Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa
File:                     9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa (raw, json)
Hash identifier:          8x0/rQ3Z1W3TcNBu2uh8MyHZ3L81aJeYWbpzSamPmUY=
Subject key identifier:   4D:BC:1A:DD:1A:F2:94:22:A9:32:51:A2:20:09:9A:84:37:1C:D3:53
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584E7204C835794C0B53B1ED8A00
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     34774
IP address blocks:        199.64.40.0/24 maxlen: 24
                          199.64.72.0/24 maxlen: 24
                          199.64.73.0/24 maxlen: 24
                          199.64.74.0/24 maxlen: 24
                          199.64.75.0/24 maxlen: 24
                          199.64.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c8:35:79:4c:0b:53:b1:ed:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=3ff02c01-25f0-49bc-bd85-ba31d7d9a21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:e2:0b:dc:7c:c3:c0:54:61:71:6a:3c:15:
                    2b:4b:5b:16:ed:06:c6:93:d4:43:5f:50:c5:d4:6f:
                    5b:5c:3e:29:6b:67:7e:ec:d1:ec:e6:9b:da:98:7f:
                    45:b8:7b:b4:e5:09:50:7d:ae:a2:82:64:00:97:11:
                    bb:3e:09:e7:04:11:b4:82:87:39:9e:59:2e:86:b8:
                    c0:f9:f3:1d:67:02:1c:b0:40:48:86:1e:f2:7c:f5:
                    4d:ab:a1:38:8e:1d:91:25:11:d3:9b:28:4e:6d:ec:
                    eb:fa:91:d1:dc:a4:11:f8:18:e4:2a:0f:2d:bc:29:
                    43:d6:a5:1f:54:48:ae:1a:de:c2:43:3c:c4:bf:87:
                    e4:da:62:e0:af:da:92:89:53:97:ec:c9:4a:88:49:
                    a7:0e:55:fb:67:e1:14:7b:53:c2:2d:de:17:54:c2:
                    95:6b:7d:e8:95:13:fb:29:09:c5:2a:88:d6:b8:55:
                    03:f7:31:43:4e:5b:7a:b5:e6:3a:88:18:a6:c8:23:
                    d6:8a:99:67:f1:69:b0:02:65:61:71:72:f9:fc:d1:
                    d2:53:d0:d1:99:00:65:c0:07:95:5e:c9:d7:b7:38:
                    02:31:6f:ea:59:9b:db:33:9c:37:ba:4c:67:d8:bd:
                    ea:1b:c2:9d:a7:3a:8e:0d:10:62:9b:d8:83:7d:2c:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BC:1A:DD:1A:F2:94:22:A9:32:51:A2:20:09:9A:84:37:1C:D3:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.40.0/24
                  199.64.72.0/22
                  199.64.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:54:c6:80:8d:a3:5a:cf:5a:56:2a:17:b8:e6:29:7e:35:
         2a:1f:08:e3:a2:ca:7b:c8:61:28:95:a0:f4:24:9d:80:b8:ea:
         9a:dc:87:11:ed:b7:ee:ba:1c:12:89:8b:20:f1:8d:cb:15:95:
         39:4e:57:03:49:6e:67:44:34:dd:a5:bc:f9:c3:5a:84:11:bd:
         43:82:13:f9:08:9a:b0:77:7c:9b:80:7a:57:7a:64:14:93:fa:
         9e:b2:4a:52:c6:b1:34:ca:08:e4:50:0c:4b:83:8e:ef:06:ac:
         7d:9d:76:96:12:dd:a4:92:03:e9:10:ef:2d:f7:3f:20:58:49:
         1b:f4:70:41:9a:5a:95:cf:35:58:0e:de:a0:f8:d0:40:94:57:
         1f:3b:1f:22:15:ea:2c:16:f4:d9:f2:f4:53:bb:5c:96:42:af:
         b4:97:3e:fe:06:d6:d8:7d:a9:7f:0f:c0:44:a7:14:4a:f7:e6:
         a1:c0:49:c4:8f:d8:ba:ec:90:84:a2:94:05:40:38:43:3d:b1:
         69:9a:17:f6:ac:75:80:c7:a5:00:87:73:70:d5:71:a7:84:d0:
         d9:00:79:8b:be:79:36:18:f3:4b:aa:d2:ac:3a:6c:58:d6:50:
         f0:6b:4a:26:9c:bc:44:cc:4a:68:f3:e8:57:0f:f4:9e:15:26:
         fd:01:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:02 2026 by rpki-client