Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1edaf019-dc28-3aa3-81a2-3d7d5ae5411a.roa
File:                     1edaf019-dc28-3aa3-81a2-3d7d5ae5411a.roa (raw, json)
Hash identifier:          6ry+XaDg1Kh0XDWcmubt/oEX3xVUdffHEyPV7N6fuKY=
Subject key identifier:   B1:B7:E1:8C:AA:75:08:37:28:4F:CB:B7:39:30:FC:C4:8F:8A:8B:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36008BCAEFF07041251B2100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1edaf019-dc28-3aa3-81a2-3d7d5ae5411a.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        71.192.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:8b:ca:ef:f0:70:41:25:1b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=20c0e905-3388-4ecc-8614-6ed6466e9d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:85:9d:14:70:b1:cb:4f:bb:8f:1d:5f:1c:
                    60:e3:66:aa:4a:75:99:22:a1:16:91:04:0e:94:cf:
                    c0:12:89:39:18:8c:a3:7e:de:fd:f9:92:6e:ac:4b:
                    8e:f2:c6:4c:c3:af:19:b7:17:63:19:1e:d9:04:9b:
                    bd:9c:b7:01:f0:94:6c:c2:b2:6f:59:cc:1a:0a:53:
                    a2:91:fb:d6:4c:ee:22:28:ee:73:14:54:fd:a9:81:
                    f0:c1:eb:6d:23:96:dc:5d:e8:21:74:e5:19:d7:86:
                    39:98:38:c4:0a:4d:f2:43:95:10:42:49:ef:ec:39:
                    e6:a4:2b:0d:00:e1:2f:69:cc:8c:60:af:49:13:16:
                    9c:9f:92:af:95:ae:2d:a8:a9:77:a8:37:f8:57:e9:
                    3d:af:15:c5:2d:4b:d3:a5:9f:26:b3:60:5b:00:3d:
                    99:59:7e:89:1e:5b:57:ee:67:95:cb:23:58:c4:b3:
                    54:cd:bf:bc:a8:c3:01:2d:81:1e:83:b8:09:68:f6:
                    27:0c:39:75:c7:4e:8d:0e:9a:24:d9:73:e3:76:7f:
                    dd:e2:76:20:ff:88:ed:a9:b3:50:60:45:2c:6f:2c:
                    ae:84:9e:d2:8b:ed:27:2b:67:12:7b:8d:97:85:9c:
                    f2:e9:82:30:d3:cf:90:61:66:a9:49:24:1f:43:67:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B7:E1:8C:AA:75:08:37:28:4F:CB:B7:39:30:FC:C4:8F:8A:8B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1edaf019-dc28-3aa3-81a2-3d7d5ae5411a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.192.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:73:a5:a1:d8:b0:cf:4e:1b:68:9f:99:0c:54:78:c1:3e:ce:
         24:7e:af:7d:51:22:21:d1:af:ab:6b:6c:57:5b:8f:b2:65:a5:
         9e:12:e8:0d:62:e1:18:bb:ac:c1:a6:74:af:43:5b:8c:18:d4:
         8c:83:94:e6:93:89:ec:d6:07:57:96:93:0a:dd:1b:4a:49:00:
         cf:f6:58:77:b5:27:e9:fd:d8:4b:23:2f:44:60:b9:fa:45:37:
         3d:10:ad:93:f2:d0:32:b6:a0:3e:6a:c2:db:6c:05:80:e1:44:
         87:14:48:94:43:5b:cc:58:d6:2e:77:2e:63:00:70:f5:e1:21:
         cf:50:33:ed:72:0c:be:18:19:18:7a:8d:ed:7c:d7:8f:2e:b8:
         fd:c8:7f:d0:62:f0:11:ad:56:e3:cc:27:ac:76:ab:c0:88:6e:
         ac:35:a6:7f:56:25:df:95:ac:b8:f8:14:ba:dd:d5:0c:b9:36:
         a4:32:20:a7:33:2a:92:af:35:8e:1e:b4:8a:64:05:fe:3f:74:
         f4:1d:98:78:d0:5e:e4:7b:78:e7:8c:c4:e1:a8:46:6a:40:f2:
         41:2b:a5:00:51:01:6a:36:b0:33:ae:a8:dc:4d:4c:02:66:1e:
         53:a0:49:16:f5:b4:e4:b9:47:7a:7a:fd:cb:db:7d:be:e6:ed:
         2c:94:57:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:23 2026 by rpki-client