Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa
File:                     fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa (raw, json)
Hash identifier:          9T4jCNgYDje14jiDEXkopVdj06NG60C7sweM5P6q/p0=
Subject key identifier:   14:2D:62:90:D5:2D:00:45:04:5D:6E:99:0C:09:DD:DB:54:ED:44:EC
Certificate issuer:       /CN=58520fc1-e07b-4b1b-ad59-5756198c9756
Certificate serial:       010D0C9F4328584DC40046E407105C6C0C48FB80
Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        199.181.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:46:e4:07:10:5c:6c:0c:48:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=2b1e1f12-d9cb-4488-9e8d-f1651edb7dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:fe:6b:d7:8d:09:fb:b7:4e:b5:c7:f2:18:
                    05:04:33:f2:88:07:a8:b3:d9:1b:7c:b6:7f:76:c1:
                    17:2f:f5:42:db:e8:45:bc:ae:40:34:14:47:62:31:
                    6f:0c:13:db:76:19:05:68:94:7d:c1:ec:f1:52:e7:
                    28:49:45:07:c1:5f:99:49:64:41:4f:68:21:3c:da:
                    36:c1:c3:f7:90:2d:6c:83:4d:3a:ab:a6:49:e4:33:
                    cf:6c:6b:d5:8b:cf:5c:a6:36:3e:ba:36:d3:24:0c:
                    b2:ff:f4:1c:0e:34:49:73:15:d7:d7:d7:4c:2e:32:
                    17:ab:7e:11:6e:7f:da:91:4f:62:80:1e:f7:76:d5:
                    a8:33:47:78:c5:bf:03:df:4b:e1:92:47:df:80:c8:
                    40:c7:08:21:a4:45:90:99:2c:0e:c3:70:b3:ed:5d:
                    9b:c8:30:32:10:70:6f:61:47:6a:30:bf:39:86:94:
                    b3:a7:08:0c:c8:d7:34:48:72:ef:3e:ad:c3:66:04:
                    03:b2:3c:6f:a8:29:5c:11:6b:c5:cc:a7:fd:7c:6e:
                    57:11:13:60:35:1a:c5:a2:c0:8b:f2:72:54:3f:7d:
                    de:fb:ee:4c:e2:cb:3f:cf:c5:4f:9b:7e:c5:c1:ed:
                    af:0e:b6:f1:fc:28:f0:26:73:98:74:55:d9:7f:f5:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:62:90:D5:2D:00:45:04:5D:6E:99:0C:09:DD:DB:54:ED:44:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fda2a0fa-4ed7-32db-8a17-6fdf8a6c74d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:23:ac:75:4e:7a:86:30:dd:1e:c9:8f:2a:7c:db:99:88:
         d9:b6:83:43:ed:8b:e8:3e:9b:ce:49:a4:d1:71:5d:dc:43:cb:
         cf:ef:e5:89:42:52:dd:92:04:7d:f0:f0:8a:66:31:0a:e6:e0:
         38:91:e9:8b:d3:7b:d6:a8:a8:b5:6e:0e:f9:93:ec:62:68:90:
         41:10:91:c8:ad:e5:16:f8:90:67:f6:16:22:3d:20:2d:31:1b:
         14:a6:da:42:6f:97:93:df:84:32:00:ed:17:89:99:fb:2c:df:
         84:fd:20:5c:ad:2b:97:6f:bf:b6:de:1c:72:3c:52:8f:83:da:
         90:1f:3d:a4:a3:40:e6:30:6d:79:1d:49:8f:87:76:bf:c5:5a:
         46:1b:e1:90:4b:16:82:5f:c1:3f:30:e1:4b:a3:c5:34:db:c6:
         52:6f:55:b4:dd:36:ee:63:90:f8:6b:fd:d6:db:0e:b6:87:3e:
         ad:fd:62:10:c7:f8:79:a1:39:51:3b:7c:be:16:17:07:96:5a:
         64:a7:33:4a:23:cb:84:da:02:5a:39:78:6b:64:e7:52:7f:2d:
         6a:ac:4c:73:0e:eb:50:19:74:6d:51:6a:9e:b8:7f:6b:80:07:
         60:f3:42:fd:0e:6e:cd:e2:9f:22:e6:8f:ac:6d:18:25:1b:86:
         9d:26:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:24 2026 by rpki-client