Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
File:                     b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa (raw, json)
Hash identifier:          NqloWtY1Ss0vaYBI1yHcorQsmSwj2RUviIPHtNslPGo=
Subject key identifier:   0C:15:D5:24:13:86:BC:5C:6A:FF:5E:54:60:98:79:AE:73:ED:36:93
Certificate issuer:       /CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
Certificate serial:       010D0C9F4328584E7A64DFF05FC5C29DA6FF5374
Authority key identifier: 8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     13319
IP address blocks:        104.192.232.0/22 maxlen: 24
                          199.167.116.0/22 maxlen: 24
                          199.246.168.0/23 maxlen: 24
                          209.87.224.0/19 maxlen: 24
                          216.106.96.0/20 maxlen: 24
                          2607:f0b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:df:f0:5f:c5:c2:9d:a6:ff:53:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=c1330dff-edae-4379-84b2-f8c4d5bce22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:cd:db:6e:7c:66:27:a6:91:06:4a:b0:45:
                    da:b6:d9:da:2c:3c:2c:36:1a:90:88:97:68:f0:5e:
                    30:70:3e:ee:38:80:3c:fe:fe:5e:6d:19:70:06:9d:
                    25:b9:f3:8c:1e:31:37:44:c3:ef:e5:7e:ce:48:1d:
                    c2:66:b5:c3:60:ee:fd:ac:e4:e3:c8:dc:5c:53:85:
                    11:4d:00:fb:59:9d:55:58:4e:b0:ed:e6:81:ca:0a:
                    1e:64:1a:bb:1d:b7:87:ec:2b:f7:6d:09:e8:5d:dd:
                    68:9f:af:5b:33:b1:60:91:08:75:0b:21:9f:15:bc:
                    58:2d:1d:7c:5f:a9:06:0c:7d:7e:16:5d:dd:67:b2:
                    f1:61:7c:c7:96:b5:f2:4d:6b:c0:08:a1:bd:1e:a7:
                    ec:5e:1e:1c:5a:b7:ff:ea:62:30:91:11:33:5d:3a:
                    de:e7:e5:ab:f6:2f:a1:b5:98:17:0c:c0:e5:0d:aa:
                    78:ec:1b:5a:64:66:50:cb:b9:0b:ec:0d:76:83:bf:
                    e5:5f:86:5c:dc:00:3a:67:3a:77:29:4c:4c:b1:96:
                    f6:2c:01:7a:23:80:1d:12:07:89:b8:88:c8:d9:d3:
                    1d:3f:07:11:1c:34:e8:f4:d4:c0:61:81:55:2c:49:
                    55:3c:72:be:d3:1f:2f:8a:28:21:07:66:13:11:58:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:15:D5:24:13:86:BC:5C:6A:FF:5E:54:60:98:79:AE:73:ED:36:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl

            X509v3 Authority Key Identifier:
                keyid:8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.232.0/22
                  199.167.116.0/22
                  199.246.168.0/23
                  209.87.224.0/19
                  216.106.96.0/20
                IPv6:
                  2607:f0b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:75:51:c6:1b:e0:e4:c5:26:ce:2c:ff:69:e8:2f:4e:08:
         03:a1:d3:3a:f8:64:84:bf:e3:b4:09:01:82:96:f3:00:e1:68:
         c3:60:8b:88:cb:8b:2c:ee:8b:82:b7:8f:a7:21:50:cd:e4:69:
         e1:99:98:46:97:18:84:c8:cb:98:39:7e:b7:14:d7:1d:50:13:
         b5:53:21:cc:e5:6d:5e:54:19:07:73:24:55:b3:b9:17:22:bb:
         7d:9a:ac:39:cd:30:89:d8:70:e7:83:32:29:96:b5:36:43:73:
         40:22:c8:1c:37:45:b1:f4:e5:22:2e:8b:bd:ad:de:4c:8e:43:
         6b:4e:2e:69:ce:14:8c:3e:9e:f1:55:c7:7e:d7:e3:0d:eb:1e:
         d6:1b:75:e4:4d:0a:b5:7f:6d:d7:db:c6:91:bf:36:b1:ae:54:
         3c:47:65:94:20:5c:f5:b2:7e:b4:be:2a:fc:c7:23:2b:dd:6a:
         8c:63:d7:4d:3e:33:de:33:bc:5c:65:11:e3:a1:52:86:28:b0:
         a9:6d:0e:a4:25:72:12:40:68:2e:a2:30:56:a9:ae:fd:4d:c8:
         34:d5:55:25:79:ec:43:4f:7e:50:63:40:c9:d9:a9:ff:6a:f6:
         cf:4d:d2:89:99:38:61:72:eb:50:76:61:4e:b8:3b:26:a7:b4:
         df:1a:84:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:53:09 2026 by rpki-client