Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa
File:                     7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa (raw, json)
Hash identifier:          tSm0tTquqGg0uKVYYfOanK6df/wZAc0vEKizOH+Dd04=
Subject key identifier:   C3:3F:64:64:77:95:BA:30:5A:17:82:2A:95:30:B1:05:E0:43:BC:56
Certificate issuer:       /CN=eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1
Certificate serial:       010D0C9F4328584E9BE506F7E48DE20A24C469EC
Authority key identifier: 59:2A:C1:49:99:F1:2F:9A:06:B1:E9:5D:DF:57:72:22:76:63:C3:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        192.69.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:06:f7:e4:8d:e2:0a:24:c4:69:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=079aed53-d224-4f19-9ab4-474d4fd73ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:4a:21:4c:66:ae:5c:d1:04:4f:c9:dd:1a:
                    62:de:75:98:ad:90:bb:5a:63:93:48:52:2a:fe:3a:
                    7a:dd:bc:a8:b8:ed:27:6b:68:a2:b2:cd:4c:b1:d2:
                    23:d2:e0:1a:93:5d:50:06:40:54:74:29:da:c3:3f:
                    5b:12:41:9e:b1:42:ea:cf:af:ba:8e:53:c5:58:63:
                    d7:23:e9:c5:a3:71:0d:17:31:10:e8:e3:f3:2d:bd:
                    06:17:2f:49:af:75:36:c0:6c:1a:3a:6b:be:8f:08:
                    95:5c:cf:3e:56:eb:6e:f3:f0:eb:9c:ec:e9:0b:25:
                    10:26:6e:66:ea:62:ab:99:ec:2d:02:48:16:e4:6f:
                    97:20:37:e3:88:1e:e9:fd:76:8e:96:75:3d:fa:59:
                    30:03:2e:ae:b2:58:d1:a4:0a:7d:af:03:ce:4b:56:
                    dd:a6:f3:f2:28:12:86:03:60:46:b2:a4:02:11:dd:
                    5d:4a:86:4e:c5:d5:3f:20:d8:67:c0:09:2c:8f:18:
                    c3:48:da:3f:c6:7f:32:c5:ff:5b:7c:e4:3e:41:12:
                    3e:b0:2e:67:0c:d9:5f:a2:6b:57:c0:e6:d5:b3:ac:
                    f5:b3:96:ba:be:c2:4a:0f:9b:ac:4b:5c:27:a2:fa:
                    45:8c:5e:8e:24:5e:65:82:0a:f4:38:45:6f:68:50:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:64:64:77:95:BA:30:5A:17:82:2A:95:30:B1:05:E0:43:BC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.crl

            X509v3 Authority Key Identifier:
                keyid:59:2A:C1:49:99:F1:2F:9A:06:B1:E9:5D:DF:57:72:22:76:63:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:f3:08:fa:0f:7a:cf:ae:f1:99:53:48:dc:e6:29:1f:cc:
         b2:d7:17:8f:74:fd:82:f5:3e:7a:1a:6f:5f:92:8a:3b:c3:14:
         d9:9b:2b:45:ea:b0:5b:9d:0e:44:9a:a7:c6:1a:fd:40:f9:c4:
         23:5a:f4:3f:91:40:89:61:3c:92:ca:83:3b:15:1b:66:69:5e:
         99:06:c2:d2:45:ba:f6:bb:ed:5a:68:b0:ed:c7:2f:9e:e1:9f:
         15:e6:cb:8d:65:eb:6b:c9:bd:c5:32:e3:f6:ec:fa:7d:38:95:
         a9:6a:a6:b3:1e:18:cf:62:8e:42:20:25:f8:8d:cd:e9:38:96:
         64:cb:2b:d9:d7:7f:b6:73:33:d7:e9:b7:f8:3c:29:40:31:5b:
         a7:31:c5:18:0e:a1:3a:01:72:ef:6d:4b:18:33:ad:e2:64:ab:
         44:b3:a1:14:40:4b:d4:00:96:df:20:a2:e6:c1:f9:7e:3e:b7:
         10:f2:7b:b1:ba:e5:10:bb:a3:c8:66:f1:76:14:f6:24:4b:c9:
         ff:99:a3:3a:d3:09:81:98:c6:87:17:dd:70:d3:ee:24:2b:74:
         1d:82:ae:60:de:05:76:00:bf:bf:36:42:73:db:4e:51:92:ca:
         e1:46:77:d9:40:8d:8d:f5:78:4e:08:a6:19:29:c0:0d:1a:3f:
         ba:2c:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:32 2026 by rpki-client