Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/4c6a43ff-3ad8-3a17-b6a8-bf77c7a1ce49.roa
File:                     4c6a43ff-3ad8-3a17-b6a8-bf77c7a1ce49.roa (raw, json)
Hash identifier:          lJbvyuAsFirFcDWNPVP3Sg3xhcGIo2D10432QsVFR0I=
Subject key identifier:   4B:12:49:9B:92:DB:D5:9B:B5:F9:40:38:35:22:DA:33:4D:F3:7C:5A
Certificate issuer:       /CN=58e07563-c033-4e44-b58b-ee57eafd8f85
Certificate serial:       010D0C9F4328584E6144B2C68F10DBAB4B653380
Authority key identifier: 46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/4c6a43ff-3ad8-3a17-b6a8-bf77c7a1ce49.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     399060
IP address blocks:        147.136.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b2:c6:8f:10:db:ab:4b:65:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e07563-c033-4e44-b58b-ee57eafd8f85
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=6d3c882d-ffba-4d57-93d5-2379a6f9e240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:da:6d:2c:a0:db:c2:29:66:6b:0e:75:9d:
                    68:a5:0a:07:04:a0:64:23:7c:20:6b:0d:26:71:c7:
                    5e:e1:4e:f6:85:b4:a9:43:2d:09:e6:e1:30:89:99:
                    51:ab:e2:5f:c6:8f:68:92:5e:ba:c1:34:27:44:02:
                    ff:62:44:ad:ba:a0:4a:7e:80:09:98:c8:f9:3b:42:
                    f5:de:2c:51:8a:ca:9e:a5:3d:d7:6f:42:57:4b:4d:
                    36:32:3c:3f:b1:70:26:a7:ca:43:df:0a:2b:fb:a1:
                    1a:21:d4:63:cd:bd:6b:a6:62:96:f9:cf:5a:b9:09:
                    11:15:8e:b9:02:41:05:22:03:ac:b8:4a:6b:dd:e5:
                    7c:24:01:2d:d8:38:26:19:51:23:bd:29:81:c5:f0:
                    a0:60:9b:be:b3:ad:66:60:c0:6d:6a:3e:b0:a8:1f:
                    b8:fd:18:04:da:ed:17:9d:b6:5d:ef:81:62:89:80:
                    8f:b7:15:10:12:2a:ff:4d:5f:31:84:20:54:a8:bc:
                    dc:3d:6a:bd:7a:0d:eb:f4:10:8f:a6:97:9c:44:a1:
                    db:a3:fe:0e:cd:38:c6:69:41:6e:e8:51:60:a2:be:
                    c5:00:87:7a:2d:d8:62:b2:9a:98:78:cf:25:4a:ca:
                    14:21:dd:51:bb:eb:17:1d:15:85:58:b1:18:82:c8:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:12:49:9B:92:DB:D5:9B:B5:F9:40:38:35:22:DA:33:4D:F3:7C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/4c6a43ff-3ad8-3a17-b6a8-bf77c7a1ce49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl

            X509v3 Authority Key Identifier:
                keyid:46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:47:a3:3a:6b:0c:7e:4c:e5:2d:3b:ab:10:39:ed:73:52:00:
         90:ec:ef:33:54:dd:b3:fd:58:61:eb:ec:b1:46:7f:6c:a6:cb:
         68:eb:34:4b:84:e6:9e:c9:dc:5f:b2:23:47:9e:32:77:d7:91:
         bd:46:1d:b4:c6:bf:de:5e:e9:ba:8b:8a:1b:02:7e:bc:83:96:
         f9:c9:90:59:01:79:84:d5:9b:dc:56:85:5c:24:13:d2:cc:e0:
         5d:e0:44:3c:02:bb:3e:5f:30:1f:af:e3:3e:96:06:5c:b2:8c:
         7d:04:57:d6:e5:f4:12:fc:29:ec:1d:89:88:a3:34:ab:65:1e:
         6b:68:8d:f9:b3:85:41:99:a3:e4:da:0a:e3:06:c3:a9:5a:26:
         0d:ed:e2:13:dd:9c:7a:2c:6d:d2:97:e7:95:50:e2:84:c1:cd:
         89:87:af:97:f5:63:45:35:68:ac:c9:ea:66:b8:ad:5b:ad:45:
         03:a1:38:57:f0:86:2d:2e:85:c3:01:5d:df:84:c3:38:a6:19:
         cb:bc:63:0f:b3:19:cd:9b:b4:d1:41:6a:e0:36:d9:14:b9:12:
         22:75:e0:9e:0b:9b:a9:ae:7c:a2:71:d6:a7:1e:06:dc:ca:db:
         fc:1f:23:32:4e:95:ab:fa:16:6b:65:c0:7d:6a:78:de:e2:d8:
         70:1e:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:38 2026 by rpki-client