Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/0a4a07c2-ad7c-39b3-8af6-592fb6303268.roa
File:                     0a4a07c2-ad7c-39b3-8af6-592fb6303268.roa (raw, json)
Hash identifier:          JA3XzcuLLDqulZVSEXh7Ejv6JByvNR3VGTC8+r8oWEQ=
Subject key identifier:   84:CD:F2:FF:D9:26:40:D2:D4:73:B4:59:56:A0:98:01:9B:0C:BA:CE
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584E815F928282C68D01116CE780
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/0a4a07c2-ad7c-39b3-8af6-592fb6303268.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     2675
IP address blocks:        205.194.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:92:82:82:c6:8d:01:11:6c:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=5e741254-e194-4e18-a643-5e46a9cb1fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:b0:17:58:d6:9b:32:e4:f3:e6:41:d9:06:
                    b1:48:2e:8c:de:59:a3:62:57:30:73:81:cf:91:05:
                    9e:f3:35:6d:fd:2e:7d:11:46:2b:09:9a:d8:69:36:
                    ab:2a:b9:93:b2:de:6a:49:aa:99:8d:e1:97:c2:40:
                    11:18:3b:4a:74:f6:57:49:03:22:9b:76:6e:15:f7:
                    af:0f:01:ad:77:57:be:e0:0f:a9:e7:2e:bd:a3:72:
                    e2:c0:a7:9f:2e:aa:ad:f7:c5:6a:89:1b:21:6a:ab:
                    f1:0a:5b:a6:4b:9e:77:bb:06:36:97:7b:7b:10:f1:
                    ad:24:fd:70:aa:1a:6d:cd:a9:bf:0f:69:60:e3:09:
                    be:4c:a5:00:f0:c9:58:81:2f:61:0f:ed:3b:85:f1:
                    63:11:61:65:df:e2:3f:86:82:b0:55:76:a3:99:7a:
                    f3:4a:69:ee:9d:f0:1d:c2:e3:34:9e:ed:eb:45:3a:
                    78:1c:ce:e0:b6:b0:c4:1b:08:3b:8b:6d:43:c0:ae:
                    f7:6b:07:bc:8c:6f:34:f7:86:83:e4:31:32:2b:40:
                    d4:0c:ac:52:37:d1:a8:e7:dd:27:4c:67:c4:10:8f:
                    21:ce:91:a7:2a:60:c9:22:6b:e8:31:de:7a:00:97:
                    99:40:84:73:a8:f4:56:47:9a:32:c1:e4:5f:3d:32:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:F2:FF:D9:26:40:D2:D4:73:B4:59:56:A0:98:01:9B:0C:BA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/0a4a07c2-ad7c-39b3-8af6-592fb6303268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:2f:cc:5f:07:ba:b2:31:aa:d8:c2:0d:c2:3c:c6:d2:99:42:
         16:b1:3e:2c:07:58:cf:48:23:2f:a8:60:95:2e:c0:ec:8a:7f:
         0f:fa:8f:dd:20:ae:d6:70:34:84:b4:3c:87:ce:ec:0e:3e:6e:
         88:43:c6:9d:64:64:72:c8:d7:4f:2c:92:3c:aa:f9:0f:1e:fe:
         4b:41:db:29:c2:34:91:e7:d1:a3:3b:5e:e6:1d:b6:48:76:5f:
         30:e0:f6:ab:45:dd:8c:d2:1e:53:fa:d3:b9:a0:80:da:2b:76:
         51:81:33:50:a3:61:8a:f9:a0:c4:86:f4:6d:ac:53:5b:25:a3:
         f8:eb:86:0d:c1:5d:01:f8:5d:d5:da:66:b9:c5:89:ac:75:cf:
         19:e7:88:c7:fc:6b:69:8f:1c:a1:b0:0b:35:fc:f0:f6:e8:0c:
         f0:b2:63:7f:89:70:2d:da:38:c6:18:cd:53:d6:22:06:ec:04:
         76:68:9f:99:6c:fa:28:32:58:ba:e8:3e:ce:8d:85:b7:ef:b2:
         54:70:5e:f5:10:28:fc:3a:42:7c:54:01:b8:48:1c:2d:00:bd:
         15:c0:84:61:01:0b:e5:e1:dd:76:83:13:2c:92:07:eb:1e:be:
         de:db:c2:6c:52:75:cc:00:73:bf:c1:b1:1e:41:63:88:de:e5:
         bc:a6:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:07 2026 by rpki-client