Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa
File:                     d41965f6-81e6-3659-8a3f-5c6056d921d3.roa (raw, json)
Hash identifier:          RyLuFaqDJgE0bcues4QzCPXMVxrHrJKMMueSHMIA2t4=
Subject key identifier:   A2:5B:01:36:AA:D0:DD:18:77:99:DE:EF:08:E1:04:3F:F7:C5:1B:45
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584E86F50397F51E5866BB1EEAB0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     4922
IP address blocks:        192.34.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:03:97:f5:1e:58:66:bb:1e:ea:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=b5e36094-ba3f-4f7c-b110-ebbf66266c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:5d:23:54:da:3e:3a:d6:fc:36:ff:59:f1:
                    5b:dc:97:46:e5:03:df:3b:06:94:d2:5a:19:89:cb:
                    27:41:c3:ce:48:7f:ba:1d:4f:91:1c:da:5c:db:f5:
                    b1:00:9c:a0:31:83:66:71:12:1a:8c:6a:1b:2c:9c:
                    61:df:f0:d6:70:53:46:a4:7b:35:48:d8:1e:4c:62:
                    64:4e:b2:b2:56:3d:9d:8a:0b:fc:00:71:62:f6:2b:
                    e6:42:6c:68:2d:8f:ab:6f:fe:8b:4c:09:9d:37:f1:
                    85:88:ff:6a:94:0d:3b:60:66:8d:da:fc:6f:28:1e:
                    de:ee:90:d2:59:14:69:8a:b9:69:35:dd:d6:a8:40:
                    62:1c:f9:8a:83:fb:8d:fd:52:25:70:7d:67:1f:f2:
                    c4:38:4f:2b:b3:17:ab:82:1c:58:fb:b7:2c:b1:a9:
                    6f:7c:da:73:93:72:94:1c:7e:b1:01:90:41:45:70:
                    b6:ad:ad:c3:6f:fd:70:ba:5b:fb:55:10:a3:b7:40:
                    d2:ac:96:2d:fa:94:bc:a7:f5:a9:b8:95:5f:c0:ce:
                    e1:41:b9:5f:1a:56:50:95:0f:4b:97:82:d5:f2:0c:
                    40:44:8c:06:a8:a0:0b:01:fa:50:61:72:ff:74:45:
                    5f:ce:c7:e2:5b:46:f0:39:6e:87:3b:b7:1a:c9:d4:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5B:01:36:AA:D0:DD:18:77:99:DE:EF:08:E1:04:3F:F7:C5:1B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d41965f6-81e6-3659-8a3f-5c6056d921d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:4b:64:4d:c7:0e:44:83:fd:b0:c1:8d:ed:02:56:70:38:
         79:43:e7:f0:34:80:60:1c:78:a3:10:1b:34:a2:4a:5c:8e:cd:
         58:ec:e8:19:29:49:2b:b4:d0:a0:63:ca:0a:f4:4f:74:31:03:
         cb:2c:bc:4b:bf:99:ba:b7:2f:16:00:d4:5d:01:c9:71:2f:ae:
         cd:04:cf:c8:16:00:33:b4:ec:c5:39:ec:0d:92:83:bf:98:f1:
         ba:58:39:0c:46:b2:72:7f:97:09:29:cb:ce:a0:3d:db:9a:65:
         31:11:95:67:21:4d:91:29:77:ac:92:b6:11:fa:62:d2:4b:29:
         cc:f7:9c:03:af:5d:f2:90:73:f9:32:e8:61:ae:c6:12:ee:02:
         ff:76:5b:ec:b6:46:30:90:54:4a:46:29:aa:32:d6:d3:d1:e5:
         4b:6f:94:c4:db:fc:15:c1:19:0f:0c:99:d1:85:59:98:e8:cd:
         1e:40:4f:c2:86:de:da:56:fc:f5:5f:69:02:41:cd:0c:3e:ca:
         1b:34:fd:e4:40:61:a1:30:3b:ed:3d:6c:3c:ca:04:f2:e9:1f:
         ab:34:41:66:dc:ea:5a:af:ef:58:a9:a2:a6:19:91:d3:03:d1:
         94:a7:33:52:c3:6b:57:33:e4:23:9c:85:bc:b4:de:d1:fc:20:
         73:c9:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:18 2026 by rpki-client