Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
File:                     439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json)
Hash identifier:          oFfgKBLIHIvjPoBvKSzPIAUiGQal2AFeyE40fLoU1ws=
Subject key identifier:   82:56:A6:B7:75:70:2D:8A:24:29:B6:7B:1B:58:71:98:25:A3:D3:58
Certificate issuer:       /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
Certificate serial:       010D0C9F4328584E4AEF492C8D05E044B301B000
Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     40583
IP address blocks:        198.236.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:49:2c:8d:05:e0:44:b3:01:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=43284f13-3162-416d-974e-254fc061e313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e4:16:18:ef:c3:7f:68:e7:2e:ee:60:bd:23:
                    4f:7d:1e:1e:14:35:a5:ab:30:20:c1:77:af:1b:ea:
                    41:d9:e0:45:d8:d1:ef:b0:85:bf:32:41:6b:2f:05:
                    7e:94:09:54:93:b3:53:a6:ad:ec:69:80:bb:c5:ef:
                    af:88:68:dd:a7:a7:85:bf:5b:ae:8b:70:e0:61:d0:
                    f7:df:c3:d5:cb:da:b7:c4:1e:d4:7c:9f:cf:5a:b2:
                    54:1c:97:48:91:bb:d1:c3:88:69:02:69:5d:34:32:
                    0e:8e:11:d2:6f:22:2c:b0:54:50:30:0b:9d:12:0e:
                    52:4c:68:6d:33:f6:0a:16:2e:d2:58:c3:79:8a:2e:
                    8f:29:30:04:a4:9c:de:84:5d:9d:18:2c:c7:f3:57:
                    f3:41:1d:5a:ec:ec:43:47:bf:ea:db:8e:bc:ff:b5:
                    0c:76:60:12:7f:99:6b:e4:87:7f:d2:4d:5b:17:52:
                    4a:b8:d3:98:a5:71:ee:74:ba:de:04:fe:5d:6e:f3:
                    64:58:6e:0a:ed:05:c2:27:50:ab:2b:99:d6:19:49:
                    94:39:43:08:a4:65:3a:90:c2:20:2d:3d:3a:51:a5:
                    e5:ec:ea:4e:ca:ea:b0:49:78:c0:79:55:48:64:00:
                    77:d4:1d:a9:33:86:8d:b6:18:c6:fb:35:a2:22:78:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:56:A6:B7:75:70:2D:8A:24:29:B6:7B:1B:58:71:98:25:A3:D3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl

            X509v3 Authority Key Identifier:
                keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.236.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:35:7b:df:6b:64:d9:c3:00:27:17:71:68:fb:3e:bc:74:
         84:12:4e:ba:59:6b:9b:72:36:8f:53:bd:b5:f2:75:c1:17:55:
         ee:da:2b:3e:61:7b:49:54:fb:ed:c4:d7:f1:c0:c5:74:73:22:
         cf:b6:7b:e1:6d:18:93:a4:91:87:e3:f3:f4:85:05:0f:31:48:
         7f:c7:4e:53:26:5d:e1:12:38:67:43:b6:d2:39:4a:bd:31:9e:
         eb:10:f6:d0:d1:ac:e2:44:69:4e:88:82:13:78:0d:3c:ed:cd:
         5b:e3:81:84:5a:a1:41:81:45:b2:1a:17:95:c9:19:d1:64:d1:
         18:5f:31:0a:c1:39:31:dc:d7:07:a5:9f:39:72:bd:46:5e:e5:
         f5:c7:a6:a2:17:9d:41:37:42:53:ce:34:74:4c:f4:67:58:14:
         42:0c:74:d1:19:ec:80:85:b6:3a:6c:2b:88:30:09:67:de:be:
         c6:5c:97:02:d8:13:9f:f1:0d:b3:44:1e:cc:27:64:71:0d:d9:
         b1:90:66:fe:e4:c6:14:22:6c:51:68:48:e2:c9:8d:9e:8a:09:
         ef:cf:49:58:27:9d:0f:b4:b9:3e:53:b9:41:f8:d2:96:58:f4:
         bc:1b:78:50:6e:c8:11:86:cd:ba:bb:16:53:26:65:81:a4:c4:
         3f:51:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:18 2026 by rpki-client