Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/a8f83bee-8bf1-391d-8b88-b6b164dd9c34.roa
File:                     a8f83bee-8bf1-391d-8b88-b6b164dd9c34.roa (raw, json)
Hash identifier:          gOgj5FRKgPoJtTl2RYXkEQ3JzVxu4j0BNWmw7VxmXAk=
Subject key identifier:   C1:90:8E:9F:86:14:BB:EB:E2:1A:75:55:B0:D9:BC:7C:88:F5:68:A1
Certificate issuer:       /CN=e96285ea-5cb8-44da-b665-eabe5aa637c7
Certificate serial:       010D0C9F4328584E7A64F93CE7D08476A3284A80
Authority key identifier: DB:92:19:BF:AD:B4:FA:12:24:20:E9:7F:82:CB:B5:8C:E5:00:68:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/a8f83bee-8bf1-391d-8b88-b6b164dd9c34.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     400443
IP address blocks:        141.193.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f9:3c:e7:d0:84:76:a3:28:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96285ea-5cb8-44da-b665-eabe5aa637c7
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=41224878-acd0-4b70-a83e-87c49028d7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:74:2d:1e:08:cb:73:51:54:b2:e4:b0:cd:
                    99:2d:c5:a7:30:e2:a3:06:bc:9c:74:94:e4:ec:6b:
                    3d:f2:8c:1f:43:5c:92:53:c6:a3:fd:3b:2a:ab:8a:
                    15:d0:3f:80:f3:d5:e1:21:d1:ec:da:ac:a1:ae:0b:
                    2a:c0:04:cc:27:12:26:ea:d4:09:b2:27:3f:8e:c7:
                    ed:60:62:00:d8:c7:2e:bc:06:33:9e:ca:93:06:9a:
                    04:d8:3e:de:ad:4f:b8:25:c2:b4:44:a4:47:c3:22:
                    5a:a5:f8:7c:b3:b0:2c:72:b7:23:9f:6f:3a:77:45:
                    0e:53:d5:00:0d:b9:d0:43:04:8c:de:75:fb:45:1f:
                    d8:fa:21:17:da:9e:ff:00:ae:4f:28:a1:a9:80:0a:
                    9e:7a:1f:70:aa:cb:81:b4:75:da:56:71:9d:2e:57:
                    b5:e7:be:b2:53:ec:7a:18:40:b9:26:4d:96:04:01:
                    7c:d1:f2:26:be:d8:c4:0e:c2:4d:ef:6e:ac:17:7e:
                    c8:e6:52:29:9f:4b:a6:28:cf:ac:9a:0b:f7:24:64:
                    8f:d0:6a:ff:a9:35:0f:18:59:9d:5b:00:05:48:d9:
                    3c:83:43:5b:a6:da:7c:f0:a6:be:4f:93:14:4c:93:
                    91:e3:46:a3:7a:f1:e5:1f:59:a5:6b:4c:c4:d6:a4:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:90:8E:9F:86:14:BB:EB:E2:1A:75:55:B0:D9:BC:7C:88:F5:68:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/a8f83bee-8bf1-391d-8b88-b6b164dd9c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.crl

            X509v3 Authority Key Identifier:
                keyid:DB:92:19:BF:AD:B4:FA:12:24:20:E9:7F:82:CB:B5:8C:E5:00:68:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:17:bc:c9:91:f0:0c:da:4b:19:5e:a2:e2:b3:b8:c8:59:
         67:99:1c:2d:4a:e8:bd:86:7a:f6:35:8b:9c:e1:c7:50:14:eb:
         1b:6e:fb:ec:fd:62:e4:33:51:55:10:ca:22:9b:09:2c:ca:f8:
         5f:cf:f1:b2:74:af:27:1f:29:77:b5:a3:db:60:1b:52:c8:95:
         03:42:17:02:96:67:ea:fc:e8:40:8f:14:32:7b:7c:a2:18:b9:
         d9:f9:32:8c:49:b9:1a:ca:cc:54:34:0b:1a:a7:bc:50:cc:69:
         1d:6f:3b:56:c2:93:dd:90:ef:f7:23:65:37:b9:11:55:24:7f:
         a8:88:38:93:25:70:d2:55:39:f2:ed:85:6b:8d:65:db:4c:3b:
         5b:99:4d:c2:a1:7b:f7:a2:fe:78:58:28:5f:39:f1:1d:f9:6c:
         16:57:74:cb:af:18:e5:4a:1a:48:02:72:f5:61:04:e3:18:96:
         e7:02:d9:18:e9:0a:d1:35:4f:e9:0e:c3:d7:9d:2f:ab:97:91:
         0c:af:2c:9d:f5:b4:e2:0a:b6:c1:ed:2c:c4:a2:f0:7e:ff:2d:
         05:bb:3b:cd:94:32:73:1a:5d:ea:6a:ae:a4:9e:30:eb:01:fb:
         46:74:c2:78:8f:af:06:f1:73:bf:bf:4e:5a:84:13:11:40:32:
         10:64:dc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:59 2026 by rpki-client