Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf68393f-4f5e-3772-83a3-85e8b5a40734.roa
File:                     bf68393f-4f5e-3772-83a3-85e8b5a40734.roa (raw, json)
Hash identifier:          /cj0Y2qAhlxrgVv8Ps/UE70dVGR1JXUlPrYgdbSZKx4=
Subject key identifier:   9D:9C:84:0B:07:69:54:23:C4:44:64:8E:69:DA:B2:5E:A9:17:CF:8E
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584E66DA0F13D94924C75DFED440
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf68393f-4f5e-3772-83a3-85e8b5a40734.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     19901
IP address blocks:        208.160.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0f:13:d9:49:24:c7:5d:fe:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=83f70460-b61b-4b5f-979f-e149705ea213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:fb:ff:e1:14:0c:1e:53:8f:49:81:32:17:
                    7c:fd:fa:bf:e8:a0:2a:68:6c:6c:ac:56:23:a8:e3:
                    e3:5a:e4:80:b1:32:0e:cb:41:4b:64:c9:97:3c:f5:
                    05:a7:96:29:8a:6e:9a:b7:26:81:79:6f:84:1b:09:
                    55:ad:a0:81:e9:43:48:db:a3:42:02:62:ee:5a:6b:
                    39:e3:98:4e:aa:35:92:23:39:68:9a:e2:22:9e:c4:
                    c3:ef:87:44:a1:4c:8e:55:22:63:99:cf:17:99:ae:
                    b0:47:f7:e0:28:06:53:8d:c7:4b:79:ff:1d:88:4b:
                    87:ec:24:bf:dc:6e:2e:cc:aa:7a:33:02:79:69:90:
                    48:44:b3:c7:4a:d2:7c:07:2d:45:25:e5:70:12:09:
                    95:f4:a0:53:b4:6f:a3:c0:5d:e6:6d:63:51:5e:16:
                    31:ee:e0:f9:49:81:06:3e:ca:5b:80:ea:32:2d:b0:
                    f9:e4:bf:27:1c:13:05:b0:f5:fe:30:a5:7b:1b:d8:
                    d6:df:0c:06:da:e4:1f:49:f1:1a:89:9b:7e:84:58:
                    91:55:76:ae:13:3e:94:ec:04:15:2b:12:f6:92:73:
                    0c:3b:f6:c0:99:fa:32:26:7b:50:b6:e5:e7:7d:c4:
                    32:87:15:e3:8f:69:35:0b:12:a2:48:e4:99:81:6c:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:84:0B:07:69:54:23:C4:44:64:8E:69:DA:B2:5E:A9:17:CF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf68393f-4f5e-3772-83a3-85e8b5a40734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.160.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:3d:12:f1:95:c6:e2:dd:4e:ec:b9:66:d9:bf:df:5a:6b:
         2d:16:6a:eb:7e:5f:36:49:c0:4f:94:ae:f6:6c:d0:07:d8:0e:
         fd:a3:5f:fe:cc:ce:6b:c2:d0:d7:2d:43:cb:cc:0c:15:c2:dd:
         79:df:1a:36:53:14:90:00:12:15:1d:5f:b8:c9:40:31:fc:c5:
         53:5e:26:cb:f1:95:fa:b9:0b:da:7a:a0:a5:c8:08:49:24:8c:
         52:48:4a:9e:88:f2:ac:32:64:90:8b:04:7b:77:68:17:c0:79:
         c7:af:a1:11:4d:de:47:d7:33:d6:4c:be:96:30:f6:4c:6c:05:
         e6:a9:3e:5d:1a:97:a6:ab:60:aa:b8:bd:f1:d7:4e:8b:ec:2e:
         5e:06:f3:6c:a7:88:d7:4c:35:a9:bb:3b:6c:cf:c1:3d:60:2d:
         40:25:e6:f6:68:77:e9:48:86:90:03:8a:63:30:7a:66:8b:3a:
         44:19:c4:40:a1:f3:5d:3b:e9:3e:04:b3:c7:6d:49:82:6d:88:
         31:c4:c5:9a:85:d7:f3:dd:79:37:5a:94:d5:84:91:62:2f:80:
         a0:38:31:71:cc:dd:a5:a2:7c:c9:74:16:8a:01:81:e0:03:f4:
         0d:f2:e6:1e:ce:da:5a:68:67:93:90:da:b7:89:e1:a3:fc:ef:
         43:00:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:26 2026 by rpki-client