Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa
File:                     7f2d1f41-a628-3634-bde1-7eeda4689406.roa (raw, json)
Hash identifier:          doFSKi+v8RlLzGskHRu1s5BYzzfpzdAlbYGdHVYtqe8=
Subject key identifier:   A1:8F:A4:1C:D6:2D:C3:A8:66:64:F5:7B:72:F7:9E:05:F4:07:05:0F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E131988961433790AB8047200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     0
IP address blocks:        198.20.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:88:96:14:33:79:0a:b8:04:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=b8affefd-ffad-41f3-a79b-c24573180bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:6b:27:45:cd:39:97:8f:ba:02:38:d5:50:
                    81:d4:3e:6f:a3:11:88:b5:a1:c1:ec:4c:fd:5d:02:
                    da:18:33:dd:82:86:b1:3c:c0:e5:07:23:1f:5f:42:
                    c4:f1:b0:39:2a:61:2b:a4:dd:b4:aa:74:ca:40:2c:
                    79:17:4c:54:4e:86:c7:b4:c3:c8:c3:00:2f:fa:47:
                    48:11:c2:8f:ab:a8:8b:50:cb:a9:62:f2:d4:17:67:
                    e7:1b:de:d1:c1:00:e0:f4:df:ac:de:78:3f:11:fe:
                    4a:f4:ba:d1:7e:c0:a1:d1:42:65:ca:ee:0e:35:9b:
                    2c:32:ce:ab:45:46:cc:89:27:73:21:15:95:32:ed:
                    2e:6c:5c:9e:be:f7:d2:51:98:1e:ae:e2:52:2a:9c:
                    fb:da:4e:6a:d5:bd:2f:f2:9e:ab:42:0f:ce:6f:8d:
                    b9:3c:7f:54:e4:9c:d5:0e:32:d4:c2:e2:86:77:df:
                    f9:78:5f:39:6c:96:d9:54:53:53:a8:8b:54:c3:57:
                    2a:ff:5a:f5:49:ca:fd:f7:68:96:cb:19:a8:08:cf:
                    4e:44:78:8a:5e:1f:01:49:50:a1:3b:4a:93:b8:ae:
                    f8:15:68:ab:f6:a8:f0:ed:15:ad:47:15:b3:5d:85:
                    06:81:e1:cd:6a:cb:76:2a:70:e5:ef:e3:4f:ec:03:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8F:A4:1C:D6:2D:C3:A8:66:64:F5:7B:72:F7:9E:05:F4:07:05:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:55:8c:c7:f9:21:19:4d:95:97:c2:ae:33:8e:e6:cd:5e:
         c2:8b:eb:68:71:c3:45:f2:c5:26:45:c9:14:54:09:45:48:d5:
         5c:5a:e0:fc:11:cd:3a:d7:62:43:53:40:07:4a:ca:30:01:b6:
         d0:60:b0:df:a6:89:3e:fa:3e:af:4d:57:51:12:8a:23:1c:c4:
         a6:4a:ea:1a:48:fa:63:7e:19:74:58:bb:8b:be:58:f3:bc:c5:
         de:82:8b:19:ae:9b:22:06:1d:78:5d:3a:45:ad:2c:5a:b7:bb:
         e4:92:7c:0f:21:e8:cf:76:c9:0b:b0:19:7e:e1:cb:9d:9f:9c:
         94:a7:2b:68:5f:47:1d:5c:e2:54:c7:51:c6:d2:88:e9:44:19:
         dc:26:b8:e3:02:fc:79:ab:0b:39:ee:44:50:18:5f:35:e0:b7:
         9c:83:30:4d:60:d5:78:96:a9:0e:17:d4:aa:91:49:b8:c4:9c:
         96:84:b6:12:98:ae:16:17:17:79:84:43:5d:dd:5d:16:5a:48:
         2f:50:14:18:31:4f:cc:87:b4:2e:05:05:2a:a5:a3:f8:8e:0c:
         a3:4b:84:99:02:49:56:d1:b6:d6:df:d2:b4:b7:7c:a9:02:1c:
         09:0d:73:22:a7:43:1f:ad:0a:58:c8:36:a5:37:b8:ba:a4:92:
         7f:d0:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:24 2026 by rpki-client