Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/0acfb833-6d30-38c0-b3af-851490ddaef6.roa
File:                     0acfb833-6d30-38c0-b3af-851490ddaef6.roa (raw, json)
Hash identifier:          yN8M/CKFR1+3Fiohjp70s4TocDWKL5O3lM5WOXC/CdI=
Subject key identifier:   55:75:11:6E:69:2B:FB:2E:4E:2C:25:C0:58:40:D2:44:55:24:0A:CD
Certificate issuer:       /CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1
Certificate serial:       010D0C9F4328584E97B50E0B85E6C8F9EDCEE880
Authority key identifier: 59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/0acfb833-6d30-38c0-b3af-851490ddaef6.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     36365
IP address blocks:        199.36.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0e:0b:85:e6:c8:f9:ed:ce:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=0e001a09-9d92-4fb8-89dd-bd9e41040972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:e4:24:f6:bc:6c:e1:fd:ad:ab:6f:4a:2e:
                    a6:4b:ac:f4:e4:15:e8:7f:67:a3:50:78:32:e7:82:
                    e2:c1:38:31:bd:3f:1c:43:2e:0f:98:82:4c:f4:d6:
                    86:9b:71:4e:ea:24:31:e3:cc:fd:a0:88:38:2e:8b:
                    7e:a8:2a:6c:ce:69:0d:5d:83:b1:4d:6e:fc:66:14:
                    9c:4d:df:3b:82:a5:91:32:87:2b:5a:56:4f:01:48:
                    d9:eb:50:17:27:86:51:ed:43:d9:86:5e:18:ba:1e:
                    26:2b:5a:4c:e0:de:e1:d3:f4:aa:3e:ac:5f:36:ec:
                    29:1d:39:e0:51:9b:25:14:cb:13:77:af:85:ae:ec:
                    2b:a6:28:cf:77:34:98:69:10:8d:11:26:52:44:c4:
                    59:32:0b:30:f0:f7:79:d2:98:00:85:2a:58:af:a9:
                    56:2f:dc:9a:f6:2d:f6:20:30:99:7b:96:cf:9b:01:
                    9a:14:33:af:cb:18:3c:75:e5:57:01:82:b6:56:dd:
                    f8:23:84:09:9e:5e:fa:3a:ab:23:e2:9e:68:9e:92:
                    da:ef:c9:78:78:b5:e5:21:27:3f:cb:8a:96:ee:a0:
                    23:8e:3c:ec:26:b9:68:9c:9f:29:fe:88:a8:65:2b:
                    b7:3b:83:ca:02:b5:58:37:da:52:44:e0:5b:28:27:
                    a8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:75:11:6E:69:2B:FB:2E:4E:2C:25:C0:58:40:D2:44:55:24:0A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/0acfb833-6d30-38c0-b3af-851490ddaef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl

            X509v3 Authority Key Identifier:
                keyid:59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:59:7d:cc:61:7f:af:c7:ba:45:51:86:66:00:5f:a9:80:b6:
         c0:b8:01:d2:c6:a5:1f:5a:6c:af:ed:88:75:c5:df:6f:b4:bf:
         d0:44:bf:98:24:a4:b2:08:32:10:8c:04:7a:35:3f:6c:0d:51:
         1b:d7:41:0f:2c:c1:36:30:b1:ee:50:c5:0f:cf:01:f5:79:c5:
         0f:26:7c:85:76:43:47:6c:d4:31:47:3e:0b:64:40:64:29:25:
         81:a4:13:2b:d5:ed:07:0c:47:1d:f0:62:49:74:2c:b0:69:af:
         ca:29:36:03:26:eb:c0:0f:eb:46:3d:06:02:ec:c3:40:d2:3a:
         52:20:73:3e:be:a4:2d:e1:0e:1e:c5:76:98:25:21:71:7a:f0:
         f7:ad:d8:04:8b:0f:76:af:55:a9:24:9d:a7:c4:33:ad:92:0b:
         69:45:9c:f4:ef:cd:23:6f:33:96:0a:ee:c6:cd:27:db:e0:d3:
         e9:7c:be:30:c0:33:ba:50:02:35:82:50:09:f0:b0:4e:93:86:
         1a:1b:61:26:df:66:d1:13:01:89:30:e5:2e:a8:84:c7:c8:fe:
         7d:bf:3c:2e:0c:41:f8:76:94:b1:17:f8:b7:bb:d8:2a:2d:91:
         30:97:28:71:30:8d:85:0b:bd:cb:d7:21:5a:c3:ca:e5:82:f4:
         84:ad:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:52 2026 by rpki-client