Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa
File:                     23d95a46-a535-30ef-8cc4-386ad17abeb9.roa (raw, json)
Hash identifier:          EGxZth41ggfpTVr8s0AkNDZN0iDwh6XaGrvy1njXx1g=
Subject key identifier:   66:76:06:B9:90:63:40:14:69:D0:C7:78:70:8E:61:ED:BD:DD:E2:DD
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584D86957BFE64CF3458FEC88200
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     21782
IP address blocks:        199.45.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:7b:fe:64:cf:34:58:fe:c8:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=9088d15d-0b43-403e-9408-813bd6f43c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:69:b9:6e:17:ba:31:e2:2d:a1:26:7c:8f:
                    8b:a8:f2:cf:3b:ae:df:d0:1b:68:ba:32:37:61:40:
                    d8:f8:38:0d:ba:09:8a:d4:b7:d8:3e:f6:8a:bb:04:
                    c4:15:54:e7:8a:3a:0a:a7:f8:9b:a7:e8:c8:d7:bf:
                    96:6b:90:dc:0f:9b:71:cb:3a:da:59:6a:9f:e1:fa:
                    af:8f:c1:25:64:19:a2:90:33:c0:e8:8d:1c:4e:a8:
                    d2:8d:27:e5:6f:1f:d2:1c:a5:2f:b9:4e:61:d6:b1:
                    33:9c:82:3e:4e:c9:ee:c6:f0:01:01:48:02:a0:e7:
                    3d:14:3a:db:e5:b6:5c:13:85:d9:97:23:c8:1f:b9:
                    35:f4:d0:81:de:11:e9:70:79:be:24:e7:92:6a:27:
                    56:00:da:4e:d0:e2:90:74:1a:b6:51:6f:6d:aa:08:
                    6f:ec:ed:18:0e:33:04:0e:02:76:92:84:23:9a:65:
                    c9:57:a8:70:3f:e3:2d:15:2f:c0:79:e8:33:1b:7e:
                    17:7b:bb:46:28:d7:29:24:4d:97:f0:49:41:f3:a1:
                    cf:5e:07:2e:b2:e4:91:67:42:fb:74:a9:bc:d0:62:
                    92:1d:1a:67:bd:23:20:4a:45:44:66:18:31:9d:c7:
                    5c:0b:49:06:f3:c3:9f:f8:aa:72:c5:57:d2:94:c8:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:06:B9:90:63:40:14:69:D0:C7:78:70:8E:61:ED:BD:DD:E2:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:06:1f:63:fa:94:1b:a0:d5:a7:2d:33:71:f4:e0:50:10:eb:
         a7:e2:95:17:2d:35:25:1b:ca:d0:32:8e:f8:cc:c8:6c:d9:42:
         9c:71:04:48:87:0e:16:1d:2b:df:00:db:84:33:4a:b0:e0:3d:
         9b:0d:36:40:15:91:02:d7:3d:b5:4f:62:16:e7:f6:8a:39:7c:
         b8:77:0e:a8:b3:2f:ce:be:97:36:e5:f4:76:74:76:8a:38:bf:
         6e:7d:77:19:f8:6d:a3:0b:18:26:41:17:b7:25:4c:35:78:2c:
         52:46:dc:da:98:c0:e7:0b:79:8a:9c:d5:24:2c:1a:fe:b3:56:
         be:62:5c:e8:27:85:98:30:59:a7:06:24:c5:f1:30:74:3d:dc:
         dc:c4:b8:2a:1e:5b:e8:44:ac:08:c0:9f:72:9d:64:4f:d5:74:
         b9:49:ae:dc:4c:13:45:34:cd:28:f2:d0:8d:d5:b2:76:8d:06:
         1a:96:19:c6:85:88:6e:bd:c2:7d:44:46:cb:86:dc:fd:c5:97:
         16:5b:59:ea:03:84:51:73:e5:f2:6f:58:8a:65:9a:f0:47:d1:
         86:c5:98:8a:3a:14:d5:ed:f4:f1:d7:50:5e:81:1a:bd:c2:2e:
         7b:43:cc:9e:42:b0:1b:f4:ce:86:8e:44:d5:0a:3c:a9:e8:fe:
         25:cc:76:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:05:53 2026 by rpki-client