Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d22d47a8-92f3-32e5-993f-158939d33f63.roa
File:                     d22d47a8-92f3-32e5-993f-158939d33f63.roa (raw, json)
Hash identifier:          293WgvC1xaAiGlulYNO8VHsMctk9RurWh5jgmsjGHsw=
Subject key identifier:   85:FC:69:F7:CB:B9:C9:43:B7:7F:BC:47:D6:CB:BC:5E:67:21:13:F2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584EA786E8CAEFEB62E5404DEBC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d22d47a8-92f3-32e5-993f-158939d33f63.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16462
IP address blocks:        134.87.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e8:ca:ef:eb:62:e5:40:4d:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=663845b4-1ecb-42e4-95a1-a1323aea73de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:8e:1a:fd:ab:43:80:6c:ce:1c:e6:01:fc:
                    70:42:f8:81:f6:96:1e:13:f0:0d:f4:a3:91:3a:a3:
                    a6:5d:a8:91:2c:59:9c:8b:47:01:04:7b:da:c8:c3:
                    56:e3:92:db:99:2f:83:5d:e6:ac:52:23:d5:c2:52:
                    62:66:ad:ae:91:2c:a3:7e:81:08:b7:ce:bb:f1:10:
                    72:c6:7b:39:bd:21:32:33:10:bb:a9:ef:d9:ea:76:
                    56:f4:5f:ea:72:d6:e2:14:55:ef:78:ea:f0:30:ea:
                    0e:46:6a:69:89:39:60:a3:da:00:5c:30:d6:2e:84:
                    e4:54:fe:50:01:9f:09:12:ef:37:84:7d:09:4d:54:
                    89:91:e1:4e:7e:84:a1:0f:80:83:ef:33:39:a3:f0:
                    07:82:f2:5a:8d:ff:d4:bf:5a:94:8f:e1:b4:90:e6:
                    fa:48:d8:ea:07:70:89:24:23:ca:4b:99:73:52:f4:
                    90:42:dd:e8:cc:99:6d:76:d9:e5:95:4c:64:ae:1c:
                    dc:69:ae:49:16:69:e6:28:25:4b:8f:1f:e1:6c:7a:
                    b7:d5:b4:51:24:ea:07:4c:eb:1a:87:5c:f2:47:2e:
                    53:27:13:df:10:80:ba:86:53:6e:43:11:f9:aa:0f:
                    ef:98:19:cb:b9:36:1a:ad:e2:85:aa:63:7a:1d:5c:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FC:69:F7:CB:B9:C9:43:B7:7F:BC:47:D6:CB:BC:5E:67:21:13:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d22d47a8-92f3-32e5-993f-158939d33f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:48:94:57:7c:f1:cd:9b:21:ea:57:0c:c4:e1:44:96:14:19:
         84:f5:8f:9c:a7:21:a3:ab:d0:7f:71:f9:c3:de:de:16:8e:82:
         10:31:2f:a0:ea:59:8c:21:95:72:91:b1:87:0e:a1:46:66:75:
         eb:cd:54:34:4e:4b:75:3b:6b:87:1a:b0:71:20:54:1d:6d:a5:
         d5:41:c6:ee:c6:06:93:a3:a4:0c:a4:42:f5:a9:73:69:98:4f:
         ec:d6:1d:75:d2:7d:e6:ad:9b:0d:26:0a:2a:93:5f:47:a6:a7:
         15:70:73:30:27:e4:62:7e:1e:ba:c9:64:2f:7f:b1:6e:71:a5:
         6d:94:7d:7c:62:f2:cf:17:74:55:b1:6c:f5:56:d3:c7:ca:db:
         51:06:9d:ca:f2:18:f7:32:c5:21:63:6d:f1:bc:4f:8c:ef:3b:
         a7:8e:e5:83:a8:21:75:9b:f5:87:c2:d2:67:f6:37:33:95:fd:
         4c:2c:f8:62:a7:fe:0a:c1:99:91:57:6d:c1:00:7a:45:e7:1a:
         e3:61:42:9b:1e:5c:58:50:b4:25:30:ce:74:d7:b4:86:7f:8e:
         a5:69:43:38:21:a4:d6:8e:ec:fc:f5:2d:12:8c:7e:2d:e8:07:
         89:46:fd:cd:86:8e:95:5f:8b:34:ed:68:f1:1e:0c:86:51:b2:
         07:1b:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:49 2026 by rpki-client