Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa
File:                     8cae9a02-39b3-3c4a-b824-865da368ac0e.roa (raw, json)
Hash identifier:          GwGgYh7CSb+lzB/k7l+0QIu4ZZ9EjMAdt2LOs4Pzci8=
Subject key identifier:   B5:DA:25:A4:D6:B3:78:59:06:FC:DD:68:7D:3E:DF:35:97:AC:E9:E1
Certificate issuer:       /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
Certificate serial:       010D0C9F4328584EA788A21EC4885919496CBB80
Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1226
IP address blocks:        204.235.48.0/21 maxlen: 21
                          204.235.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a2:1e:c4:88:59:19:49:6c:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=75507600-2ad7-434e-836d-5adb5ded1e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:4a:a4:89:3a:83:4d:b6:f5:d5:ea:e5:44:
                    79:af:52:8b:d8:47:ee:3a:c7:d8:37:76:fd:8e:c5:
                    ae:81:8f:72:b8:54:11:f4:68:81:c2:d3:b8:a2:39:
                    34:5a:a2:24:26:fa:e9:88:9e:98:11:1b:d0:13:12:
                    71:57:8c:98:b7:cb:27:97:f0:0f:e9:7d:b8:7e:b0:
                    f1:f7:3c:91:87:22:a7:6c:8e:e9:f2:78:42:a8:16:
                    03:61:1c:b7:25:2c:cd:2c:32:b1:8f:6a:c6:af:f2:
                    17:6d:e7:7c:b2:58:53:62:1b:28:2d:0f:a2:b0:5b:
                    e2:82:9a:b9:7d:eb:50:ae:c8:e9:ab:94:fc:a6:83:
                    8d:6a:4d:a4:d1:f3:a5:1c:17:90:d7:20:e8:38:52:
                    eb:e1:23:51:04:c6:a2:9b:01:04:28:63:dd:f0:2e:
                    98:a7:9b:7a:1e:f2:ce:5b:fc:ed:9b:8a:89:c5:84:
                    6e:b8:2f:a3:4b:f8:c5:17:a1:ac:d1:44:1d:06:cf:
                    3c:75:64:8f:34:a5:0c:a4:e3:ed:58:b1:be:94:43:
                    51:f1:fb:60:44:b4:e8:2c:fa:89:cb:96:3e:b7:a2:
                    9c:55:ef:05:f6:9b:07:73:b0:a9:39:67:71:ca:40:
                    10:c8:c7:13:2a:68:bc:41:5c:25:4e:4d:d3:1c:bd:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:25:A4:D6:B3:78:59:06:FC:DD:68:7D:3E:DF:35:97:AC:E9:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl

            X509v3 Authority Key Identifier:
                keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.48.0-204.235.59.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:d9:83:0a:34:17:bc:07:4e:d7:38:1d:66:9f:60:d9:76:
         4b:ed:f4:e2:45:32:4e:63:a4:20:86:61:8b:5c:88:d8:dc:76:
         f9:90:ee:40:64:fa:f2:b5:a0:7d:24:1c:84:bd:0b:d0:44:c1:
         8b:79:17:24:70:aa:2f:c1:c0:f8:23:2d:c9:44:91:43:b9:f0:
         c8:38:d1:a9:ec:a5:b1:77:5e:ae:5a:8e:92:59:12:e4:75:c1:
         f5:66:77:f7:59:3d:fd:c9:01:81:bc:5e:a8:f2:f2:60:8e:a2:
         ad:d3:61:db:c3:55:66:b4:93:40:f6:7a:1d:2e:28:9e:be:fb:
         82:6f:41:88:28:39:20:a8:d1:4c:68:05:2f:ba:11:0f:ad:39:
         48:47:04:0c:8c:39:bb:c0:88:ef:99:6f:93:76:50:38:06:f7:
         84:ce:2a:a2:d6:ac:9f:3b:b6:5b:0e:59:70:77:f6:1a:e1:ae:
         76:81:a0:a9:cc:12:32:4a:37:4b:a4:08:c9:ef:7b:0f:c8:54:
         81:12:72:42:f4:bb:99:5a:9d:4f:36:44:34:39:ec:02:cb:d9:
         65:80:17:74:d1:76:7a:69:94:39:0b:c9:c1:55:5e:ea:4d:41:
         23:b0:07:59:9a:b7:ee:08:a5:07:5a:c1:7c:74:bc:ae:c3:9e:
         9e:b2:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:39 2026 by rpki-client