Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa
File:                     d1691aa9-20b3-37f9-9963-81c845f7e50d.roa (raw, json)
Hash identifier:          h2heWtK7TEhUV7qWCzByWl9f3ir3cCioIXq/m7+FfdI=
Subject key identifier:   7F:BF:BE:D5:4E:DA:86:CF:C8:9D:48:27:68:06:84:41:3B:FF:79:61
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584E5FDF5CDD62385019F60EFA40
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     3300
IP address blocks:        198.207.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5c:dd:62:38:50:19:f6:0e:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=036649bb-8e6a-41f5-a564-5ffed36d6bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:17:ee:69:78:99:68:1a:53:d6:f7:af:a3:
                    57:70:55:69:fd:a9:0a:c1:1f:63:89:7d:97:bc:cf:
                    ff:91:d8:53:23:0d:83:19:89:e2:07:c9:17:c8:df:
                    bd:1b:64:67:b3:35:f3:3d:f1:1d:82:8d:a9:f4:55:
                    cb:06:13:d9:af:54:77:6d:56:51:b0:64:ed:c9:93:
                    ef:eb:85:ac:0e:c2:39:ca:1d:3b:34:22:4e:80:f2:
                    fc:67:5f:10:46:b7:8e:cc:a0:97:ba:35:50:7b:28:
                    d3:e4:56:b0:02:3f:ff:59:3f:60:20:eb:e0:90:00:
                    dc:b1:73:f7:94:3f:d8:fe:14:e1:db:a8:ae:bb:7e:
                    ec:07:b1:7b:f6:c8:c2:09:aa:e1:ba:93:de:44:e8:
                    ed:83:de:e3:52:56:f1:c0:6c:fe:90:b2:b4:54:dd:
                    9a:47:9f:4f:e0:3c:f0:87:7c:21:f5:4f:18:7a:61:
                    ec:5b:01:3a:a7:b6:ec:31:c2:f5:5a:c5:5e:44:38:
                    df:dc:35:2e:20:c5:4e:f6:a2:64:90:6a:3d:89:c2:
                    2f:71:d6:7a:af:6a:a3:d7:0c:f4:70:17:79:b5:2e:
                    a0:7c:93:02:f6:2a:96:e2:e0:2c:1a:2b:89:bc:38:
                    7f:eb:8d:c5:49:96:92:49:0c:43:e1:ef:07:1e:e6:
                    d1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BF:BE:D5:4E:DA:86:CF:C8:9D:48:27:68:06:84:41:3B:FF:79:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:3e:bf:55:51:9f:8d:4c:be:8a:85:0e:49:ec:fa:d1:37:
         79:ab:a6:fe:e8:8b:fd:19:ee:21:e4:e8:e3:df:db:ac:cc:10:
         e6:66:38:13:4c:91:02:b4:9f:0b:97:23:5e:3f:47:19:0b:e7:
         b1:ab:72:9c:4c:19:15:db:00:e4:47:71:c9:2f:40:25:bc:58:
         d5:80:82:f6:05:91:82:8a:af:e5:42:19:9f:09:2b:85:2d:ac:
         64:0d:ee:e5:1f:5b:53:e9:c8:3d:43:3e:10:ac:37:6b:88:f5:
         6b:7d:74:9e:97:69:45:54:15:0a:8e:1f:d6:d0:d4:d7:b4:3f:
         fb:32:cf:2e:4a:36:b4:9e:a2:25:33:2a:d5:f3:55:59:d5:df:
         68:f4:8f:08:57:db:26:18:c2:47:f4:6d:7f:c0:3c:83:cd:54:
         c5:ea:33:18:c0:6b:ba:63:d2:26:bf:5e:e2:46:de:43:73:d0:
         9a:74:7c:17:d0:09:96:d1:ef:37:b8:c8:59:a2:c8:61:61:c9:
         80:0d:74:46:f5:1b:2d:d5:f4:a4:6b:39:43:38:53:e1:61:3d:
         b1:84:27:b2:39:bc:a9:ea:ce:5d:22:c9:c3:04:88:a8:ec:b7:
         66:6a:ba:21:15:a7:53:30:34:8f:39:83:a4:d5:60:af:62:1d:
         a2:88:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:40 2026 by rpki-client