Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa
File:                     d1d035f6-95d4-3dbe-a301-249e15b96059.roa (raw, json)
Hash identifier:          gdLnIruKq/oi0vk53KwAMc6IoRzJvqX+a4K3PkB2APU=
Subject key identifier:   52:E5:92:97:01:79:4F:17:B4:5A:90:67:11:4A:85:9A:75:D4:93:64
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584E9A7FACB433AF053384EB0A00
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     397373
IP address blocks:        199.127.59.0/24 maxlen: 24
                          204.77.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ac:b4:33:af:05:33:84:eb:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=08d5ab9b-b962-4242-b8da-18e21a8ccf8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:00:e0:c0:a1:c9:bb:7b:71:c1:38:d0:38:
                    2e:2e:d1:e6:19:e8:08:de:7d:3f:0e:99:1e:ff:be:
                    b6:07:9c:26:cb:a0:6f:b5:86:17:52:68:60:5f:ab:
                    c0:ac:8c:9d:29:13:3b:ad:1e:b9:79:d9:da:1a:6c:
                    2c:62:c5:a8:0f:ed:ba:d8:6e:b4:b8:76:b4:3a:5b:
                    41:be:6b:9d:dd:1b:a9:96:43:b9:9e:80:47:15:a4:
                    f9:a2:1b:f8:55:89:f5:d5:16:e1:77:32:52:47:3f:
                    aa:17:24:1c:8c:c6:6f:06:58:a3:d7:11:33:fc:1a:
                    24:76:dc:dc:23:2b:83:69:e0:12:b4:99:6c:8f:a5:
                    57:0d:01:57:4f:4d:7f:95:01:ed:ed:73:e2:11:3f:
                    ee:2f:70:b8:e0:34:c7:1a:d7:68:07:df:c2:6c:89:
                    c3:ac:fb:29:66:59:cf:53:2f:c9:33:2a:af:32:e0:
                    da:0a:29:3b:3f:12:f0:70:a3:3b:a6:c1:7b:b8:de:
                    de:68:b4:33:3a:99:28:d1:7d:0c:8b:16:ab:42:e6:
                    dc:53:92:6e:30:7e:f3:75:cc:7b:95:08:57:8f:07:
                    83:4c:cf:80:e0:85:4d:2d:31:4a:32:9d:75:5b:a6:
                    33:45:36:7f:34:a7:83:f2:b5:06:1d:61:68:a9:c1:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E5:92:97:01:79:4F:17:B4:5A:90:67:11:4A:85:9A:75:D4:93:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.59.0/24
                  204.77.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:71:f3:6c:04:26:2d:41:6a:0b:80:c1:62:50:27:34:50:49:
         24:27:4b:87:29:56:a1:d9:71:62:cd:9a:f6:a0:e9:34:c1:24:
         09:36:80:da:61:cd:07:27:8a:84:54:d8:83:b0:c4:24:65:a5:
         06:20:fa:6a:c7:69:b5:80:d2:e9:36:ff:f7:00:cc:04:60:65:
         39:f2:58:ac:3d:99:fb:64:92:bd:3f:6c:13:25:ad:90:bc:53:
         9e:53:73:a8:62:5e:6d:1d:81:ed:2e:8c:01:03:33:aa:11:38:
         09:f4:0d:c4:6a:12:17:34:93:1e:4d:09:51:23:e4:17:fe:17:
         e9:ba:4c:87:c6:c3:3f:05:56:35:a1:d1:e1:62:07:47:70:50:
         71:64:45:6a:e6:f9:61:a2:50:bd:77:d8:a8:12:68:12:70:61:
         e6:12:84:42:3d:cf:5d:e4:b0:27:df:b2:ff:9e:ed:13:17:26:
         30:1e:16:01:b3:d2:93:c4:41:de:85:60:58:e4:97:cc:e4:d8:
         f5:46:54:39:e5:55:7c:3e:2b:d2:23:24:1d:03:1f:21:06:9b:
         c5:f4:28:42:fd:21:c6:04:dc:7c:47:dc:1a:cd:2c:17:ee:5e:
         99:ae:2c:d4:83:fd:56:9d:7d:4d:b4:0b:2c:70:81:d8:b2:d9:
         87:f6:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:51 2026 by rpki-client