Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa
File:                     78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa (raw, json)
Hash identifier:          jHsOzOEfKRVHoqvZJDeglde34D089s9YRcPcC9Jz6kM=
Subject key identifier:   19:7E:40:51:EB:80:14:F2:AD:1B:18:66:F3:4D:C6:02:90:8A:09:F5
Certificate issuer:       /CN=22a89d78-807f-48bb-8913-4e15f4878bfb
Certificate serial:       010D0C9F4328584E6F3A2093EE84DF77F8C1D2C0
Authority key identifier: 41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     13786
IP address blocks:        207.135.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:20:93:ee:84:df:77:f8:c1:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a89d78-807f-48bb-8913-4e15f4878bfb
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c7668cba-6d09-4731-a098-3f8a72528ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:12:08:0a:ba:1b:e7:05:e0:01:0a:55:4f:
                    cf:4f:4b:63:9f:94:67:35:32:4c:cb:04:cf:29:e6:
                    c8:01:ee:84:80:93:3d:2b:0a:8f:d2:19:dd:25:c2:
                    dd:cb:ec:78:43:9b:87:96:dc:f2:0a:ef:ed:16:a7:
                    be:6e:a8:4b:85:98:9a:f4:77:72:73:32:af:0d:69:
                    ae:21:41:ab:56:26:83:55:6c:3b:2c:3d:55:9e:0c:
                    bf:0a:da:cd:87:45:82:d6:16:21:b7:be:ee:cb:ed:
                    fa:2d:34:34:c7:26:ee:e5:28:e5:69:79:e4:73:93:
                    b0:a1:3c:40:46:b6:7f:ea:b8:b4:b2:90:46:57:cf:
                    8e:07:92:d2:75:13:7d:cc:2c:a2:5b:0a:af:49:b9:
                    3f:b3:33:af:da:ea:2e:94:42:8d:f4:e2:6e:26:e6:
                    42:43:2e:1c:54:69:df:6c:dd:51:14:7e:f3:61:cb:
                    63:84:54:3d:0a:56:2f:4f:bb:2b:7a:a5:59:dd:2b:
                    c9:13:cc:f3:9a:70:5c:ef:60:51:8f:d5:5f:0e:71:
                    3e:cf:3f:07:8c:6a:57:b3:cd:06:22:57:52:3b:8f:
                    38:30:5f:a7:50:14:cb:26:2c:44:f9:1f:a3:66:5c:
                    a7:fa:5a:3f:01:93:f6:2c:b0:c0:a1:72:36:b9:d6:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7E:40:51:EB:80:14:F2:AD:1B:18:66:F3:4D:C6:02:90:8A:09:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl

            X509v3 Authority Key Identifier:
                keyid:41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:a3:e7:20:40:d7:bc:b0:c6:1d:e3:c7:3c:2f:f1:8c:cb:
         b0:58:88:5d:6e:7a:f1:5e:96:34:f4:c7:79:eb:65:5e:48:d8:
         b8:59:c7:5c:c4:1b:23:0c:e1:c6:be:47:ce:2b:1c:0e:ef:5a:
         a5:b3:2f:e0:eb:0d:7a:27:2b:82:c0:45:9f:17:94:a2:e2:56:
         e5:1d:c8:6d:cf:9d:78:f9:d7:5e:b9:c6:95:c4:36:31:f0:b2:
         0e:32:71:22:55:a6:29:59:b6:99:c6:1b:9a:4d:49:85:b9:24:
         5a:25:b6:8d:70:75:6b:79:0c:84:8a:81:bf:ce:75:f8:76:24:
         1a:33:b1:ee:28:6a:d3:7c:10:24:b8:a3:f8:6f:bd:9d:3e:f3:
         37:0d:b4:7d:3d:1a:48:9f:76:77:d1:59:07:7f:86:cf:a5:9a:
         a6:95:e5:18:43:fe:67:c1:bc:42:27:84:14:71:ae:ff:f7:3a:
         22:fe:5e:c7:e5:90:32:cd:ba:ce:b2:bb:64:3e:95:03:6d:c8:
         80:68:da:16:db:bc:36:4c:3d:2e:9d:e8:ca:ae:98:31:a6:89:
         0a:2a:d7:56:a1:14:13:97:5b:37:59:1c:41:44:de:ac:5c:74:
         1f:94:e1:6e:c8:71:73:0c:20:3f:79:a4:f4:3e:6a:ee:3e:7c:
         b4:78:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:12 2026 by rpki-client