Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/22a26f4a-7237-3827-80ea-7ff6e86ae607.roa
File:                     22a26f4a-7237-3827-80ea-7ff6e86ae607.roa (raw, json)
Hash identifier:          vv4Pnz9HcpezZs41nKcpY8Vvb++Wb1Ena0QPVZ+WyoU=
Subject key identifier:   54:DF:DB:11:E8:3D:DC:25:5B:11:4C:2B:C3:A9:DA:9F:03:4E:81:43
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4F9589B9AF73B08F153500
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/22a26f4a-7237-3827-80ea-7ff6e86ae607.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        209.55.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:95:89:b9:af:73:b0:8f:15:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=a3834691-b83b-46ef-806c-dfcd78123c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:cb:0c:08:94:df:28:51:27:7c:83:b4:20:
                    52:29:9c:ee:0f:87:b5:19:fb:de:f9:f5:e3:54:c4:
                    c7:55:cf:ac:78:8e:30:70:f7:6a:08:f7:73:2a:5e:
                    a3:be:42:c1:37:e2:f7:3a:fb:d8:74:27:30:ad:8a:
                    44:41:dc:fe:80:b3:b8:33:dc:5b:79:67:bb:6b:cc:
                    c4:ce:04:50:b0:8b:49:70:b5:43:68:c8:d2:55:4a:
                    ec:02:65:5c:6e:56:38:29:d9:72:97:69:8b:4e:be:
                    ff:ae:e9:d5:2c:10:6f:02:67:39:3c:29:fd:f0:9f:
                    7a:61:5f:ff:7d:d0:36:89:b1:b6:ca:3d:f1:a1:fd:
                    b4:a7:52:9a:65:a2:56:e6:49:06:88:52:d1:fe:98:
                    36:8a:f7:dd:b5:c7:9c:05:11:87:49:47:90:c8:c4:
                    df:29:9a:0d:1b:c5:fa:53:ba:db:2e:fb:c5:c5:58:
                    f7:fc:bc:b4:56:84:e3:0b:f3:4d:3f:ad:5c:cb:02:
                    3a:6e:e5:e0:7d:12:43:5a:cf:7b:74:a1:5d:41:67:
                    42:e0:b2:63:c5:7e:d9:a5:ba:9b:37:0a:4c:28:0e:
                    ae:55:d1:f0:a2:49:32:cc:65:81:36:e8:27:28:68:
                    fa:51:4f:3f:f2:94:31:98:51:dc:f4:5e:c0:57:e4:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:DB:11:E8:3D:DC:25:5B:11:4C:2B:C3:A9:DA:9F:03:4E:81:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/22a26f4a-7237-3827-80ea-7ff6e86ae607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ff:f9:56:05:1d:ad:1f:f7:dc:3b:e4:e6:88:4b:d0:24:af:
         f1:2c:85:c6:c6:19:a1:2c:f7:90:f5:80:5c:56:f7:1f:64:cd:
         d3:8e:13:0b:cb:9d:35:0a:b3:41:af:87:e4:7e:95:ab:74:8d:
         3e:ae:67:15:43:0d:01:bf:fe:f4:b0:80:d6:d0:50:58:3c:db:
         63:03:ec:1d:d1:a0:69:ce:89:62:b1:a0:0f:ac:80:b1:b2:7b:
         a5:46:f4:11:3e:67:5c:bc:63:57:6d:24:4f:ce:52:cf:53:ba:
         f5:82:8b:89:32:1f:05:cc:bd:c2:6c:eb:98:ab:46:04:84:08:
         a4:e5:fc:c3:58:4b:56:d0:6a:5f:ab:6d:d1:8b:59:fe:13:03:
         84:96:17:6b:ef:3a:f4:14:8f:39:1e:0f:9a:92:c0:b6:71:21:
         56:60:36:b1:66:26:35:75:cd:80:a6:44:9a:84:11:8f:bd:f0:
         72:3a:1c:f6:24:ef:bf:60:11:62:63:15:99:62:71:3d:b6:a0:
         02:8d:02:ce:d6:e3:7b:e6:b1:b9:f3:fb:d4:73:85:5f:8a:24:
         f4:99:fc:b7:7e:fa:7e:b2:be:09:ed:73:b2:8e:4a:09:03:c5:
         dd:7c:c3:4d:6a:e7:e4:bb:89:a1:53:12:a0:17:9b:49:aa:2c:
         69:17:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:19 2026 by rpki-client