Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/082ea4bd-a969-33de-9f44-1e351bb1929c.roa
File:                     082ea4bd-a969-33de-9f44-1e351bb1929c.roa (raw, json)
Hash identifier:          pocYGNvNX8GWWrfcpaUNT4vo2xTdAVma3Yellj9QYoI=
Subject key identifier:   CE:DA:48:1B:65:3C:DF:0C:ED:89:AF:63:8B:C4:1A:45:B7:91:09:98
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584E9A7FCD8EDF532906BB3738E0
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/082ea4bd-a969-33de-9f44-1e351bb1929c.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     33362
IP address blocks:        216.144.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cd:8e:df:53:29:06:bb:37:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=60561388-d15f-4737-ab7e-f46884ebebd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:aa:51:7e:4c:b2:68:c2:97:7d:3f:e0:48:
                    a4:e9:3e:ef:d8:34:9a:a0:82:46:25:a5:56:5d:ad:
                    13:e7:f0:aa:b9:f1:e2:b5:a6:93:77:42:7f:92:9b:
                    64:1c:c1:27:d1:b5:66:a2:f1:15:f7:27:7e:59:41:
                    cf:e8:0d:bb:33:b4:3e:68:09:60:7c:19:cc:16:6f:
                    01:44:cd:86:6d:c6:c7:72:77:0a:c4:d9:13:21:d4:
                    5c:87:46:32:6d:c0:e8:21:13:1a:9e:33:48:8b:53:
                    e0:24:92:3a:f0:1e:d0:1a:87:61:bc:db:ed:01:60:
                    d5:f4:14:b6:66:98:3e:ef:18:da:02:de:61:a9:7e:
                    8e:4d:e2:36:d4:b1:d7:32:ec:c3:b3:6c:1f:7f:15:
                    12:f9:6a:85:36:74:c1:7c:1e:5e:a2:35:f5:38:af:
                    35:84:36:31:42:b5:bb:63:7f:12:a0:73:7e:8d:30:
                    28:65:59:34:2f:ad:73:b8:01:6d:de:d4:77:7e:03:
                    38:e3:69:eb:50:b2:ea:42:d0:fe:11:82:e9:d4:76:
                    f4:e6:da:31:b9:f2:58:1d:53:58:2d:0c:21:02:d0:
                    f6:3a:28:dc:21:0f:9b:c7:6d:61:7a:bd:15:f8:56:
                    62:43:7e:8d:80:6a:51:4b:bd:dd:25:b2:af:56:32:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DA:48:1B:65:3C:DF:0C:ED:89:AF:63:8B:C4:1A:45:B7:91:09:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/082ea4bd-a969-33de-9f44-1e351bb1929c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:73:6b:4a:50:21:e4:38:0b:71:83:24:14:7d:05:f4:23:ff:
         ea:2e:7c:93:59:3e:4e:3f:b3:87:05:a6:27:a8:69:5f:8b:e1:
         db:a9:8e:8f:f3:1e:91:9a:8e:2a:15:27:e1:88:fb:93:80:ab:
         f4:05:49:1a:e2:1a:e7:f4:10:26:05:c4:9a:16:f1:b1:f9:6f:
         df:c8:39:92:f3:4e:98:04:79:6a:98:dc:4e:97:a4:70:0a:69:
         60:93:11:aa:a7:3b:e3:65:87:bb:5f:d7:80:ab:79:81:bd:ba:
         0c:d4:12:09:83:21:a1:35:3e:9d:28:13:c6:c4:5e:90:61:21:
         6e:a9:92:d6:cb:41:4b:6a:87:a0:95:27:5a:ae:e6:4f:ec:a7:
         a5:b4:93:c2:80:78:f7:b0:2f:37:a8:b9:c3:73:2d:c6:0b:7b:
         40:c7:17:9e:59:22:b2:87:e2:1f:85:c6:f8:49:8a:8d:3a:56:
         ce:3b:30:34:a5:90:52:f8:a1:f8:d9:d1:b6:94:a9:74:88:64:
         f1:a6:43:ab:b8:a3:76:f7:73:38:be:2c:87:83:52:80:53:f2:
         56:dd:a9:d2:8f:44:80:67:8c:c8:7f:8f:50:e2:40:a0:fb:30:
         e4:bd:71:fb:b9:26:7b:d6:d3:8e:cf:69:b9:52:6e:5c:32:d8:
         f1:ff:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:19 2026 by rpki-client