF:E2:FF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA795EB7DB4B79D7647110860
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ac22d18a-910d-38eb-9c32-973ed0c51a10.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6559
IP address blocks:        198.85.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:eb:7d:b4:b7:9d:76:47:11:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e591cfd7-0455-4723-a2ba-8664c595a51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:74:24:ca:4f:38:2c:f9:1c:2a:fb:23:e0:8d:
                    d4:32:b7:71:ef:22:03:0f:0e:f9:91:1b:e9:25:36:
                    41:54:5e:03:bc:5d:b9:5f:56:dd:d8:f0:cf:4b:da:
                    aa:d3:45:a0:ee:35:dd:09:e9:fa:9b:8d:1a:c1:3c:
                    20:cf:4b:1d:f7:b0:99:af:84:07:43:be:57:42:f7:
                    8f:1c:c5:b2:3d:79:4e:d6:15:c7:79:8d:a2:df:a9:
                    52:88:c0:c3:c5:fe:7d:d1:d7:ea:ee:65:8f:10:a1:
                    a0:f3:7a:b5:dd:6b:80:f2:c0:cb:cb:51:0f:6b:44:
                    87:c4:40:4d:d3:a6:35:23:69:bb:a9:f0:a5:1b:3e:
                    76:f5:f6:34:16:6c:8b:7d:7d:8a:8a:99:1c:0e:98:
                    61:98:ff:b2:ba:a9:2c:a7:06:fa:c7:40:75:90:2d:
                    3c:96:99:5d:40:97:61:aa:36:26:c1:8e:d1:25:cd:
                    ce:db:c5:6d:4b:17:97:66:c8:a0:d3:04:aa:12:56:
                    d8:4a:a2:f4:6f:0c:cc:00:d8:91:31:dd:d8:92:3c:
                    07:78:fd:14:f3:c3:03:ab:16:28:01:8c:a3:81:e6:
                    59:89:59:51:48:ed:d7:47:01:86:cd:6c:37:e3:1e:
                    25:fb:e4:c2:c9:b8:5d:09:7c:9c:74:27:d2:70:4b:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:21:2A:53:04:60:66:2D:70:96:B7:90:28:C5:6E:6A:CE:BF:E2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ac22d18a-910d-38eb-9c32-973ed0c51a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.85.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:6d:03:e2:7c:33:34:5e:4c:17:4b:2e:92:9b:8b:cf:5e:
         8b:d1:e1:c3:69:ba:85:17:1c:85:af:5f:18:fd:6c:2a:18:87:
         4f:22:97:2e:36:63:9c:e4:d6:0a:79:22:e8:bb:a6:9b:f7:ad:
         1c:02:a7:4f:bf:1e:a3:1d:f6:c0:50:f9:8b:64:b1:66:46:cf:
         c9:5d:7b:e8:18:4b:ad:4d:d6:96:65:65:fa:39:b3:90:36:99:
         6b:8a:93:99:20:15:39:4b:82:d5:96:c7:8a:df:38:14:92:f7:
         a1:c9:9b:22:96:ff:ec:95:3c:bc:71:74:dc:bb:f8:a4:0d:62:
         a8:5b:06:fc:78:5e:3c:c5:4c:09:dd:23:ec:b6:1e:df:b1:ba:
         99:1e:14:d5:b6:94:81:09:d7:d8:1a:d3:08:df:a2:31:fa:18:
         0b:c1:b2:62:13:3a:a6:8c:bc:88:3b:00:d5:72:6b:1c:20:f4:
         36:b3:f2:24:28:b9:ca:b5:3f:f0:3e:41:0d:ab:c8:9d:0b:a0:
         4d:ba:74:0c:fd:a8:4c:2e:b4:c9:d0:cc:9b:92:d4:2b:ab:db:
         60:26:05:08:aa:29:09:91:4d:81:4f:ce:78:fe:09:2f:d9:fc:
         86:97:f0:39:73:98:b4:b9:d3:0e:8f:cc:ad:0c:05:bc:a8:66:
         0c:11:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:55 2026 by rpki-client