Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa
File:                     9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa (raw, json)
Hash identifier:          AwNYz+0gPYtIkFf2/yZk2aWEgq6HeFqETU9TYNhRISE=
Subject key identifier:   8C:1C:E2:AB:B4:B3:C8:7B:E6:D6:73:99:77:F9:F4:B6:62:F5:41:4F
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584EA798E8784C7C9BCACC405700
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23341
IP address blocks:        143.55.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e8:78:4c:7c:9b:ca:cc:40:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=69329810-d46f-4c3d-8ec4-5f659a26484c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:e4:7d:9f:2d:3d:65:a7:43:18:dd:f4:c6:
                    82:1c:86:1d:bd:be:ba:ee:a0:02:fa:6a:a8:90:e8:
                    2e:20:58:bc:60:68:97:4e:8b:1b:3f:4c:10:2b:01:
                    1d:3e:c1:39:82:5f:bf:05:46:aa:eb:05:d4:7a:f2:
                    7e:91:9a:f2:c0:a2:78:7a:dc:3a:01:13:22:cb:3a:
                    b5:8c:bb:0f:3c:07:8f:32:6a:b5:58:99:f5:77:ec:
                    f0:8e:7a:19:8f:03:5e:f3:ca:c0:15:f3:aa:86:17:
                    fe:b3:7c:36:d8:8a:9a:97:57:a4:66:21:13:f0:45:
                    45:94:85:13:8a:0e:77:74:36:55:45:51:83:0e:09:
                    85:ad:99:37:20:23:ff:02:f6:88:ba:f6:3d:50:ab:
                    52:bf:1b:84:73:1b:1c:42:6e:1a:d4:f5:e0:35:31:
                    c7:77:67:d9:ba:cd:6b:fa:50:79:d5:c7:73:6e:20:
                    16:f0:46:50:11:4d:0a:0b:cf:04:5f:34:d0:77:20:
                    8c:e6:10:dc:51:fa:b9:eb:5a:bb:93:9d:f2:75:3a:
                    c8:05:8f:ec:08:d2:52:4e:1f:b8:58:5e:26:0f:2f:
                    32:68:56:52:3b:51:d8:45:6b:7f:4f:d6:58:07:cc:
                    ae:ef:76:df:f8:7e:ac:d9:03:37:ea:65:62:3e:6a:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:E2:AB:B4:B3:C8:7B:E6:D6:73:99:77:F9:F4:B6:62:F5:41:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:eb:85:b9:d9:0c:22:0c:d9:a9:b5:fe:0e:dd:e2:cb:16:
         ef:64:8a:0a:24:f5:3d:ec:59:2f:d0:07:b1:9d:64:a9:cd:7b:
         a5:24:1c:25:ad:a9:b1:91:20:1f:9f:01:52:88:9a:cc:4e:02:
         11:be:fe:28:1e:69:7c:ca:45:a3:5b:06:1d:31:e0:a2:90:fd:
         5e:cf:8a:14:19:a1:5b:e0:e3:54:91:fb:9b:bb:f3:89:61:55:
         eb:d6:3f:0c:01:57:0e:ca:91:ed:42:5a:fe:6f:a3:d2:e7:b0:
         ed:02:41:6e:02:1e:46:5e:df:fb:75:be:30:41:4c:09:0e:d1:
         61:b8:b8:54:89:d6:78:47:69:27:a5:ab:42:58:ff:00:4c:f7:
         41:f2:19:d1:d3:c0:0c:b8:29:87:e9:7b:5d:94:35:83:d4:38:
         7a:1c:ad:2d:fb:d4:53:d5:09:d6:d0:23:18:b6:f0:2c:37:35:
         05:a1:62:19:8e:3f:8a:03:a2:a4:8e:51:d8:d9:d5:d7:3f:14:
         31:78:ad:68:d1:59:ba:9e:e0:62:d7:f0:9a:e2:94:73:6d:bb:
         aa:5d:4b:07:8c:ae:12:5a:55:df:09:8b:b8:55:ad:0d:b9:88:
         bf:8e:6e:37:55:72:73:70:11:7d:bb:f5:bb:36:2d:d5:0c:b7:
         47:d7:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:15:29 2026 by rpki-client