Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/f881355e-4081-333e-9b19-c7df3c9596c3.roa
File:                     f881355e-4081-333e-9b19-c7df3c9596c3.roa (raw, json)
Hash identifier:          EWQ+oRSAdzKfjZiPNrPUa4xehlgXoDwoYMAoKVaIMiU=
Subject key identifier:   4D:D5:44:07:2D:F2:4D:58:22:22:1E:F9:6C:96:DD:D0:30:C2:DF:B8
Certificate issuer:       /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial:       010D0C9F4328584EA79420C6B514CBBC983E2480
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/f881355e-4081-333e-9b19-c7df3c9596c3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40102
IP address blocks:        160.253.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:20:c6:b5:14:cb:bc:98:3e:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6bc5088b-37bc-4680-a5c9-33ed78060a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:f0:fe:bb:09:34:0f:f7:1c:38:fb:41:5f:
                    c2:61:7f:12:7d:a2:9e:6c:4a:e1:a0:e2:98:c9:87:
                    c4:71:fe:00:c9:2c:05:80:1f:83:37:65:97:b4:50:
                    09:1c:b1:fb:b7:f8:d8:95:3e:d9:e3:1f:67:88:15:
                    4d:e3:e6:4e:0a:7e:49:52:f1:bf:ad:85:06:f5:d9:
                    a8:4e:b4:02:4e:da:75:3f:ec:be:c0:4a:89:e6:10:
                    2c:33:1b:21:00:e5:03:62:c7:65:bb:d7:2e:d1:86:
                    3d:7c:a6:b5:cb:9a:e3:cc:87:fa:4f:16:b7:a6:ca:
                    05:35:0d:25:44:6b:92:2b:b7:e8:fd:84:97:8b:8f:
                    be:9b:5b:99:50:6d:dc:4c:7b:18:95:b6:fd:a9:07:
                    ec:2b:3e:60:b4:16:1e:ba:24:d3:85:5b:d2:3f:93:
                    5a:f5:a9:10:8f:af:48:6c:2a:10:94:57:04:5f:14:
                    d8:a5:1f:f7:c1:d7:0d:8f:5c:30:17:e3:d2:5a:32:
                    0e:f2:8c:b4:1e:2c:cf:5b:75:47:24:ab:ab:93:6f:
                    10:c6:46:52:78:d8:33:ac:df:84:83:22:c9:82:1a:
                    38:c5:49:5b:8b:aa:c7:c5:66:ce:63:b5:c4:b0:53:
                    ef:e5:75:85:63:6f:b7:f8:21:cc:79:8a:d7:83:bb:
                    15:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D5:44:07:2D:F2:4D:58:22:22:1E:F9:6C:96:DD:D0:30:C2:DF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/f881355e-4081-333e-9b19-c7df3c9596c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.253.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1a:0b:f4:e7:39:f5:0d:1f:a2:67:b6:68:4d:66:84:34:f2:
         0b:13:f5:07:86:15:cf:f9:13:45:c7:cb:6b:c3:bf:5c:05:e3:
         dd:c5:f4:37:0d:6f:68:07:a4:5f:07:52:7e:1d:5a:27:02:2d:
         cf:ec:bd:bb:87:97:09:e1:70:1b:92:ce:98:0a:86:6d:02:b6:
         97:86:01:08:b9:b0:dc:e9:0a:ff:20:43:a1:32:f5:ca:80:1c:
         de:00:00:bd:3c:e1:c2:8b:05:01:9b:eb:1a:2b:60:bb:cb:32:
         86:94:61:d6:64:cc:0f:15:90:f9:2a:6d:46:c8:42:ec:bc:84:
         7f:e6:91:9b:8d:35:17:a9:2c:f6:02:70:06:94:01:a6:47:76:
         4f:9c:c9:4c:9c:6b:10:34:ee:ae:c7:99:f0:4a:b2:b2:f6:eb:
         b5:3b:d5:e2:0f:b0:81:af:9c:a4:9f:89:fb:1b:f5:36:11:f2:
         c6:ea:16:44:d5:90:96:93:c8:19:dd:d5:48:2e:49:b9:1f:d0:
         4e:75:d4:3a:35:51:b7:56:97:df:00:bf:2c:2b:f6:2d:d7:24:
         19:e8:f2:b9:cb:aa:e6:66:06:ce:3f:00:3d:de:66:b5:0e:79:
         7e:41:96:9b:78:1c:f8:45:8e:bc:9c:f5:6a:c0:ae:b0:1a:45:
         8b:a6:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:42 2026 by rpki-client