Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
File:                     64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa (raw, json)
Hash identifier:          9UzwXve1slURie12UOzhackutP51CuoKsfj++U3sbC8=
Subject key identifier:   8F:48:40:56:EA:4B:10:99:1C:38:5C:E9:7D:C3:1F:70:BC:C8:FD:28
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F4328584DE84B44D26508C1FE225B0D80
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     394195
IP address blocks:        199.7.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:44:d2:65:08:c1:fe:22:5b:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=007e9a4c-13f3-485a-af1c-c4e648503ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c1:d1:a4:75:d7:44:1e:7e:e7:6e:ee:83:7b:
                    82:91:b9:9d:06:6f:1d:e7:7c:ad:ee:76:a3:c9:e1:
                    27:3a:e3:e8:33:38:c8:1c:1f:7d:c8:06:13:a7:a3:
                    09:7c:e5:2e:e2:06:99:2e:40:ed:99:ee:22:c9:b3:
                    cf:cc:a0:16:1d:56:8c:a8:b1:45:46:96:31:2f:ca:
                    74:e3:0a:20:6c:74:1d:ad:fc:d1:0f:92:8e:36:cf:
                    bf:c2:f9:35:9d:05:e0:35:3e:ab:b6:53:92:8e:27:
                    b3:c5:d4:97:1b:e0:e6:a2:4b:24:62:f7:8b:8a:c3:
                    05:b5:2f:70:c8:41:b2:0a:e2:1c:29:53:6c:fa:c7:
                    dc:46:a4:35:f5:bb:49:31:1e:59:3f:7b:f0:7b:c3:
                    02:84:2b:51:22:ca:75:6d:40:0f:65:09:46:03:6d:
                    53:02:3f:33:58:94:0f:d4:a1:ae:21:fc:7b:e5:0f:
                    ae:19:4f:d4:68:0f:da:23:8a:48:c5:69:2e:96:50:
                    42:ab:2f:59:2e:54:e7:39:ed:71:6b:32:bf:98:e0:
                    c1:4d:10:67:16:18:7b:47:f0:50:7d:40:70:57:37:
                    a1:56:3e:52:4a:b5:d1:33:58:50:36:3d:f1:ff:61:
                    dc:20:b4:a0:1c:84:ef:5d:91:78:00:a0:ab:9c:5d:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:48:40:56:EA:4B:10:99:1C:38:5C:E9:7D:C3:1F:70:BC:C8:FD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:69:fc:8a:c7:5b:e9:20:b3:b7:1e:43:f3:6d:99:65:2e:6f:
         30:ed:0b:da:fd:2e:44:21:5b:a9:46:fc:6f:fe:16:89:29:15:
         5f:aa:99:f0:dc:35:fa:9a:cd:35:e5:c4:ff:d7:d7:76:04:b1:
         2d:ad:b2:d8:7a:42:cf:a5:80:f2:62:3b:9d:45:8f:7d:7a:ce:
         08:03:22:1d:15:dd:c8:da:3a:9f:d6:01:5c:3c:44:93:af:6a:
         50:65:e3:e7:ca:18:e8:8b:90:62:d0:93:f9:68:6a:b7:2e:6d:
         23:fb:bb:58:2d:e6:ba:cb:23:5a:e4:f0:63:29:db:a1:92:fa:
         45:62:34:10:ad:c9:2b:04:b5:93:fd:ab:93:98:12:b0:73:85:
         37:ac:50:f2:c2:96:0d:37:68:81:96:d4:e3:30:d7:06:96:b8:
         cd:cd:cf:ad:a1:c3:c2:b2:92:79:8c:a7:e2:35:7d:92:a9:87:
         2d:36:b5:b4:f3:d8:ac:70:30:af:41:83:ab:f6:73:da:c7:aa:
         ae:10:6d:b4:94:29:db:ba:b6:7e:69:c4:42:51:46:73:53:a6:
         52:a4:78:db:37:f9:c4:fc:0d:d7:00:a8:c7:3c:1f:c9:b1:01:
         3f:6e:9e:38:3c:20:ca:8b:57:e5:93:77:66:21:4b:0a:d7:8f:
         ba:d4:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:41 2026 by rpki-client