Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/1c1fd418-00c8-3cde-856b-bf5b93151109.roa
File:                     1c1fd418-00c8-3cde-856b-bf5b93151109.roa (raw, json)
Hash identifier:          pJF8mvXtY4KXtZjxd1ZgVa9YLb8hSxznxEiYdl+JuYg=
Subject key identifier:   60:53:29:18:F3:7C:B1:5F:90:31:F9:7A:CB:CC:76:C2:AD:E4:4F:8B
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584E9A7FCD7798C0605436EB4100
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/1c1fd418-00c8-3cde-856b-bf5b93151109.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     33362
IP address blocks:        199.119.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cd:77:98:c0:60:54:36:eb:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=cf9b85df-5ad4-4e12-a0a9-c965d3522178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:bb:85:d0:ab:a4:4c:e5:1c:11:f5:17:e7:
                    15:f4:03:07:fc:8d:ea:9e:31:5e:cd:e0:18:4b:71:
                    47:a6:cc:01:fb:28:4f:ce:47:cc:78:e8:20:ec:ba:
                    54:9b:d2:7b:cf:b0:4c:2c:92:5c:f8:09:7d:17:88:
                    f6:1e:f0:95:89:f7:66:a8:34:77:18:32:c1:b9:9e:
                    0c:e2:ce:b6:b4:5e:59:1d:f4:a5:b2:ee:39:b0:c3:
                    06:d7:15:ea:e4:5c:2a:4d:8d:cc:37:0f:84:53:c7:
                    ea:87:a2:22:95:17:86:8c:df:10:24:e3:8c:ec:30:
                    b5:0d:1f:70:06:78:07:45:fd:8d:5d:42:79:13:40:
                    4c:27:30:19:be:42:da:d4:ee:2a:67:9f:24:c2:5f:
                    e5:cf:35:18:42:de:a2:aa:65:9c:95:fe:ee:2c:dc:
                    c1:f7:cd:01:91:e1:af:ea:74:50:43:eb:70:89:65:
                    73:36:7c:fb:6e:3c:7c:df:ab:ec:21:cf:f9:10:f2:
                    10:59:d7:2d:56:d5:f4:ba:bc:e2:f3:f8:3d:be:be:
                    02:ce:7e:5f:45:ad:01:fe:64:7a:1b:76:b5:2b:67:
                    96:5c:63:b1:11:9c:e7:a4:e0:10:79:6f:a9:4e:0a:
                    97:f8:f9:d7:b3:dc:80:58:ca:6e:69:14:cd:71:7c:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:53:29:18:F3:7C:B1:5F:90:31:F9:7A:CB:CC:76:C2:AD:E4:4F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/1c1fd418-00c8-3cde-856b-bf5b93151109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:17:3d:4d:62:42:7c:c5:c7:d8:41:9d:82:32:53:ab:7c:
         9e:17:78:f4:ab:fe:5c:89:a4:8e:ec:19:fc:6e:f7:c9:79:ad:
         09:35:39:dc:af:f3:48:49:17:6b:6f:30:93:f3:10:e3:a9:df:
         61:07:86:6e:31:4c:7b:bf:1c:69:8a:e0:3e:b6:c2:5a:d2:b7:
         0a:e2:3b:d2:b0:83:66:6a:eb:61:ca:37:5b:d7:a8:7c:5c:72:
         31:e6:07:1b:40:41:71:76:70:b3:4c:b8:87:29:7e:1b:05:a0:
         1c:67:5f:19:e5:ce:75:22:da:d5:04:65:ed:54:54:44:ce:59:
         d1:8d:af:68:99:f6:3b:2d:63:e0:df:5d:31:b8:69:ed:51:9d:
         19:9a:50:f3:ad:dc:46:42:e0:c6:76:77:16:59:54:fc:d6:46:
         2a:24:2d:21:9c:10:4e:4c:b7:64:5c:62:74:5a:01:4c:5a:86:
         e9:31:ce:8d:81:bb:f0:da:91:21:9e:e0:0f:98:8d:a3:81:dc:
         66:a3:b1:bd:21:b4:4f:b4:6f:0e:4c:8b:8f:48:5f:f7:84:5f:
         7b:a4:cd:9a:a6:86:9e:a6:4b:20:a9:77:1c:5a:4a:14:d8:6c:
         08:23:5d:ff:87:6b:97:15:75:86:30:58:04:51:4c:e5:2c:7d:
         e3:eb:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:02 2026 by rpki-client