Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa
File:                     07af84c8-ee29-3120-8019-a82a12b3b51b.roa (raw, json)
Hash identifier:          JDLDTOIKVxdbvIz5qO0dCmXhKEpOnSRYRPR9JYg2Nts=
Subject key identifier:   4F:B6:DF:06:C8:B0:23:03:AF:AE:6E:67:10:EF:70:E9:5A:8A:B1:45
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584E3E5F577E94338F6DD9682D00
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16527
IP address blocks:        162.245.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:57:7e:94:33:8f:6d:d9:68:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=524a0337-9ee6-40aa-8b91-ae599bde523d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:b2:38:16:a0:38:06:eb:9b:17:cf:a4:3e:
                    b4:b3:d9:1a:4d:13:68:d8:13:9c:64:6e:a5:38:59:
                    50:34:d5:18:92:99:89:55:77:98:05:b5:52:ca:5e:
                    ec:c6:e3:1e:6a:10:c3:b0:88:ec:f1:89:6c:f7:3a:
                    58:88:08:d9:07:a3:6a:bc:1a:a1:8e:ef:61:d5:ab:
                    2f:a4:e9:f9:f7:98:35:04:94:fe:04:4c:2f:7a:2c:
                    f6:b0:5a:77:2d:7b:22:83:4d:3d:37:f8:61:e0:4b:
                    fd:fb:7d:f8:b3:56:3e:be:d4:ef:63:72:bd:e5:06:
                    2b:2c:b8:0d:3b:67:e6:bd:3f:8f:dd:75:19:52:55:
                    f0:ef:e5:ad:81:a5:9a:9d:c9:e1:1a:c9:42:22:53:
                    54:41:d0:c0:94:a5:19:6f:c0:70:8c:2b:ce:16:bd:
                    3b:e3:cf:09:01:14:78:db:1e:43:bf:59:38:49:cf:
                    58:78:d6:3e:aa:fd:22:8f:3e:f0:50:4e:50:1e:d9:
                    79:de:ac:38:e6:18:c8:e2:ab:43:5a:21:c2:a0:5c:
                    88:38:bd:ee:94:fa:6b:10:11:f9:77:11:00:48:50:
                    a6:0f:96:13:15:2e:8f:7b:45:0f:cc:46:1e:7c:a7:
                    0b:60:68:b1:f7:07:2f:2b:64:65:f4:fa:71:43:bd:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B6:DF:06:C8:B0:23:03:AF:AE:6E:67:10:EF:70:E9:5A:8A:B1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:27:ce:b2:73:28:c6:81:06:c5:9b:ec:0b:48:b2:0a:7a:
         0e:e7:cf:bc:29:8b:f9:95:e6:33:aa:90:47:9b:a8:70:6f:c1:
         52:fb:d5:3d:79:a0:5b:2e:8d:ee:fd:77:5f:d1:a5:56:f9:9d:
         66:80:48:66:83:6a:6b:cd:ec:cf:a9:d3:d7:67:a9:c0:c9:19:
         e2:e5:d3:28:0d:ef:ef:a6:a1:19:a3:66:cb:1b:49:0e:bb:3a:
         97:c7:0f:32:55:91:0f:0a:63:97:5d:8d:57:4b:1f:ea:ab:bc:
         00:ed:58:53:22:76:51:e7:c5:80:a6:5c:d1:b7:26:fa:e3:74:
         47:4b:75:7b:95:e4:af:ee:51:e0:00:dd:be:c4:e5:cd:7c:97:
         09:4d:08:78:4d:09:74:61:c7:70:f3:66:d9:3b:85:0b:17:54:
         ed:ff:1e:83:28:0e:fd:b8:b6:e8:a7:f4:be:53:bc:1a:f1:78:
         10:a0:0a:d9:8c:f6:57:65:cb:1a:d4:13:81:f2:3c:3e:1c:98:
         93:d2:c9:a9:6e:45:62:7f:da:8a:7e:c0:d9:f5:2d:9e:51:19:
         42:b3:43:43:ba:b4:19:e4:e7:76:08:07:af:6d:ba:ed:4a:04:
         3c:dd:69:19:85:24:09:cb:c0:32:fe:5c:10:18:e1:b4:ea:75:
         32:1f:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:07 2026 by rpki-client