Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa
File:                     895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa (raw, json)
Hash identifier:          epr4jIBvxpbFy4c0EZ7l5AXYiXUi8BJ+mQTiJJM3JJs=
Subject key identifier:   54:86:E4:93:B9:61:E9:70:3B:7C:6E:50:44:FF:9D:25:40:F6:BA:58
Certificate issuer:       /CN=3a000633-c1ee-492c-b730-12e113ab8bd2
Certificate serial:       010D0C9F4328584E482489FFF5E1A99D96758740
Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     394710
IP address blocks:        85.131.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:89:ff:f5:e1:a9:9d:96:75:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=c858b0f0-28b9-4398-b93e-5e9eae1870b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:c3:bc:c6:2b:6f:43:b5:e8:53:79:6b:d4:
                    27:00:d7:2e:60:a0:4e:ab:65:ae:3a:4b:da:b2:93:
                    39:c1:a1:73:fc:b7:42:86:63:59:12:a1:d6:a3:48:
                    f3:e3:66:a8:e7:26:3b:46:01:04:23:76:c6:a9:18:
                    56:b3:03:b0:db:c8:37:4f:3e:4a:fe:fe:a9:14:1e:
                    dd:5c:fa:15:1d:1e:3e:90:72:99:e7:fc:97:4d:dd:
                    5f:c9:e9:15:dd:f9:7b:30:3f:9a:99:63:ec:69:3a:
                    ca:16:e5:33:85:fc:23:58:80:51:4c:3a:34:03:11:
                    45:47:9e:56:b2:3f:16:5f:9e:be:0d:9c:71:80:9a:
                    2b:73:ff:f0:d4:34:9f:05:02:e9:1b:4e:85:8f:8c:
                    0e:52:d4:fa:d3:c5:68:a8:e5:ef:60:2a:ef:31:9d:
                    cb:66:b1:e7:a8:ba:1e:6f:72:03:4e:5d:32:30:f4:
                    f5:14:15:21:03:70:e8:76:58:87:ea:2e:3b:f5:fe:
                    43:b6:e8:83:48:6e:2c:5b:37:3f:95:bf:05:81:1c:
                    e9:8d:a6:a4:04:58:d2:73:67:cb:28:43:07:77:fc:
                    20:2b:d4:f0:62:e5:84:ad:8a:ae:f4:5b:ec:ff:bf:
                    2e:d3:77:55:f4:be:fe:7b:95:e8:21:98:80:bf:f1:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:E4:93:B9:61:E9:70:3B:7C:6E:50:44:FF:9D:25:40:F6:BA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl

            X509v3 Authority Key Identifier:
                keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.131.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:d7:e0:81:77:87:81:60:f6:05:ef:9d:ff:3c:8c:0f:bb:
         e1:20:f9:b5:47:f8:77:8d:dd:21:31:f3:05:99:61:6a:3f:62:
         63:20:7f:92:36:a4:b9:8a:27:cd:f5:e0:29:b6:71:53:a9:34:
         44:9f:60:1e:de:33:8a:b3:23:f0:d4:ea:72:c1:11:3b:5e:25:
         ac:19:4e:1c:8c:c8:f6:5f:5c:d1:10:8f:34:cf:8a:6c:14:f6:
         2b:ac:a5:8d:95:f0:d1:2d:b7:b7:0b:94:80:e3:e6:65:a4:a8:
         e1:69:bc:36:b6:31:82:38:89:a1:64:bf:d5:b2:3d:55:5a:3f:
         b8:1e:bc:0c:79:4b:d6:41:73:4d:06:b4:ef:fd:e1:bd:16:8b:
         d2:75:8f:07:a6:1c:a1:e6:aa:41:bc:cb:73:28:d0:ff:ae:02:
         b7:3d:7f:9b:bb:03:da:46:e4:c9:b6:ac:b7:c0:bb:b2:c2:be:
         26:04:12:56:39:b5:a1:a7:52:3d:3d:e7:38:51:06:cd:13:a2:
         62:5a:0f:63:9e:29:0f:a0:17:6b:34:09:92:72:d7:e3:15:d4:
         66:cc:03:d2:70:03:1b:79:e1:cf:cc:e5:c6:b5:7c:97:2d:47:
         4e:31:93:69:51:78:4e:52:81:47:c7:06:a5:a5:6f:4a:fc:07:
         a1:df:28:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:19 2026 by rpki-client