Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/cc6695f1-531c-3820-951e-59c87469c04d.roa
File:                     cc6695f1-531c-3820-951e-59c87469c04d.roa (raw, json)
Hash identifier:          N4ishv26Zw1pxxRB3trarhFgtXTVjv7UsGMsqPAHblM=
Subject key identifier:   74:A7:1A:7F:F3:C6:53:CA:7E:E6:E8:7E:D2:A7:35:04:50:D5:2F:25
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F4328584EA79A54E15C6CBE5D83FA0280
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/cc6695f1-531c-3820-951e-59c87469c04d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395261
IP address blocks:        163.182.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:54:e1:5c:6c:be:5d:83:fa:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4502acff-018d-40d8-8d0e-28f53b791ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:27:12:f6:27:d8:3c:75:f2:70:ee:91:5f:
                    3b:c6:4b:00:4b:e5:2c:eb:33:ae:a1:b4:67:03:a5:
                    99:2e:e9:a8:c0:9f:00:40:50:75:21:b7:4b:99:bb:
                    7b:05:98:d7:26:47:36:fc:8d:9f:81:44:ab:8d:34:
                    5e:1e:b7:e9:00:de:8d:d5:ba:dc:f0:4d:da:2c:7c:
                    6f:4c:07:a2:d5:21:c7:0e:3f:a2:8b:c7:32:a6:c9:
                    4c:eb:f8:8a:57:81:4d:d6:af:e2:0b:5d:85:52:42:
                    6d:6b:56:7f:02:24:b5:77:f8:d6:a7:90:98:b7:2b:
                    30:32:52:98:84:40:9a:0f:e3:1a:93:f7:d9:c4:5f:
                    64:d4:68:ce:98:5c:e3:56:36:59:f6:07:67:c2:e4:
                    7c:62:6b:35:7a:85:86:57:04:6d:4d:b1:01:80:b9:
                    0e:5d:83:69:0b:46:e9:c0:da:7b:0b:5e:4c:d8:63:
                    2e:2b:52:5e:53:d0:40:11:65:ce:45:cd:e7:85:03:
                    79:15:e7:21:ca:7b:b4:93:c9:92:58:95:e4:ba:3f:
                    bb:88:8f:8f:ba:ee:01:d9:3b:34:70:3d:58:33:95:
                    88:6f:fb:32:0d:c8:c3:8b:d0:a9:58:93:f5:bc:d3:
                    6e:c2:f5:13:df:36:52:f9:d4:9f:e1:06:fc:05:f3:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A7:1A:7F:F3:C6:53:CA:7E:E6:E8:7E:D2:A7:35:04:50:D5:2F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/cc6695f1-531c-3820-951e-59c87469c04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:96:bb:e3:2f:26:3e:fc:52:ce:1c:7d:66:5f:c7:1a:45:9f:
         c1:75:3c:73:46:be:b6:69:e5:51:98:2b:95:35:66:76:2d:fd:
         fb:ea:ef:fb:a5:e2:82:0e:a2:9f:b1:c8:1f:dd:f9:fd:9b:60:
         90:1b:af:98:6d:2e:5d:72:98:b8:01:c9:46:10:a7:e5:1f:73:
         05:e0:7b:dc:05:48:44:1a:ce:c1:41:25:69:66:eb:e3:80:47:
         95:da:5d:53:b8:00:0f:55:49:58:2a:87:38:c9:3a:60:e8:14:
         fa:02:bf:8c:59:d1:14:94:2a:bf:e4:4c:1c:5a:08:fc:a8:94:
         49:6c:bc:d7:ce:75:72:b0:e8:37:fe:7f:68:b4:09:45:cb:71:
         f4:a4:da:c1:d7:2d:ef:b3:8d:80:bf:81:a6:0a:d7:76:b9:e7:
         8f:a0:6b:9f:5e:84:ae:1a:e2:49:16:ff:83:82:96:15:f0:2c:
         bb:8d:aa:b0:a4:6e:0c:6c:c0:6b:4f:b3:cc:94:78:3d:4d:16:
         3a:b7:8f:88:94:64:82:7f:56:89:0e:b2:64:d5:d5:43:e2:9f:
         39:ff:bf:a0:e4:47:06:ba:9a:c2:88:3b:75:59:8e:61:a6:51:
         a0:76:0b:44:85:c2:f2:dd:35:99:f4:f6:44:6e:23:88:bc:46:
         35:3f:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:08 2026 by rpki-client