Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa
File:                     47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa (raw, json)
Hash identifier:          huIPy2ESSS6tqyah7fZa1lIVvboA+RKeEaWxpB3LyW0=
Subject key identifier:   10:DC:39:81:D2:3F:77:01:C4:DD:16:8B:94:E6:E4:49:E8:DC:2B:78
Certificate issuer:       /CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f
Certificate serial:       010D0C9F4328584EA798747C558C9B4B49DA7480
Authority key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11507
IP address blocks:        192.139.34.0/24 maxlen: 24
                          204.209.40.0/23 maxlen: 23
                          204.209.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:74:7c:55:8c:9b:4b:49:da:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0f3948b0-57a8-484c-b466-000431b70417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:1d:06:c7:1d:52:d0:39:c0:8a:46:e8:e8:
                    44:ff:23:f0:0d:f9:61:e3:8e:31:54:b6:b4:19:34:
                    2b:47:b2:9e:ed:22:04:6c:89:13:fe:56:69:50:c7:
                    2c:a9:2b:34:60:de:be:f1:b8:fb:19:4f:8f:46:42:
                    f4:95:6c:42:09:ce:96:4f:e3:0c:97:e5:67:de:5c:
                    fe:69:99:28:ea:f3:43:94:2b:a2:b5:85:b3:7c:6e:
                    42:4c:78:a1:7f:bc:dc:c0:12:5a:83:02:5d:d1:8b:
                    06:ef:fc:dd:12:85:d1:07:67:35:79:de:f7:39:b1:
                    cb:0b:fe:64:60:5c:88:cd:27:df:f9:16:f4:bb:51:
                    f6:01:22:fd:93:69:f2:0b:6e:d7:f3:35:34:d4:ed:
                    76:f1:4a:c0:94:e8:66:ad:5c:4d:09:7c:80:19:ec:
                    6c:32:28:86:da:29:1d:26:99:11:96:c6:db:d6:fe:
                    2a:58:3d:62:53:95:34:3f:12:c6:aa:5a:8c:47:40:
                    8c:d6:a2:47:a9:46:41:47:48:59:3c:22:29:d3:14:
                    1d:5f:cb:99:47:d0:43:0b:ea:ea:a9:32:87:1b:af:
                    f3:1b:dd:99:d8:09:4a:7b:de:91:9e:1e:24:0d:4a:
                    7c:89:6d:2d:16:5d:71:c0:b6:01:15:ea:7e:b9:db:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:39:81:D2:3F:77:01:C4:DD:16:8B:94:E6:E4:49:E8:DC:2B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl

            X509v3 Authority Key Identifier:
                keyid:71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.34.0/24
                  204.209.40.0-204.209.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:a7:4b:80:26:bd:25:7e:d2:1f:b7:75:21:ca:3a:81:5e:
         20:36:87:62:06:4e:5b:29:5f:d8:1e:1a:16:ae:f9:a0:16:3b:
         ce:fa:79:23:6c:7a:5a:bb:b2:33:e0:fc:1e:86:de:73:0c:fb:
         56:1a:09:3e:89:e4:3b:cc:61:5c:25:35:4b:29:00:a5:b6:47:
         a9:0f:9b:d7:5e:9a:51:d8:f7:91:2d:a9:e2:9d:1a:92:c6:f1:
         36:31:6f:89:02:23:d9:4d:4e:e4:86:06:23:01:5f:d5:68:ac:
         4f:ac:3e:66:8b:2b:0b:14:d6:c0:9a:80:8f:5a:4b:f3:7e:00:
         92:a5:05:41:23:3d:aa:81:59:2f:da:f0:6f:80:6c:35:04:3d:
         55:28:7a:dc:f3:38:b7:e7:fc:e4:ab:b0:97:47:37:fb:78:c7:
         ba:3b:bc:1d:fc:a9:f9:4e:39:ae:74:9c:b3:0d:9f:45:74:dc:
         21:d9:a5:d2:11:57:b1:bc:7d:ba:ad:db:c4:7e:44:a8:24:6a:
         e5:9a:fb:db:95:71:4e:24:e3:f6:64:e4:5e:ac:db:f9:8a:5f:
         d4:40:10:29:3c:36:5a:2f:72:81:61:a0:7f:be:28:3e:29:14:
         58:57:61:9e:76:ef:ae:d4:95:3a:4f:2e:72:3c:22:49:4a:1e:
         ff:9e:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:08 2026 by rpki-client