Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa
File:                     a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa (raw, json)
Hash identifier:          GFZ07psUiyJ0gwW5CJx2+sZ3D8KJGQazus3N+PcpYj8=
Subject key identifier:   4A:A8:D4:7F:C9:AA:7E:79:59:C2:18:81:35:0D:1B:60:18:4D:4E:96
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584EA79BF72EF42AEAEE7A88FD00
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11272
IP address blocks:        76.8.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:f7:2e:f4:2a:ea:ee:7a:88:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=532f6dd5-c6a1-4fc5-a72d-3cd108b85022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:1b:69:09:55:3c:c5:4b:58:36:fb:17:76:
                    dd:bd:99:26:1a:d8:98:6b:ac:3b:ba:4b:4f:ca:41:
                    77:01:a0:e6:1b:6a:5f:f2:5a:da:48:1d:ef:d0:17:
                    7a:61:22:a6:c5:fa:2e:13:ee:34:b5:bc:ce:50:d7:
                    12:19:ec:33:c4:8f:a8:7e:ee:d9:68:b1:06:c9:a4:
                    62:e5:ae:8a:d2:68:65:fc:ec:9b:e3:8e:e7:12:f7:
                    08:7a:78:a5:2b:29:a4:c3:41:59:0b:8a:8a:a6:55:
                    f3:af:79:10:43:d8:2d:0f:ac:a0:b6:27:09:b0:b4:
                    a6:ac:41:7e:8e:28:83:59:53:b0:13:55:f3:ce:77:
                    3a:70:c4:89:ed:ff:43:67:f2:a2:2b:c7:4c:ed:56:
                    65:1d:cc:45:cf:a1:df:c8:1c:18:f9:8a:88:1a:a3:
                    d3:39:fc:47:fa:50:06:b4:2e:86:ab:30:cf:c7:8a:
                    f0:00:b9:2d:af:3a:e7:bf:bc:ff:ac:ba:24:50:d8:
                    2d:b4:5f:41:33:27:ac:50:eb:58:b4:93:0e:ab:cd:
                    00:0b:20:84:2a:f5:0e:7a:86:f3:89:a4:f9:9e:b9:
                    40:96:90:19:8a:a8:f1:b6:c9:a1:52:af:fe:4d:fc:
                    a0:06:9b:4c:81:eb:c3:35:db:dc:2c:18:35:32:74:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A8:D4:7F:C9:AA:7E:79:59:C2:18:81:35:0D:1B:60:18:4D:4E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.8.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:42:c9:23:a5:18:27:c4:1f:bd:0b:21:91:e9:7e:7a:88:
         28:ce:ad:fd:a7:28:c0:d0:ca:61:9e:aa:45:49:a1:d8:9d:2f:
         8b:7f:0a:0f:66:23:90:7c:f1:92:64:67:14:6c:01:c9:05:33:
         44:b6:0e:6e:be:d1:2e:91:cf:e2:83:5c:ba:ff:4b:c9:0e:1d:
         63:7f:2b:3b:78:a9:9f:a0:e8:08:33:80:7f:77:3b:57:4e:3a:
         f2:60:70:ba:93:82:39:a6:ec:3f:8f:5b:3a:21:a1:43:37:96:
         1e:de:03:b1:ca:fd:ef:d5:70:b3:4f:6e:0d:67:a1:48:68:e8:
         4f:c6:03:e4:92:2f:25:f6:a7:2d:c5:9f:23:7c:b1:f0:c6:20:
         a2:dc:cc:04:b0:9e:9a:b4:c5:41:9a:ad:80:26:bb:28:9b:07:
         4a:2e:a7:1a:1f:23:0b:0f:0a:09:73:38:6e:dd:7c:79:fa:48:
         f5:27:ae:47:dc:27:8d:bb:b5:63:58:ff:fd:1a:2c:d8:2b:a3:
         da:95:9a:73:75:12:20:52:53:26:24:08:44:87:f2:7e:1a:20:
         3e:98:fb:07:b9:aa:db:2b:80:cb:00:90:b4:b8:f6:ab:7f:1c:
         ae:1a:08:69:b0:70:02:a6:eb:5a:bd:7a:fe:63:05:3f:64:03:
         7e:e4:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:02:09 2026 by rpki-client