Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/b83c616f-87ba-3659-8b75-d0e8f2d10479.roa
File:                     b83c616f-87ba-3659-8b75-d0e8f2d10479.roa (raw, json)
Hash identifier:          p1I40OLISH3AcaiEej3kBQhE4n0WT3cLMXga9C6Rug0=
Subject key identifier:   E5:34:EE:89:0A:D7:FB:05:AF:DA:CC:B2:11:D1:AF:E1:75:1E:1D:36
Certificate issuer:       /CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
Certificate serial:       010D0C9F4328584EA78836D6D90758ACEB27D380
Authority key identifier: 79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/b83c616f-87ba-3659-8b75-d0e8f2d10479.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10587
IP address blocks:        209.161.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:36:d6:d9:07:58:ac:eb:27:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=07c15347-0c3a-49c9-8a91-d896e5365a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:66:75:48:92:fc:12:7e:dd:8b:19:5e:84:
                    4e:00:34:f9:d6:0a:15:58:1f:00:24:c9:e4:ed:4f:
                    24:91:a0:50:11:74:fa:ab:44:3e:7c:b5:c0:ae:26:
                    4a:9d:79:d4:c8:c2:d0:5e:2a:14:7b:05:a2:25:fc:
                    6b:5f:1c:c7:cd:3f:f5:71:3a:06:d8:76:1b:a7:13:
                    91:d7:99:18:1f:0f:de:74:68:67:86:aa:7e:fe:2a:
                    04:6d:88:66:97:8c:f6:c3:ea:fa:b5:8d:0b:ae:56:
                    a8:9a:2a:df:d6:84:a1:9f:b5:de:c1:7d:40:f7:59:
                    c1:b8:db:cd:2e:1d:45:5b:a8:c8:b6:35:eb:8a:c9:
                    7b:23:96:f1:f6:13:2f:18:28:a2:21:85:06:df:29:
                    97:35:b4:3f:1e:61:81:b7:3b:30:76:69:54:d6:45:
                    d5:88:02:f5:c6:a5:6b:d4:11:ca:b1:a2:7b:73:c5:
                    3e:5e:22:2d:95:bc:d7:f6:4e:e4:b0:da:74:20:e7:
                    22:42:60:d5:92:7d:8b:04:31:ce:0e:f5:1b:3d:b1:
                    75:4f:21:b7:70:3e:c8:4c:b6:86:3a:76:de:68:61:
                    53:89:fc:5e:cc:de:11:72:86:13:a6:26:99:cd:c5:
                    b9:9a:29:e1:27:b8:fb:17:2f:14:97:f9:c3:78:59:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:34:EE:89:0A:D7:FB:05:AF:DA:CC:B2:11:D1:AF:E1:75:1E:1D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/b83c616f-87ba-3659-8b75-d0e8f2d10479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl

            X509v3 Authority Key Identifier:
                keyid:79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.161.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:0b:62:c9:cb:25:7c:2c:d3:ec:50:10:3e:fa:af:9d:58:7e:
         19:33:2f:1e:5d:86:51:a9:e9:f3:dd:d8:80:78:f7:32:fc:e0:
         25:85:f8:b7:5b:ee:42:eb:b8:ea:a7:bf:31:02:e3:54:06:9b:
         59:c2:cb:cb:05:43:0a:4f:ee:45:52:c5:49:10:c5:60:1f:01:
         5d:d3:54:24:2d:81:0a:88:cd:f3:ae:cd:b2:b3:d3:52:0f:70:
         a9:ca:34:d5:d5:f9:fd:ee:3d:37:09:2c:05:94:08:74:53:7e:
         67:b7:ad:89:58:73:00:c8:3b:ee:47:7b:dd:87:af:fb:09:8c:
         f3:e2:70:22:96:8c:da:78:90:1b:fe:cf:72:bb:b3:01:64:fa:
         0b:40:48:97:6f:06:86:ea:07:6f:1a:7f:a4:39:df:13:7f:40:
         e1:2a:71:52:f6:06:e6:65:8f:77:74:82:0f:c3:8b:a0:8b:1b:
         72:12:36:9d:1d:84:9e:bc:5c:b2:cd:78:64:5a:f8:c3:f6:cc:
         50:01:57:6b:c1:5b:b9:f0:42:a4:fe:8b:34:37:f5:b2:5f:c9:
         ed:54:db:14:49:bc:82:6b:c7:0c:61:8d:dc:ce:db:90:fa:97:
         bc:0f:6b:16:da:cb:ec:a6:69:24:69:cd:2a:e3:0a:3a:07:7f:
         3c:b8:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:06 2026 by rpki-client