Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/9105cf94-982c-3fb2-894e-10045bd902be.roa
File:                     9105cf94-982c-3fb2-894e-10045bd902be.roa (raw, json)
Hash identifier:          MSrBMXFwDmrukYn2lX5iXLigyf/Gq/+3OcodM6oGd7U=
Subject key identifier:   C0:D0:BD:D9:18:3B:8C:58:5D:73:8D:38:A4:86:23:8A:CA:CC:CE:9D
Certificate issuer:       /CN=b4423358-d6e5-4c1e-bb3c-969965915db2
Certificate serial:       010D0C9F4328584EA788CB667C6E632864D7BC00
Authority key identifier: FC:23:10:94:57:A7:8B:7A:79:0D:CA:C5:5B:59:72:3F:4F:CE:75:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/9105cf94-982c-3fb2-894e-10045bd902be.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400405
IP address blocks:        64.59.200.0/21 maxlen: 24
                          209.182.104.0/21 maxlen: 24
                          2606:c9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/b4423358-d6e5-4c1e-bb3c-969965915db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/b4423358-d6e5-4c1e-bb3c-969965915db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:cb:66:7c:6e:63:28:64:d7:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4423358-d6e5-4c1e-bb3c-969965915db2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=758dbe8f-563e-43a1-a74b-77a289eb180e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:8e:84:4d:4f:24:fa:44:25:0c:84:4c:0e:
                    ab:9f:4f:d2:4c:ab:d3:b8:22:d5:87:e3:61:23:c3:
                    50:8f:50:35:31:08:bd:b5:07:33:75:8d:e4:38:df:
                    7c:fe:24:d4:6e:a3:cb:2a:61:04:21:5c:eb:61:b1:
                    44:20:f1:84:df:8c:1a:fa:3b:b0:9f:c3:0f:95:65:
                    fb:a5:46:cc:2e:45:83:3d:7c:c7:f2:e5:06:82:c7:
                    f6:3e:c6:f1:b1:c1:13:ad:cb:5d:6d:b4:fd:fa:2d:
                    e7:a8:42:74:36:34:4e:94:47:2a:2b:49:f2:40:20:
                    5d:6f:de:95:49:7e:fb:cb:70:9c:f0:91:bd:1b:b7:
                    91:74:8c:3f:3a:c7:c8:6e:a7:34:3b:e2:ae:87:db:
                    90:70:e7:6f:00:9c:65:09:16:0c:e3:f3:34:b9:ac:
                    ae:80:6c:ba:20:99:2d:8d:f9:a4:9b:a8:d5:89:9e:
                    27:ca:57:8b:0c:f1:0f:85:0f:79:5c:11:5b:4e:2c:
                    58:23:5e:ea:c8:0d:70:be:72:86:6e:82:55:35:da:
                    d5:28:ef:e2:5b:dc:32:af:0a:c0:03:f4:50:a3:75:
                    2e:f7:38:c4:16:24:c2:b3:cc:96:8e:70:7b:65:61:
                    22:bd:0b:1a:7c:e5:18:07:62:50:c1:a4:d3:33:3c:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:BD:D9:18:3B:8C:58:5D:73:8D:38:A4:86:23:8A:CA:CC:CE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/9105cf94-982c-3fb2-894e-10045bd902be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2/b4423358-d6e5-4c1e-bb3c-969965915db2.crl

            X509v3 Authority Key Identifier:
                keyid:FC:23:10:94:57:A7:8B:7A:79:0D:CA:C5:5B:59:72:3F:4F:CE:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b4423358-d6e5-4c1e-bb3c-969965915db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.59.200.0/21
                  209.182.104.0/21
                IPv6:
                  2606:c9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:1f:b8:50:27:d9:2e:3d:58:7e:cf:0c:18:40:fb:e6:d1:
         a7:49:25:5b:96:5e:a3:66:39:df:7f:d3:22:98:f1:ab:c7:23:
         2b:4b:2a:ff:48:75:be:46:be:4c:11:28:7a:03:a8:01:be:30:
         1c:aa:18:6f:6a:d8:c9:27:6e:4e:b2:14:2a:d2:21:f7:e3:01:
         21:0a:c7:64:66:17:90:a3:0e:af:39:44:55:fe:ed:83:b8:fa:
         76:18:2c:7a:da:d7:81:9b:b4:82:96:f4:90:05:e9:2b:11:84:
         f8:b6:df:65:45:16:5b:87:97:ed:c0:f6:dc:41:77:6b:ad:48:
         91:44:50:64:50:71:93:35:84:76:66:c6:96:08:ac:56:d9:6e:
         bc:80:a3:ba:7b:14:b7:44:b9:bd:b8:b1:7c:74:b3:83:ff:42:
         0f:d0:9a:e6:4c:5a:4b:23:93:38:c9:e0:46:f4:ca:1e:0e:d3:
         92:fe:d2:f0:ed:ac:ba:db:80:c9:15:c7:19:74:25:7e:68:15:
         ec:ac:31:6c:14:1e:c3:f9:70:88:92:d0:a3:f7:f9:21:f4:55:
         f5:a7:dc:8d:79:74:af:56:12:d9:6e:73:22:d3:f5:17:c4:48:
         f1:99:16:59:17:66:02:74:3f:b4:1f:e4:03:6e:0b:9e:2c:d3:
         3a:67:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:18 2026 by rpki-client