Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa
File:                     38571c14-5975-3249-9151-857c5a59c9be.roa (raw, json)
Hash identifier:          H662dWCk343F6FDTafz9YHA91JjyoAhXs8cr9aYuph0=
Subject key identifier:   22:E0:8C:CC:80:BA:75:54:B1:29:2F:65:86:76:0F:00:68:38:05:64
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584E921FA1F5F26E37251DEABCC0
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     6939
IP address blocks:        209.142.71.0/24 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a1:f5:f2:6e:37:25:1d:ea:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=68986ac7-daaa-4840-babc-93d0ff9aaa01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:bf:cd:74:4f:c4:82:91:cf:fe:ee:dc:91:
                    56:8a:1c:1d:83:cf:49:b6:39:c7:d1:79:11:c8:2f:
                    fd:69:20:62:28:11:c1:26:3e:33:5a:74:b6:0b:e6:
                    65:e1:1d:1d:07:ad:42:1d:9f:77:be:cc:8e:84:9f:
                    28:b0:66:2e:20:4c:4a:d7:37:b4:30:49:1c:f4:1b:
                    84:e7:b4:cc:42:83:d9:6b:97:f1:71:bf:63:bb:a6:
                    13:b0:5b:0b:df:92:96:20:c9:ff:cd:20:ea:2b:30:
                    1d:80:78:e6:b9:3b:54:28:d3:3a:1f:04:e9:d7:4b:
                    34:97:7a:08:15:8e:1a:6e:5a:fc:11:50:79:a9:e0:
                    7a:0e:b3:20:d6:37:40:0a:17:b4:29:1a:20:26:6d:
                    36:03:20:45:23:ec:68:23:70:85:d7:dc:00:d6:2a:
                    70:23:5b:52:e6:93:05:1b:24:03:50:31:82:e9:77:
                    87:8b:5f:63:3d:51:c6:59:74:ec:8f:8d:80:ae:11:
                    1c:fb:4f:bd:12:f2:ca:4c:e4:a3:44:3d:3e:f2:f6:
                    a2:02:62:ac:81:a0:1b:f3:e4:26:76:d8:fe:32:a6:
                    50:49:52:b6:ac:d9:50:06:48:a1:16:64:c1:2b:39:
                    ac:ff:0f:7c:1a:74:8b:ba:49:0c:6a:47:02:fa:11:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E0:8C:CC:80:BA:75:54:B1:29:2F:65:86:76:0F:00:68:38:05:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:72:9d:c1:cd:16:26:f5:bb:34:0d:ad:e0:f7:64:25:52:
         b8:5e:49:cd:50:f3:14:37:c6:d7:40:03:6d:e3:8f:20:e4:62:
         78:2d:33:70:ea:1a:a4:8a:41:f5:16:89:18:18:8b:ef:b6:38:
         05:b4:85:a0:57:37:fe:98:74:8a:73:3f:66:f2:28:27:44:86:
         34:a2:e8:ae:a1:47:91:b1:40:55:de:da:b1:63:64:ac:44:59:
         c6:70:03:76:0d:ea:a4:3d:ff:d5:e7:3e:1d:71:e7:86:f7:8f:
         be:6d:5a:07:a0:31:24:e7:04:ca:fd:50:12:0d:f0:08:3f:58:
         e2:23:12:7c:03:6a:26:50:d5:e9:e5:9a:54:39:a5:41:0f:64:
         d5:90:02:39:64:e9:e4:68:2b:99:ca:10:a6:c9:59:28:45:1a:
         0b:70:3e:91:e6:2c:a7:7c:4d:d7:25:63:24:f4:bf:c4:66:be:
         af:f8:8f:c2:6f:be:82:e6:3f:ef:de:5b:a3:e1:3a:c2:62:79:
         74:3d:4b:d2:32:65:35:4f:df:cb:a2:6e:06:d3:97:62:3d:35:
         35:ac:59:ec:38:47:74:d4:59:2e:02:a3:cc:76:d1:d5:4d:71:
         1f:87:8e:58:9b:a1:f0:5a:a1:fb:f8:79:a8:60:ee:ba:6f:72:
         13:f7:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:17 2026 by rpki-client