Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa
File:                     6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa (raw, json)
Hash identifier:          DHfq4oc9vsYg1Sh0IVgfQiyA0bVtHSaHvjrjM2NeS70=
Subject key identifier:   58:97:B3:5C:84:42:A5:4A:E6:3E:71:C0:86:60:62:5F:4F:42:15:D1
Certificate issuer:       /CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
Certificate serial:       010D0C9F4328584E86F4E8712EF1639A5C987680
Authority key identifier: 05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     401306
IP address blocks:        199.244.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e8:71:2e:f1:63:9a:5c:98:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b07ca14-14aa-4b56-b9ce-46c9768a8f93
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=f1dbaf86-4faf-484e-bd50-d1f2c3600609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:ef:51:67:8d:da:09:b1:5f:44:4a:db:f6:
                    51:2d:14:c3:e3:80:75:4c:6a:3d:2f:c0:94:5d:27:
                    34:da:6c:55:a2:d1:c5:f5:c9:29:be:23:1b:f3:ec:
                    0c:f4:d0:a8:3a:87:de:03:78:6c:eb:d6:22:45:63:
                    f2:ba:d1:e3:2b:e2:ac:97:6b:05:44:0a:d9:7e:ee:
                    8a:4b:8f:51:6f:c1:54:1f:34:2b:a7:c7:65:19:1b:
                    99:3b:96:44:1f:8e:89:82:f2:24:74:24:e8:94:ec:
                    3b:de:95:5e:7f:5a:f2:6a:6d:b8:46:b6:3e:0c:c7:
                    82:d8:1a:e2:60:21:c6:86:8e:02:13:13:1e:10:3d:
                    58:59:ff:40:29:f2:71:88:7e:39:a8:43:b9:d5:1f:
                    91:3b:18:12:38:27:08:d4:af:d1:8a:cb:17:90:7d:
                    fc:02:c2:c3:3b:e4:b7:eb:de:72:fc:bd:b8:2a:48:
                    b0:30:ff:dd:f9:f6:24:11:d0:a4:69:2c:8e:6e:5e:
                    2d:ab:92:95:24:96:36:77:86:d2:0b:7e:8e:b3:64:
                    d9:c4:b1:ba:a5:0e:bb:1a:00:a3:be:b4:3f:bf:f2:
                    36:0d:74:2b:bc:ba:c3:da:76:08:70:d0:36:b4:ae:
                    73:e4:f0:7d:9e:ff:d0:b7:9b:c2:e2:9c:db:be:9b:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:B3:5C:84:42:A5:4A:E6:3E:71:C0:86:60:62:5F:4F:42:15:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6fdbe143-5cda-306a-8e46-26b4ec1a4f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.crl

            X509v3 Authority Key Identifier:
                keyid:05:DB:A8:45:3C:01:3F:61:68:0D:6E:53:31:03:A9:80:95:7E:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b07ca14-14aa-4b56-b9ce-46c9768a8f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:17:12:44:24:eb:1b:87:e7:7a:1f:5e:09:66:29:0f:ea:
         8f:18:a2:e6:fc:93:c0:95:d7:48:de:13:b0:c6:b3:3e:95:83:
         4e:af:13:c6:a1:ce:25:c8:af:25:24:ac:43:d6:2b:71:e9:b3:
         ab:ec:dd:38:3f:28:36:62:45:fd:31:c3:63:46:29:9a:39:a1:
         d1:a8:af:b0:03:77:56:af:71:dc:a2:a7:1d:af:cd:f3:aa:c4:
         09:ab:93:94:51:ef:e6:bd:f7:cc:24:b8:99:e9:ca:21:78:c2:
         85:a7:e0:a4:2e:88:b5:da:90:95:e6:ca:e0:29:24:6b:75:b2:
         56:98:b7:2b:c5:ca:4c:75:f2:ef:f1:f0:fe:07:36:b2:ff:3d:
         30:63:d0:f7:0a:96:8b:2c:9f:bb:7a:30:7f:49:d9:5f:3e:7e:
         1a:cd:00:75:1d:a6:9e:d1:e0:70:78:80:78:9d:9e:53:77:36:
         df:05:3f:34:81:4f:1e:f1:2a:ae:4b:18:50:27:21:0a:72:55:
         b3:f8:b3:68:88:65:71:6b:eb:2b:84:5b:ca:7c:62:0d:5a:02:
         db:6b:e6:9d:7a:f8:3b:68:8b:83:41:40:0d:5e:c6:f9:3f:cd:
         e8:da:21:78:7a:8e:11:9f:10:6d:68:a7:11:01:00:d4:98:b7:
         e8:a5:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:05 2026 by rpki-client