Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa
File:                     bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa (raw, json)
Hash identifier:          7Xlap6ERe8QjcBT8JIF0HGLvbSi8fJoTqJTzxDRzHcA=
Subject key identifier:   28:D6:98:68:BC:6B:D7:12:D5:2D:68:96:D3:C5:2F:D1:27:96:D3:80
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E7BCA288A75FF20733D4C8100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     0
IP address blocks:        204.182.160.0/20 maxlen: 20
                          205.162.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:28:8a:75:ff:20:73:3d:4c:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=9b2e7a8d-ebbb-4a0b-92e4-412b46e43f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:78:97:6c:1b:71:49:ea:db:93:fa:fc:79:
                    e2:58:e9:d9:72:f8:a4:95:86:3a:07:63:0c:6b:5b:
                    c1:8a:11:72:7c:e4:ae:1b:3e:99:10:ad:42:51:1e:
                    3a:14:17:08:15:29:07:22:19:db:02:94:ee:b3:4f:
                    70:25:5a:39:9d:f6:13:e1:ca:79:64:e0:a9:22:b1:
                    0f:66:80:0b:4f:45:0f:9b:00:cb:ad:34:00:0a:6d:
                    9d:ac:58:fa:a0:55:f8:91:15:c8:2e:ab:24:65:e7:
                    8e:89:05:d4:4a:a2:23:2f:8b:0f:81:ed:f1:ac:81:
                    0e:5d:e2:25:00:a9:ef:08:12:18:8c:c2:4a:2b:0a:
                    6d:09:41:20:a5:f8:7a:76:91:47:f5:82:9d:02:e1:
                    4d:9e:87:e5:58:fe:85:40:6b:f8:9c:4a:a6:32:5c:
                    8b:a2:82:10:d8:1d:7e:77:e9:85:07:fa:60:99:b4:
                    67:1f:5c:bc:d9:66:ec:47:9a:ec:1c:07:e1:8d:0e:
                    8e:5c:6c:4b:ba:9e:3e:04:90:13:18:b4:14:a6:93:
                    10:3e:b3:7e:ce:f6:b8:74:d3:65:5d:3c:fe:bf:11:
                    97:2d:f6:2b:d7:39:fa:d3:7a:c4:41:8d:7b:fd:60:
                    f0:30:44:2c:a5:9c:9d:a3:88:5a:11:dd:c2:96:8d:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D6:98:68:BC:6B:D7:12:D5:2D:68:96:D3:C5:2F:D1:27:96:D3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.182.160.0/20
                  205.162.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:79:aa:80:b6:82:8e:35:d2:6d:7c:1f:62:80:23:35:09:f4:
         47:8a:3d:e3:fb:e0:29:4e:c6:3b:2a:03:bb:46:80:d0:6e:f2:
         a9:1f:1c:bd:af:63:d6:08:21:18:73:23:b7:95:47:f2:ae:71:
         69:d6:a4:e9:63:8b:a7:d6:72:0f:13:c8:5d:5d:60:96:58:08:
         d5:e1:f9:e0:34:6a:9b:7a:2a:d1:85:3d:47:ed:1d:1a:7b:a2:
         d3:fe:58:8b:3f:ef:4a:90:d6:1c:d2:2e:22:5c:67:3b:f5:ec:
         22:e3:4b:ad:97:2b:55:9b:d0:e5:7b:e9:09:3f:6a:d6:1f:4f:
         fa:71:c7:ab:50:d6:de:ea:41:62:2f:d3:b4:9b:15:0a:55:93:
         39:9a:b1:a0:28:24:f6:a6:0a:53:72:0a:91:ee:f1:f9:9d:82:
         5a:fb:30:53:d9:bd:dd:53:6a:15:e4:9b:3d:78:94:14:df:1e:
         bf:84:2b:d4:78:29:c8:a6:cd:4f:93:1f:de:b8:26:c2:81:58:
         37:0a:80:ba:ef:ad:e7:14:44:98:d8:2c:5e:db:78:6c:36:9e:
         23:d5:1d:7e:83:1d:90:78:c1:24:0f:28:aa:c3:2b:2a:08:c0:
         b4:01:58:8a:99:16:9c:54:28:d0:f2:8f:f0:93:01:6f:81:52:
         c4:f8:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:42 2026 by rpki-client