Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa
File:                     7cfb3343-9794-3299-b118-155e595370a9.roa (raw, json)
Hash identifier:          E0YQojGVSWexMaOvRTe3I6Dk/PvKSpHvTiNFbnP+DGo=
Subject key identifier:   A7:1F:2A:1B:D9:A9:39:64:5F:14:A0:F7:CA:47:E4:0E:1F:2B:01:38
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584E78FF7DD0F33857A4674BF080
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     399672
IP address blocks:        165.140.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7d:d0:f3:38:57:a4:67:4b:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=a8eff7a1-ab18-4db1-bbf7-24de6e31c0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:c3:dd:f6:6e:cf:2c:e0:60:c0:26:0b:d3:
                    42:6b:c0:d7:75:70:dd:30:b8:4f:36:01:ca:9e:eb:
                    f8:f8:a6:9f:4e:49:63:9b:58:8f:b9:eb:e4:5c:e3:
                    36:05:e5:1d:e6:46:42:87:31:b2:22:17:fa:16:19:
                    81:87:42:75:f9:5a:32:a6:6a:13:fd:22:3e:ff:46:
                    07:0b:97:07:0d:b4:80:29:28:d7:89:2d:f1:02:89:
                    91:f4:be:9e:73:b5:34:db:20:c0:27:3c:bd:32:d0:
                    d4:e8:f2:f7:41:41:62:40:34:55:ff:2f:a5:4c:2b:
                    76:c6:bd:3f:54:ce:ce:b9:1f:28:43:51:52:eb:1f:
                    77:8e:c5:f7:ca:4e:9d:50:31:d4:1c:b4:eb:73:24:
                    da:7d:ee:42:5e:5a:d2:5c:e5:07:14:9a:0f:80:df:
                    12:4e:be:23:5d:fc:54:8e:74:fc:95:52:fc:6d:28:
                    85:4c:84:77:4e:42:1d:1f:22:b5:d8:32:98:67:21:
                    19:d6:c3:39:74:3d:1f:77:76:25:e6:a9:13:ba:ce:
                    87:61:dc:d9:a9:ae:db:ad:1d:d4:2c:dd:ec:ad:c0:
                    84:88:39:9e:bc:2f:05:7d:05:c7:d0:32:bd:cd:36:
                    ef:a0:9a:32:92:6f:4e:f1:cb:ec:9a:85:32:b6:1c:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:2A:1B:D9:A9:39:64:5F:14:A0:F7:CA:47:E4:0E:1F:2B:01:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:29:72:2a:47:ee:2f:d1:38:c8:de:5f:aa:af:04:1f:50:ca:
         e4:d3:34:11:6d:36:50:61:07:3f:04:27:eb:6d:f0:6d:29:f8:
         2f:7c:aa:8a:38:b4:5b:07:0a:45:50:6d:52:be:b1:ca:2a:cd:
         72:3c:d1:b7:ae:3d:5a:3a:f1:03:77:90:90:9e:8e:c1:1d:6f:
         a2:7c:2a:5c:7a:77:81:dd:60:55:3e:5a:a4:84:13:53:15:58:
         9e:22:19:8b:b6:43:62:2f:fb:65:0d:3a:89:d8:34:7a:0c:dc:
         c5:41:d0:ac:36:22:f9:2b:b6:77:dc:d5:7b:9c:85:41:3e:38:
         76:0d:57:d8:72:be:36:6f:83:a9:7c:c0:09:bf:85:47:b8:08:
         af:49:46:b0:e2:51:50:d2:f0:69:8a:d9:13:a9:69:8e:bd:de:
         85:19:0d:2c:2a:4e:63:8e:45:31:c7:ce:26:17:5e:25:3e:5b:
         ef:07:6b:a2:e9:4b:a9:a6:a8:4f:a8:96:7f:aa:2e:a2:e4:81:
         5c:b8:51:05:9f:e9:f9:e5:7e:7d:3c:13:bb:2a:af:49:e9:83:
         75:42:35:ce:82:d1:5b:a3:6e:37:db:2d:75:ea:4a:c3:26:3e:
         e9:f1:3a:8c:d5:03:f5:cd:8d:2c:d1:69:3d:0b:e9:4c:21:f5:
         66:8a:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:34 2026 by rpki-client