Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa
File:                     509acabd-b582-367e-a14f-c5a9330423c4.roa (raw, json)
Hash identifier:          VG97I/Ir2k8rjvRiFYyReD9DGwr662mF09SKyBNuDWs=
Subject key identifier:   C7:10:3B:2F:37:C5:23:34:53:AF:B3:00:BE:F8:DA:27:CB:9B:50:CF
Certificate issuer:       /CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a
Certificate serial:       010D0C9F4328584E2D9F19228032008D1C352C00
Authority key identifier: C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     42473
IP address blocks:        162.220.220.0/22 maxlen: 24
                          162.250.0.0/21 maxlen: 24
                          2605:380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:19:22:80:32:00:8d:1c:35:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6f0059-7ec3-4f4f-9014-0ea06316569a
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=5ac36a2d-ac67-476b-9328-716e283ed62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:a2:9e:a6:ae:a5:2e:54:be:d1:b2:98:d9:
                    0e:05:da:71:e4:f3:ba:cd:90:f2:84:02:6e:85:7a:
                    31:58:ff:fb:08:ca:3e:53:d1:29:6b:31:f2:2c:37:
                    ed:7c:9c:ef:91:60:1d:ef:26:63:f1:2e:f4:9a:d5:
                    04:a3:fd:00:38:18:2e:e4:bd:06:4e:34:15:57:3e:
                    82:0a:c0:bd:86:6a:6f:7b:a9:3a:4c:0d:a7:4a:1a:
                    f4:50:ae:71:4c:de:23:02:2c:e6:62:a3:e7:67:1e:
                    c2:87:3f:48:52:3b:2f:2d:36:72:8a:d6:73:44:02:
                    f5:fc:01:bd:60:de:ef:97:d3:6f:a2:3a:57:bc:3a:
                    64:19:a5:52:26:c5:af:eb:37:f7:59:b7:fc:41:bb:
                    5d:39:02:bb:18:d5:58:5a:9d:cf:67:be:7c:ff:b5:
                    54:9d:9f:77:f3:95:a6:bf:b8:3c:9d:34:48:cb:a9:
                    d5:7a:91:c0:c6:ea:72:dc:a7:ea:a8:02:43:88:8b:
                    3e:2d:b5:33:68:f4:49:74:c4:90:13:70:11:87:46:
                    18:c3:09:a0:ac:3f:28:d7:f0:d3:8a:bc:b9:70:1b:
                    df:75:56:ef:de:18:ca:0e:5c:dd:12:3c:b9:8f:57:
                    76:e0:9b:6b:70:ab:8a:4a:52:9f:2b:19:e4:37:19:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:10:3B:2F:37:C5:23:34:53:AF:B3:00:BE:F8:DA:27:CB:9B:50:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/509acabd-b582-367e-a14f-c5a9330423c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a/7d6f0059-7ec3-4f4f-9014-0ea06316569a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:CA:4B:C4:7D:DA:E8:CF:20:DE:7B:88:EC:D8:7B:98:18:2F:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7d6f0059-7ec3-4f4f-9014-0ea06316569a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.220.0/22
                  162.250.0.0/21
                IPv6:
                  2605:380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:b6:e1:1c:9e:e5:95:6b:ba:e9:20:50:e5:5e:25:83:22:
         ca:53:ca:80:54:00:56:dc:bb:3d:5c:db:4a:42:c3:36:45:f9:
         d9:e9:1b:21:81:89:1c:94:65:e2:13:66:96:9a:6b:ca:fe:d7:
         a9:05:71:f7:10:90:03:bb:7a:83:ae:0e:14:a4:77:be:58:9e:
         4c:41:ae:6f:9a:15:0c:0b:38:af:11:34:10:05:86:78:06:e2:
         0a:9b:80:fe:5d:03:08:64:aa:f8:5f:e4:21:a3:ae:08:97:6a:
         80:28:88:78:3c:9b:09:e7:bc:7d:87:37:57:10:bb:6a:e8:27:
         8f:0a:fb:08:a3:50:5a:f6:bb:4f:c5:fe:e8:a1:d7:ec:2b:93:
         6a:21:89:90:34:5b:b3:28:74:48:61:ac:05:01:e9:86:a0:ad:
         12:e4:66:f2:21:8f:4c:a6:43:64:92:83:13:3e:9a:38:29:76:
         ea:b3:a5:6f:c5:da:ba:af:17:a6:4c:33:94:90:c4:5c:74:88:
         61:52:49:95:1a:37:94:98:9c:85:1e:10:06:d3:99:02:fc:11:
         3b:56:f9:be:50:ca:2e:69:f3:0c:be:e2:04:12:22:da:96:09:
         6e:2b:de:0e:11:37:a4:d0:b0:81:34:28:f9:68:c5:50:a4:93:
         12:b7:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:19 2026 by rpki-client