Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/981c3fd6-c5e7-32ad-9a76-5fcaec74c370.roa
File:                     981c3fd6-c5e7-32ad-9a76-5fcaec74c370.roa (raw, json)
Hash identifier:          z+rQPL4P2hAzvkbxi74hc9Zuf28JNLoiyRHkVcvtt8c=
Subject key identifier:   BA:EE:57:52:6C:CC:2B:C8:A0:49:01:21:16:92:2E:34:66:9A:99:14
Certificate issuer:       /CN=78108340-c24e-45fa-a787-5578ce17c653
Certificate serial:       010D0C9F4328584E86F50BC3F5ECDC2EFEF80480
Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/981c3fd6-c5e7-32ad-9a76-5fcaec74c370.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     397122
IP address blocks:        199.101.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0b:c3:f5:ec:dc:2e:fe:f8:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=be0d7494-abad-461a-8b89-82ff35f9d288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:56:43:15:76:16:5e:0d:eb:cd:97:08:71:
                    61:52:9a:ef:2b:4c:f0:d2:4f:f0:50:ac:19:56:4d:
                    bc:9e:c2:ef:ac:ac:21:14:46:3c:ec:56:f0:90:e7:
                    9d:a2:9b:ed:1f:90:b3:27:32:0d:39:c3:fc:4c:1a:
                    1d:6a:49:61:32:7f:04:60:40:35:8c:f6:f6:82:e6:
                    53:5a:9a:5c:13:fa:aa:08:18:8c:54:f3:2c:c2:d2:
                    e8:ff:1d:f6:0a:2d:f8:8e:70:68:d6:b5:41:55:20:
                    35:37:11:1f:2d:77:ae:7c:23:b9:ab:b4:32:04:5c:
                    ed:3a:9d:cc:ec:9c:84:85:43:90:53:6e:d3:e4:84:
                    5c:a1:3b:ea:57:e7:06:af:ce:2d:07:aa:ab:b4:4b:
                    5f:cc:24:bb:9a:fa:c0:e5:6a:d7:dc:d8:46:b0:fc:
                    1e:2d:f3:66:73:5f:c2:2d:6c:8e:af:ea:72:00:2f:
                    c6:f1:41:1a:55:ff:84:8d:8e:b0:87:85:5f:6a:0b:
                    1b:78:69:6f:94:4b:ad:24:c7:fa:90:ca:db:01:b6:
                    d4:2a:17:a6:97:4c:69:57:e2:80:b5:92:bb:72:f8:
                    e9:71:4b:45:4f:d1:7f:a0:e8:c5:e2:f7:7e:c7:97:
                    e4:a7:9b:eb:06:5c:d4:71:32:0e:25:b6:c9:6d:45:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EE:57:52:6C:CC:2B:C8:A0:49:01:21:16:92:2E:34:66:9A:99:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/981c3fd6-c5e7-32ad-9a76-5fcaec74c370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl

            X509v3 Authority Key Identifier:
                keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:3e:5a:28:30:98:4d:6d:a0:61:2a:29:de:f5:4e:3f:c8:
         b4:ad:91:e4:7b:c3:e9:9a:bd:17:2f:b0:f8:e8:05:eb:c9:27:
         62:d6:a4:95:22:96:89:84:ee:56:d7:0a:bb:72:8b:04:25:3b:
         53:39:4e:4d:c4:ba:68:29:8e:0a:c2:e2:07:7e:49:8a:ef:e1:
         ca:21:88:a5:ad:f4:47:0e:6c:38:c5:45:5b:b6:f4:5f:e3:31:
         4d:42:69:ea:5b:3b:ea:3b:74:bc:cd:77:56:07:07:7b:38:d9:
         18:0b:27:80:61:2e:d4:ce:6f:78:74:42:45:c4:da:17:86:bc:
         a6:08:24:af:7e:ee:1b:c3:36:c3:00:a8:f0:88:ce:b8:d9:29:
         ce:d7:44:99:7c:4c:b0:f2:84:13:45:c2:28:84:b5:1f:5c:67:
         88:de:63:d2:fb:b4:c7:88:60:f9:61:23:96:08:b6:3f:f4:8d:
         68:2f:7e:30:69:0d:e4:c6:d1:ce:74:cd:0e:06:85:cc:b6:0f:
         30:a2:62:66:e3:51:bd:d4:9f:80:bb:f6:e4:9a:6e:5a:d9:dc:
         f5:56:c5:a5:b8:19:f8:d1:ea:05:cc:0e:99:59:26:e7:9a:59:
         f7:7f:0e:0b:6c:43:bd:35:48:5f:fb:4e:70:2d:00:7c:a6:78:
         c9:e2:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:12:07 2026 by rpki-client