Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa
File:                     3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa (raw, json)
Hash identifier:          9g6ae8INq5EvqGr9TZ9wsYKmOjZBmwlDFQ2qypHu+JQ=
Subject key identifier:   F7:E7:BC:CF:91:E7:D6:0F:2F:26:7E:F4:81:CC:9F:F0:5E:B7:52:9A
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584E6144BBBA902489FB8D242280
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     210
IP address blocks:        140.197.0.0/16 maxlen: 24
                          205.118.0.0/15 maxlen: 24
                          205.120.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:bb:ba:90:24:89:fb:8d:24:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=046bedb8-f992-40c9-933a-84e7a0dabb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:6c:82:0a:99:9c:01:e1:ff:33:45:91:fe:
                    10:b3:27:fd:02:6d:16:af:11:96:b1:63:10:33:54:
                    c4:60:66:fc:16:7d:c4:ae:1e:1f:05:61:5f:3c:59:
                    15:d5:52:9a:2a:3e:ac:4e:f5:65:d5:1b:fa:91:35:
                    49:fc:bc:30:e1:71:cd:c1:a2:a1:04:63:b6:0e:52:
                    7f:74:03:4a:3b:81:9a:cf:4e:96:10:ef:9b:34:6a:
                    71:e6:e0:4c:19:22:5f:70:99:50:2d:b0:f6:45:93:
                    91:c3:6c:b0:46:56:71:5e:3d:54:9f:de:5f:bf:89:
                    9f:8f:9d:52:0c:46:96:5b:c0:03:f4:f0:1a:5d:b8:
                    c4:7f:be:33:97:93:85:28:48:43:1c:8c:b7:97:95:
                    80:61:0a:4c:6d:cb:e9:e5:fa:30:da:86:60:55:df:
                    f9:8f:1d:97:92:54:33:31:8e:ea:89:d5:4c:fb:39:
                    87:37:40:2e:d0:2e:de:ef:21:34:10:61:2e:ce:b9:
                    c0:92:d3:6d:9b:80:f7:60:3a:0f:ed:95:43:26:6f:
                    15:e8:f2:bc:d1:e4:2f:d1:f9:22:2b:f6:ef:37:a6:
                    84:99:96:95:49:52:5a:0c:69:2a:e7:53:3d:51:cf:
                    aa:4a:e1:2f:b6:26:36:89:36:08:d9:0d:47:0b:45:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E7:BC:CF:91:E7:D6:0F:2F:26:7E:F4:81:CC:9F:F0:5E:B7:52:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.197.0.0/16
                  205.118.0.0-205.127.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:a6:9a:00:e6:a5:b6:72:d3:8c:1c:47:fb:74:4e:d5:4f:
         5c:de:18:83:9b:6c:78:d3:22:00:de:a9:46:ef:04:61:16:f3:
         ef:69:90:f2:f5:76:a4:1e:9a:67:0b:8c:67:08:26:af:bd:1d:
         01:ac:bf:dd:9c:8a:d7:c7:51:d5:8e:1c:94:1b:41:49:9d:ec:
         b1:1d:7c:97:f5:08:f0:4d:e0:33:a5:c9:78:41:c7:c4:7e:01:
         55:9b:ea:39:a0:c0:6e:8b:dd:8b:77:c2:fc:82:2f:ca:33:d4:
         13:9e:ed:6d:47:fe:ac:1c:8a:2f:2b:81:ed:8a:07:45:6b:15:
         a1:4d:84:1a:8f:37:be:d6:2e:4e:e9:5a:da:62:be:bd:78:46:
         f9:c1:82:75:87:48:d1:a3:34:86:dd:25:18:63:a3:eb:c1:4b:
         6e:13:ed:08:62:3f:d9:ca:25:50:1f:90:91:0d:3c:ca:f6:5d:
         08:99:ba:f2:fe:ad:d3:c7:79:62:af:7d:70:f2:e3:52:8c:1c:
         1f:07:a0:0d:30:42:59:c8:28:bb:a7:f9:42:6c:ec:f7:d0:ef:
         4b:90:1f:a2:92:9c:2d:0e:3d:ae:5b:b1:98:d7:ff:9d:f9:10:
         bd:52:72:ec:fa:2e:24:86:13:6e:77:d6:8a:2a:4a:08:20:28:
         00:16:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:55:02 2026 by rpki-client