Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7008ab01-6670-3345-ad00-dc5594bee4ac.roa
File:                     7008ab01-6670-3345-ad00-dc5594bee4ac.roa (raw, json)
Hash identifier:          pssyhTBhnIyHxszganJixKMT2d6CGQuJ+wqOR1QuvH4=
Subject key identifier:   B0:F4:57:9A:7F:55:EE:00:84:32:99:2A:45:CD:84:A2:C9:7C:12:D0
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584E6F3A12CEAB9DB7560A4CCF80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7008ab01-6670-3345-ad00-dc5594bee4ac.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        150.230.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:12:ce:ab:9d:b7:56:0a:4c:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=abf69108-734b-481c-9fef-848d4a53bfff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d6:87:50:b3:cb:94:19:93:b7:91:8f:a7:d6:
                    da:51:8e:d0:73:30:b4:83:bd:73:25:5f:6e:46:e8:
                    7c:61:b6:2f:ee:81:6a:3a:a1:94:41:88:be:c5:73:
                    1f:22:92:81:3c:2c:78:4a:a8:e8:cf:06:9b:54:b2:
                    4e:2f:82:b9:02:26:f9:bd:5e:bc:d0:00:7e:76:c3:
                    40:c1:52:ab:61:fb:19:34:2f:49:79:b2:f9:88:97:
                    d4:bc:03:c3:ad:e7:61:a3:22:7a:ee:1f:ab:29:9a:
                    40:30:02:aa:bb:1e:de:ae:94:e8:96:46:f3:1e:65:
                    0f:67:eb:9f:32:52:37:02:25:5e:cd:80:b9:f9:67:
                    c3:47:ad:a0:ab:75:c3:0a:7d:e9:a3:04:6a:eb:dc:
                    37:da:c4:17:a3:39:d2:2f:4a:b0:48:14:73:ab:84:
                    62:cc:0d:7e:a6:36:54:b4:29:2e:47:60:33:1c:05:
                    6b:a8:01:b6:c8:4a:12:0d:e0:52:3a:2a:d7:43:71:
                    30:c5:9d:fe:7c:ed:d1:bb:b1:6d:88:8f:a9:cb:97:
                    7f:95:46:1f:38:f5:49:ed:c8:c4:b7:8d:0f:ad:54:
                    a2:f7:06:ec:6a:db:c5:6b:ff:87:e7:cb:f7:4f:2b:
                    f5:66:16:1a:14:20:8d:96:54:65:7d:1f:ba:c4:5c:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F4:57:9A:7F:55:EE:00:84:32:99:2A:45:CD:84:A2:C9:7C:12:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7008ab01-6670-3345-ad00-dc5594bee4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:58:e1:95:c6:63:24:1e:23:fc:af:66:92:be:5c:76:e3:51:
         75:ca:7f:33:ad:33:b7:4f:03:0c:bc:dc:56:d9:ab:31:3c:4a:
         4f:51:b9:e1:ca:fb:7b:f1:c2:a9:26:57:e0:77:b0:d2:06:20:
         41:5e:15:06:49:dd:76:7c:62:80:0f:c4:1d:73:85:65:cb:c8:
         cd:af:47:12:e1:ad:ee:b7:7e:fc:6b:60:a1:77:1f:b8:e8:bf:
         8b:06:e1:9d:b3:f6:0a:e9:59:a5:b8:a6:c8:55:ea:15:f4:3a:
         da:03:ad:97:9d:07:15:18:50:b0:f8:f7:18:f1:b2:73:ee:61:
         e9:a7:82:46:a7:34:fb:6d:5b:95:35:ec:14:7c:94:e6:d2:3d:
         23:52:68:51:09:c7:a9:c1:3d:32:74:a3:71:5d:e0:16:86:5b:
         a0:91:71:86:20:59:54:7e:44:95:8b:bd:dd:23:4c:e0:76:6a:
         2a:9d:eb:ba:22:74:d4:8b:b0:39:00:8a:24:d2:af:0a:77:a2:
         21:80:fa:a0:6f:d9:0f:d2:9f:d9:c8:93:c6:01:89:a1:6d:50:
         76:d0:70:48:e0:e9:f7:4d:7a:3f:1c:92:0a:a8:21:14:73:9d:
         0a:d2:27:1d:4d:1c:8b:9e:a1:86:2d:20:7a:68:0f:d0:b5:67:
         1e:12:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:09 2026 by rpki-client