Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa
File:                     e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa (raw, json)
Hash identifier:          6zk9UQ5PxMqIVkND/nv99PSQiwJo/LtXv2xQPGh5v6o=
Subject key identifier:   C7:5B:3B:64:CE:13:DB:11:5E:83:9D:F4:A4:7E:8C:DD:EC:01:E9:92
Certificate issuer:       /CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f
Certificate serial:       010D0C9F4328584E640F623048947F4E9B94A1C8
Authority key identifier: FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     21779
IP address blocks:        76.164.240.0/20 maxlen: 24
                          198.48.44.0/22 maxlen: 24
                          199.195.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:62:30:48:94:7f:4e:9b:94:a1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=498722ed-4cdc-4c2b-9ff6-d799932bd41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:4a:b8:50:34:44:47:2c:e5:dc:71:71:21:
                    d6:71:9f:2f:bd:7a:80:2a:c1:34:c2:0b:bb:f0:0e:
                    93:ca:82:db:96:68:7a:d6:97:f2:65:40:6a:2a:20:
                    c9:03:52:a2:a6:21:0c:ec:95:38:a1:93:64:c5:ed:
                    cf:58:10:76:85:94:a1:30:62:f7:ac:8a:00:ea:7d:
                    f1:51:7c:9d:23:90:2f:0e:d3:7f:87:ba:7f:30:09:
                    86:3c:9a:40:69:ed:14:16:e5:00:43:73:24:52:9d:
                    9a:ac:79:07:be:72:97:d6:92:cc:d9:a2:60:b3:be:
                    a1:3c:6c:c7:2c:27:a6:11:dc:03:2a:bd:3e:d2:94:
                    a2:ad:74:df:a5:3a:1a:1d:f3:a9:ae:6a:d7:58:4d:
                    9f:cc:14:b7:67:29:ef:0b:c6:40:cf:bf:49:70:0c:
                    25:2f:b5:0e:c3:1a:a3:ea:17:88:8b:c3:64:f6:d0:
                    47:9e:4b:1b:43:67:7b:35:0b:49:12:35:c6:ee:f4:
                    77:41:11:95:65:c2:c4:93:0e:69:41:92:c9:79:79:
                    99:6b:9f:15:7f:0b:13:fc:8d:3c:b2:84:d6:d7:d5:
                    8b:20:d2:a8:b2:2e:21:eb:c1:35:92:99:b6:c6:46:
                    f7:c1:38:8b:6a:4c:41:7b:f1:14:40:22:d8:1c:fb:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5B:3B:64:CE:13:DB:11:5E:83:9D:F4:A4:7E:8C:DD:EC:01:E9:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl

            X509v3 Authority Key Identifier:
                keyid:FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.240.0/20
                  198.48.44.0/22
                  199.195.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:33:43:55:b3:56:19:01:19:b5:fa:0a:1c:e2:94:a2:a2:23:
         ed:61:c9:3a:6b:94:03:bd:48:a6:d2:14:ea:be:16:2e:6a:0f:
         db:cf:5a:3d:8e:f5:51:21:d9:1a:7b:cd:6c:b9:54:9e:64:93:
         e1:0e:c2:ff:20:52:86:ce:19:f6:76:84:46:8a:53:4a:cd:0b:
         a7:ba:84:7d:21:ff:b6:bf:9c:74:bc:bc:59:3c:20:b6:f1:10:
         3e:bb:50:3b:03:18:ae:a9:04:01:af:0f:63:43:de:30:f6:f3:
         79:eb:f1:99:07:d5:67:09:bb:cd:e8:24:ba:8b:c7:eb:14:03:
         e0:c3:78:4b:c1:5f:93:c9:b4:0d:7d:24:d6:e2:87:56:5f:c0:
         36:64:d7:44:28:4f:b4:c3:05:f8:f6:fc:d1:0a:b5:78:4f:19:
         71:aa:80:7b:cf:b1:54:b0:3e:8d:8b:89:6c:68:be:d8:35:5e:
         cd:f9:9b:c4:4d:8f:83:18:dd:a7:3d:c4:65:ec:90:c7:80:40:
         30:74:ad:16:23:1d:c9:a0:95:b6:c9:50:04:83:52:c9:ee:72:
         ac:05:70:63:3c:33:40:a8:3f:a0:78:40:c1:98:c9:7a:f3:c5:
         7d:1c:8e:13:08:87:70:2d:15:2a:80:53:1c:d4:b6:61:2a:fa:
         01:70:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:04 2026 by rpki-client