Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa
File:                     b7751a83-4d77-3534-a692-22c9f15e2c5e.roa (raw, json)
Hash identifier:          /Q77nbRHpmi8jNlfFtqTGxMMcaQCAWdcqS5zdjRS+a4=
Subject key identifier:   D8:EA:BE:E6:C2:7A:8D:A8:DF:F2:4E:0D:4B:52:ED:4C:D4:80:5A:36
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584EA01530D186C4A05854633600
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        199.187.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:30:d1:86:c4:a0:58:54:63:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=ca52b7bf-cbfa-48a8-bf2b-c0c5f09e1bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:52:d6:b6:08:6e:6a:d7:fd:0e:84:be:b4:
                    34:c9:a3:bd:ca:ae:8b:c3:3d:e6:81:8d:38:e2:6f:
                    3c:b7:2d:8d:1b:12:b1:ab:9e:6c:b1:ff:47:63:f3:
                    6c:2b:f6:9e:ca:a5:87:e8:59:cf:97:aa:bd:a2:d0:
                    cc:cb:7a:6e:ab:08:1d:00:41:ea:59:3c:7a:67:a5:
                    d4:54:93:22:21:a0:ca:d7:88:29:54:61:0d:c3:01:
                    8a:7a:93:49:68:8f:08:4e:87:72:86:fd:75:b5:08:
                    f2:cf:07:e2:11:3e:5d:30:ce:fe:1b:6f:f3:26:2e:
                    b8:b6:0b:93:27:b1:36:58:38:c7:02:44:5b:65:d9:
                    25:e7:54:9a:12:b3:59:dd:ad:74:22:13:e4:c2:44:
                    75:b9:68:f3:e4:60:71:52:2d:e3:cd:ae:50:d9:46:
                    91:a0:3e:f7:48:84:b1:89:6a:a1:47:1f:c3:49:19:
                    bc:c4:27:1e:dd:be:4d:f0:b0:74:7d:bd:50:8c:54:
                    77:61:e7:09:01:41:2c:0f:7f:14:4a:54:5f:bd:8f:
                    73:43:28:06:75:30:36:61:76:a5:09:ef:5c:9a:99:
                    cc:f7:b6:15:13:3e:cc:ba:23:59:6b:14:ee:8b:63:
                    7a:97:6d:5b:e1:04:cf:52:34:15:e8:8e:cb:56:6d:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:BE:E6:C2:7A:8D:A8:DF:F2:4E:0D:4B:52:ED:4C:D4:80:5A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:2e:c5:5e:3f:d9:ef:6f:3a:a2:ae:77:80:a0:c1:3a:bb:4d:
         19:14:17:bd:f0:e0:68:6f:13:5c:69:5e:e7:2e:3b:ef:fb:a2:
         e7:f2:19:7c:ff:e7:f1:de:40:66:d4:5d:97:c8:0b:91:f5:0a:
         60:aa:dd:eb:84:87:f5:9c:be:1f:72:b3:e8:a8:ac:a0:fb:fe:
         8f:50:b4:72:79:09:70:53:83:a4:dd:ee:fe:08:4f:d5:df:8f:
         a1:64:72:3f:8a:b2:7c:f8:a5:00:e9:40:38:c3:13:31:49:1a:
         d8:a6:12:1b:03:2e:4c:c7:d1:35:b6:02:5f:e8:e8:65:7f:1c:
         05:40:d7:a0:f5:df:23:b2:4a:8d:56:4e:f4:a6:6d:22:60:4a:
         5d:a4:98:11:44:c6:38:4f:91:db:e9:da:ec:17:58:e6:2a:a9:
         f6:c8:1d:09:d0:fb:84:04:e0:a2:d2:e4:b0:ae:b3:ad:20:73:
         d1:bb:13:08:73:bf:8f:c5:01:b7:d6:67:e9:f1:13:91:e6:4b:
         70:3b:22:4a:a4:05:26:e9:ef:bd:e2:cb:13:8c:da:cb:6f:9e:
         c1:21:dc:b2:2d:c3:51:9c:ab:f5:0a:1d:c0:c1:04:e8:89:af:
         d9:4e:20:b1:4b:64:82:c6:ea:0a:a2:3c:b3:06:22:b4:58:94:
         f2:1d:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:02 2026 by rpki-client