Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7abbcb09-3054-3ea1-8e96-b6e8ec4bf7f8.roa
File:                     7abbcb09-3054-3ea1-8e96-b6e8ec4bf7f8.roa (raw, json)
Hash identifier:          3Pfm5qgVVlBTlx1tM5F7+fyBJ+tLLCF7RCN2e3rEPuM=
Subject key identifier:   CC:B7:D5:9E:6D:56:F6:EC:05:AB:9C:53:59:6B:FB:1B:D1:1E:42:45
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584E3A2F2A7E526F7C5633EB7580
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7abbcb09-3054-3ea1-8e96-b6e8ec4bf7f8.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     27419
IP address blocks:        208.68.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:2a:7e:52:6f:7c:56:33:eb:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=89459515-7a38-4e19-a6ae-e2069c9e6313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:b8:ad:9d:f6:b0:15:f8:ec:bc:a5:c8:df:
                    8a:27:d7:47:23:75:90:da:9d:83:d9:c3:ab:be:33:
                    e6:cd:f7:7a:ac:6c:0d:be:aa:08:0c:72:c4:ee:15:
                    78:75:06:0f:46:fe:38:92:45:5e:12:04:c5:86:6d:
                    02:f4:f6:74:49:d2:7f:08:3b:70:35:37:15:48:9b:
                    fb:86:10:33:a0:50:a2:f9:dc:36:96:c0:4a:bf:f2:
                    54:2c:bd:e8:42:2f:ca:95:69:c9:71:5c:04:ac:e2:
                    1b:5c:21:f3:77:49:cd:8a:e5:a6:73:1d:56:74:51:
                    b5:60:99:47:ff:fb:c0:9a:91:6c:e8:4d:6d:55:26:
                    c7:57:bc:0d:bb:c7:de:f2:b4:54:b8:f9:c6:ff:60:
                    1f:cc:a7:63:1f:f2:7e:99:41:46:4f:f4:e2:35:3a:
                    13:14:55:dc:e0:53:8d:57:92:cf:9c:e0:c3:1c:f1:
                    b8:b9:97:2a:a0:c2:3c:a5:bc:55:c2:42:61:71:e9:
                    85:85:0e:5b:b7:2e:ed:68:a7:b5:c7:ac:07:e9:7c:
                    c8:fa:e1:ef:5d:47:3d:71:c0:2f:5b:ee:18:3f:98:
                    6f:89:eb:15:df:67:bd:6d:93:55:5a:9b:31:1c:c0:
                    b7:a4:ea:ee:e0:20:b3:82:33:80:ce:fa:f9:d7:45:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:D5:9E:6D:56:F6:EC:05:AB:9C:53:59:6B:FB:1B:D1:1E:42:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7abbcb09-3054-3ea1-8e96-b6e8ec4bf7f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b5:c9:fa:d8:a0:22:1e:61:49:ee:e8:32:e5:bd:a5:46:3b:
         27:e2:4a:49:d7:3e:fe:81:f9:bf:25:54:76:41:5f:58:55:27:
         b2:45:4e:ad:58:bf:19:37:52:bb:3d:a2:39:2d:3b:4b:74:d7:
         2c:61:2e:44:8e:cc:aa:0f:1e:7a:6d:c2:70:70:d3:a8:ee:01:
         ec:ad:6e:f9:07:1d:94:73:a6:24:b0:c5:99:68:2d:39:70:25:
         e3:21:e4:04:78:f2:88:c4:cb:85:30:85:91:96:46:39:f1:6d:
         41:3b:9d:1b:83:fb:13:8c:99:be:e7:6f:71:ac:0d:6a:5e:9e:
         27:8b:7c:55:f6:af:7d:97:c3:00:56:4e:77:e5:18:c8:32:62:
         fd:0a:ee:ca:f1:ad:e7:d8:87:91:34:ed:dd:5d:dc:df:b3:ba:
         3d:0b:8b:2d:c1:ab:70:36:7d:75:52:d3:ff:62:9e:6d:5f:44:
         38:0f:5b:1c:be:1b:2a:53:99:df:5b:ff:6b:42:26:11:c3:e5:
         8e:7d:47:c1:ea:4b:39:7a:42:6c:5d:9c:81:75:dc:48:cf:dc:
         34:30:0d:bc:6c:fe:f8:56:d5:ef:8f:b0:40:29:77:6e:55:51:
         00:ee:83:1c:38:48:db:58:d3:c2:94:2a:d3:3d:27:22:9d:66:
         9e:8b:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:16 2026 by rpki-client