Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
File:                     dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa (raw, json)
Hash identifier:          93NTpjXNHZa8CBqe3lNBttVn34PqpFlol/kj5/0s2kg=
Subject key identifier:   A5:EB:74:F4:38:78:9F:44:51:A0:47:50:4C:BC:2D:AA:B8:AC:DD:83
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F4328584E4C548814E95DFE39823E2D80
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     11904
IP address blocks:        198.167.240.0/21 maxlen: 21
                          198.167.240.0/22 maxlen: 22
                          198.167.240.0/23 maxlen: 23
                          198.167.242.0/23 maxlen: 23
                          198.167.244.0/22 maxlen: 22
                          198.167.244.0/23 maxlen: 23
                          198.167.245.0/24 maxlen: 24
                          198.167.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:88:14:e9:5d:fe:39:82:3e:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=41d07605-c004-4f57-8f87-920fb08ab0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:da:d8:99:b9:d7:e4:f6:76:2b:fc:58:39:
                    d3:ea:87:07:d4:28:e9:17:bd:f9:6f:43:b6:8a:d9:
                    f3:98:a6:b5:38:cd:df:c1:60:9b:25:b6:77:91:f9:
                    93:41:76:cd:f1:7f:06:57:ab:db:ed:ff:8e:4e:bd:
                    f6:8b:26:56:67:93:0b:4e:01:21:2e:6d:03:70:83:
                    9b:22:64:31:11:43:94:00:e5:00:33:f5:14:71:09:
                    57:b8:ca:eb:44:74:ee:7f:42:e8:be:f5:00:42:fd:
                    97:8c:0b:17:e3:f2:83:62:28:b2:cf:84:dc:2b:12:
                    9a:63:71:05:e7:16:3f:73:e7:47:5a:c2:7e:fc:c0:
                    88:fe:77:db:d4:06:c0:ff:ad:7f:65:48:b8:b8:61:
                    94:95:5c:dc:f1:b0:eb:24:eb:5f:71:bd:31:96:1e:
                    5b:74:11:66:f8:f5:41:18:42:3d:b6:61:4d:5e:54:
                    19:a3:7a:cf:a6:8b:fc:02:40:e3:24:6b:f9:6d:14:
                    b3:44:b1:e8:77:8b:1a:4d:48:55:e7:bf:50:19:99:
                    32:08:cb:58:b5:fc:41:bd:d0:13:52:21:f1:f5:7f:
                    c4:7c:e0:42:c9:3e:7e:2b:6a:47:60:13:12:8d:94:
                    52:d8:4e:7b:97:9e:95:33:b0:d5:8a:1a:c2:a7:17:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EB:74:F4:38:78:9F:44:51:A0:47:50:4C:BC:2D:AA:B8:AC:DD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:be:aa:87:a8:fe:91:41:6d:e1:de:3c:29:aa:22:d1:2f:
         93:95:bd:34:1e:c4:9c:8e:bc:e5:0e:6f:db:e0:f3:84:90:d7:
         3d:57:71:15:40:7f:e4:73:cb:d8:f1:a6:44:ea:e7:6e:ba:6a:
         15:e0:fc:87:2e:e7:76:9d:0e:a6:42:cd:5d:e3:81:89:85:8f:
         b8:5a:34:17:6e:90:42:2a:3a:89:3f:da:22:5e:21:53:c4:66:
         3b:61:84:25:94:59:59:ac:3e:0d:e8:da:95:23:25:1d:6c:1d:
         e4:42:ee:69:a8:8b:6a:be:23:90:e6:76:7a:1b:61:a9:ea:43:
         35:81:e1:b0:44:95:30:29:f6:ce:85:0f:b0:09:d4:2e:7d:ce:
         05:8d:f2:ed:3c:f6:0c:c4:7a:21:82:35:69:a3:1f:09:f8:90:
         bf:69:d0:a7:51:57:b6:bd:79:9e:de:9b:8d:ec:d6:92:42:38:
         ac:f1:75:0d:cd:e1:aa:9e:93:c4:c0:ac:fa:02:51:bb:dd:17:
         77:a2:7e:8e:43:f8:d7:5e:f8:7b:50:ce:aa:00:35:dd:2d:20:
         cb:47:6e:ee:80:f3:85:b6:ea:bc:4d:dc:47:12:a2:98:c8:d9:
         08:d9:10:fd:45:1f:2f:d2:ff:83:bc:a6:3b:67:a4:9f:c0:4d:
         ea:67:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:04 2026 by rpki-client