Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
File:                     5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa (raw, json)
Hash identifier:          536iS1e4BnzY4Qod02cpw/6FaSI5tFJyCSXMPqCS+7Y=
Subject key identifier:   B0:4A:74:E5:E4:98:69:48:1C:34:CC:20:7B:25:32:8A:DE:E6:E2:8A
Certificate issuer:       /CN=4047a12d-1fef-4e6b-b868-76444464eabf
Certificate serial:       010D0C9F4328584EA798D186A1FFC21AE4E7D300
Authority key identifier: EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15199
IP address blocks:        140.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d1:86:a1:ff:c2:1a:e4:e7:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4047a12d-1fef-4e6b-b868-76444464eabf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=207da44b-82ba-4404-a11b-834e40b3bbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:0d:c8:fa:7f:42:c7:81:ed:51:b8:53:85:
                    94:cc:92:e5:90:4b:ed:96:14:91:1c:53:48:9d:37:
                    f5:66:50:82:b9:bb:69:12:68:d7:85:81:36:61:14:
                    0c:4d:f9:a8:66:52:9f:58:84:71:9f:39:56:ce:a7:
                    f1:d2:a0:68:4a:dd:4f:e9:50:7f:d5:76:e6:7c:1d:
                    a2:52:32:e2:b4:e1:3a:ce:c9:62:99:00:6b:c7:d8:
                    e8:99:8f:21:b5:57:ad:b0:d7:de:58:82:bd:db:8d:
                    66:1b:bf:ae:e6:e8:1e:10:a1:2c:93:09:75:e2:f9:
                    35:26:0f:41:84:74:f0:4f:86:53:b5:bd:ae:0d:b1:
                    ae:f4:d6:66:48:ed:8d:13:24:3e:f2:32:0e:ce:5a:
                    4b:c1:1e:cf:00:6b:39:70:60:cc:45:53:a5:12:4c:
                    f7:72:a8:53:c4:bd:ed:d8:c8:2d:ad:11:87:24:d7:
                    72:3b:43:01:d3:a4:2c:fb:32:ee:9c:ef:3c:52:f9:
                    3e:56:df:ee:f9:2b:83:ec:3b:f0:d4:e2:b2:a0:5b:
                    4b:9c:c1:4c:d9:2b:2e:4e:e5:3d:9d:95:58:a9:ac:
                    58:83:8b:82:63:56:27:1c:04:de:8e:c2:34:45:5f:
                    a7:53:06:84:d2:eb:e8:75:14:75:6f:62:b6:d7:6c:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:74:E5:E4:98:69:48:1C:34:CC:20:7B:25:32:8A:DE:E6:E2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl

            X509v3 Authority Key Identifier:
                keyid:EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:bf:ee:e0:30:bd:a5:58:5a:fc:a5:c5:f1:6e:96:3d:af:
         89:68:17:2f:ae:e1:8c:5d:0f:c1:00:08:f8:62:30:af:fe:9d:
         a9:5a:97:60:08:72:d3:16:a7:c3:b2:5c:d0:fe:19:4a:37:73:
         8c:94:72:93:b1:d0:71:8d:e2:97:de:58:05:6e:c1:b1:95:1c:
         74:dc:68:13:ff:a0:c8:75:c2:6d:db:cd:bd:d8:0e:5d:fc:36:
         72:a8:07:05:2f:d5:40:8c:54:a3:c9:16:43:41:29:c4:f3:f5:
         0d:5a:2a:d0:c6:33:d5:a5:86:b9:85:a2:6b:67:35:c3:57:08:
         dd:67:0b:aa:67:7d:0f:21:ef:ef:b7:a9:84:1c:68:19:5f:35:
         13:18:1e:7f:d8:48:e1:b8:df:7b:00:56:f3:a1:1d:f7:b5:ee:
         8d:61:f9:29:aa:9a:bf:ae:44:e7:24:52:08:13:41:d1:f0:3b:
         6c:74:24:5e:22:64:32:70:78:3d:60:08:6f:d8:47:f9:09:05:
         23:bc:a7:c5:f4:20:36:0e:59:52:fa:8d:bd:74:f8:cd:ef:9a:
         34:da:3d:73:33:1c:6f:3c:6e:b7:13:7b:27:94:6d:00:22:a7:
         d1:7b:fe:19:d2:9a:35:41:6e:15:34:46:df:7e:50:98:22:92:
         ae:e8:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:35 2026 by rpki-client