Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa
File:                     1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (raw, json)
Hash identifier:          YrudGYlbec86IsBLspIPBspr2M7pUZttHNuv3sOPn7w=
Subject key identifier:   7B:44:11:E8:B4:DC:61:AF:66:E1:14:FA:E0:16:F8:37:F6:95:E5:82
Certificate issuer:       /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48
Certificate serial:       010D0C9F4328584E8B24F8364098BE04A8B70D00
Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     0
IP address blocks:        149.112.0.0/24 maxlen: 32
                          2001:504:104::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f8:36:40:98:be:04:a8:b7:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=c338734d-669b-48a7-b279-c5f9455acd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f2:f7:68:35:aa:56:f9:76:ac:82:d1:9c:6d:
                    bb:bc:6d:13:67:42:48:b0:46:86:49:73:ab:47:6d:
                    e2:77:5d:06:1e:86:59:93:94:d6:87:ae:71:85:21:
                    2d:7b:26:86:94:5e:ac:50:59:01:18:6e:7f:6d:e9:
                    2f:40:6e:c3:e7:84:f3:31:c9:33:c2:29:6c:15:af:
                    59:b8:57:b2:c5:88:c4:bf:3f:c9:b7:83:ef:1b:80:
                    3b:51:8b:2c:d3:96:ee:bf:3c:79:65:e0:03:b9:4a:
                    1b:8a:00:72:fe:71:d7:e2:ca:16:63:7a:8d:31:31:
                    29:a5:1f:2d:9d:8e:66:8b:9b:cf:ee:67:2a:46:e7:
                    9d:3d:76:c1:3b:72:ec:fa:20:ad:5c:ad:7c:6c:2f:
                    78:b4:60:90:d4:99:4b:4b:aa:a5:30:7a:19:f7:8c:
                    72:40:fc:bc:83:98:16:79:3c:fb:48:a0:96:f8:05:
                    c0:fb:68:cc:5f:53:b6:c2:89:ba:3b:80:73:e2:66:
                    85:1e:51:97:20:0f:02:43:c8:c5:a4:1b:b4:68:09:
                    ea:92:25:77:46:f6:2b:83:8b:d4:3c:eb:12:7b:3b:
                    b7:a3:e8:26:a3:1b:d9:a6:71:48:75:b0:58:14:f9:
                    75:29:bc:c0:f9:2f:a8:a6:bb:83:34:89:df:98:57:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:11:E8:B4:DC:61:AF:66:E1:14:FA:E0:16:F8:37:F6:95:E5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl

            X509v3 Authority Key Identifier:
                keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.0.0/24
                IPv6:
                  2001:504:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:db:74:c4:cc:42:5b:4d:8d:d9:87:95:70:28:73:29:d7:8e:
         e0:61:52:8a:73:46:71:82:14:93:fc:60:97:8b:85:85:d9:57:
         76:8a:0a:c8:40:7d:62:e3:55:7d:c1:3a:b8:f1:0f:ed:e8:4a:
         2a:dd:1a:17:a5:27:1e:08:5c:71:9a:f4:25:1b:c0:f8:13:1f:
         02:7a:56:4c:13:fc:48:53:d6:63:44:7b:af:25:3e:e6:a8:27:
         8e:49:ce:1b:a0:a9:e6:08:40:f3:9f:9e:df:ed:27:e2:3a:a7:
         f5:79:a3:d4:c3:78:98:4f:2d:2c:e0:99:8d:5c:22:31:87:2c:
         83:80:cc:b8:c0:26:81:04:a7:fa:cf:10:73:86:28:7c:5f:e1:
         4d:0c:8c:bf:5d:1a:a4:9a:68:b2:6e:cb:fd:0a:4f:f6:72:c2:
         96:ca:2c:fe:46:3f:c1:76:82:16:d7:db:42:3b:b5:1a:4e:c8:
         91:5f:f0:ed:2c:11:29:07:58:f3:a5:6f:9d:99:4f:e1:f1:97:
         cd:b5:b3:79:2b:98:b4:a2:5b:5a:9e:e1:2f:26:b3:62:da:4a:
         ea:e8:3d:a3:89:d2:cc:c7:be:96:6e:ca:3d:bd:1a:63:54:18:
         16:63:5b:c2:00:3f:40:c4:71:6a:f4:03:39:97:9e:c2:96:76:
         bd:6b:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:33 2026 by rpki-client