Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
File:                     817df46c-74b9-3aae-93ab-75637ef18bee.roa (raw, json)
Hash identifier:          /6ZDL7jzagX08Qf20jVM28xCgy4VIX2vSO1wpKhp7s0=
Subject key identifier:   F1:F5:8B:29:D8:C5:75:0E:E6:68:EB:D1:DC:85:69:C7:FB:5E:1B:AC
Certificate issuer:       /CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Certificate serial:       010D0C9F4328584DC5659D2E328BDFE6911241C8
Authority key identifier: 02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     11068
IP address blocks:        192.200.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9d:2e:32:8b:df:e6:91:12:41:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=e1f6aa43-7a67-4095-99dc-5427a31036fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:04:20:60:2b:ab:83:17:94:25:6d:eb:30:89:
                    d4:62:8b:4c:ff:e2:ea:f0:82:ed:8b:3a:bd:72:6c:
                    40:8f:8d:84:4d:f4:e5:06:30:e5:9e:16:07:52:39:
                    57:f7:43:d6:a0:b4:99:e6:f1:7d:4b:f6:69:b4:0c:
                    f5:5a:0e:00:31:f5:92:f9:d7:0e:99:db:aa:97:26:
                    a6:28:4c:27:52:14:5c:48:1a:6e:29:89:32:f8:5b:
                    72:98:dd:29:d1:43:7a:2e:0c:a8:c5:af:9e:58:52:
                    41:08:5f:5d:02:5c:2a:b2:d1:5b:05:83:d8:5e:46:
                    ba:a3:48:4e:93:a4:ab:04:5f:7c:05:b7:fd:d6:fe:
                    0a:9c:7c:c9:81:e0:31:32:28:a6:98:32:a7:88:8b:
                    2c:5f:55:b7:06:fd:05:aa:13:95:f4:c1:b0:fb:6f:
                    ae:fe:76:ea:99:de:ec:4f:00:aa:65:72:33:0c:dd:
                    f2:12:02:1e:78:8f:3c:d9:16:ff:32:48:fd:e1:4a:
                    8e:de:9a:be:f6:1e:39:51:bb:d1:e7:94:e2:9f:d7:
                    67:64:c1:55:18:ce:3b:20:7d:b8:3a:b4:00:14:fb:
                    76:aa:80:14:8c:dc:48:bb:4f:54:af:12:5f:67:39:
                    86:0e:8d:67:93:72:87:c8:34:ba:71:01:d5:85:35:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:8B:29:D8:C5:75:0E:E6:68:EB:D1:DC:85:69:C7:FB:5E:1B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl

            X509v3 Authority Key Identifier:
                keyid:02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:95:c5:a9:8f:9d:7f:29:11:42:d7:a3:28:fe:54:f0:49:
         75:ff:c4:f5:3b:cc:b0:da:b1:d0:42:a9:e8:9f:13:12:11:f3:
         f9:29:16:eb:36:05:aa:fd:f7:84:58:a7:53:af:d2:03:78:5c:
         9d:45:c3:f6:e4:88:f1:0b:52:be:c3:db:6e:54:f8:ec:bf:78:
         5e:80:9f:c5:ac:59:6a:20:82:c4:87:8e:1e:ca:44:bf:7b:0a:
         8d:04:20:43:7c:e4:a7:4e:34:a0:89:82:15:63:eb:f9:44:a8:
         a3:e8:56:c9:3c:1c:af:fb:52:5e:ac:e0:f6:f6:49:a2:ec:df:
         22:4c:6d:92:11:08:36:06:6f:73:35:bf:4b:56:c3:20:7c:c4:
         b7:76:64:b4:3a:61:a9:05:13:4b:05:c9:3f:78:8c:de:dd:fe:
         1f:75:8b:31:5a:a1:87:ab:ae:4d:d6:ca:6c:13:3b:7f:53:84:
         83:fc:c6:92:7e:c0:08:33:a1:4f:96:11:48:0a:01:35:6f:fa:
         cc:c0:91:1d:28:c6:56:ad:47:77:6b:e7:a0:f8:dc:0b:69:a8:
         b5:a8:0f:42:2c:e1:cc:0a:6f:c4:a7:cc:fd:06:2a:2e:e0:e9:
         51:05:06:18:01:3d:9a:dd:bb:d5:45:4b:8e:9d:ff:0e:40:1e:
         9b:5f:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:36 2026 by rpki-client