Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa
File:                     558204fb-872b-3cf3-bc34-97254c313c52.roa (raw, json)
Hash identifier:          ixEE922M00aKkZDDk5xngmozpdHXKsxuhUfjRU05q0I=
Subject key identifier:   B6:3E:92:D0:19:44:0E:87:3D:4F:4B:04:28:61:4A:0E:23:CB:C4:98
Certificate issuer:       /CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Certificate serial:       010D0C9F4328584F63F82FDFF51AB0EF14BC58C0
Authority key identifier: 07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     36295
IP address blocks:        162.254.8.0/22 maxlen: 24
                          192.153.46.0/24 maxlen: 24
                          192.245.118.0/24 maxlen: 24
                          208.93.220.0/22 maxlen: 24
                          209.141.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:2f:df:f5:1a:b0:ef:14:bc:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=2a91e27e-d7e0-4c4b-a9a1-9bf90149a353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:1b:56:0f:38:60:a3:1e:12:2c:a9:b7:1f:
                    34:12:56:bd:4e:a7:1c:43:4c:29:6f:82:e5:5b:d2:
                    d7:81:af:c7:ac:6d:a8:07:9d:60:f4:98:5b:80:55:
                    67:c5:21:2a:24:2c:ec:14:99:6d:06:08:bf:13:f2:
                    51:ab:52:c6:9f:e1:94:90:19:c9:5f:dd:56:23:3a:
                    b4:94:f6:b1:83:e4:61:23:b8:d6:fc:9a:08:7f:7e:
                    d7:c7:01:2a:a1:37:d4:1d:58:f6:03:6f:86:cc:22:
                    65:2c:ef:bd:b5:15:89:94:92:75:d6:68:4c:09:6a:
                    0b:c7:4a:92:b9:cf:b5:6f:d1:08:bf:f9:42:35:42:
                    b3:3a:9c:ee:82:0b:bc:be:2e:1d:d7:a0:a9:8b:18:
                    d3:63:86:db:65:2d:1f:c1:e1:43:e7:7c:4a:4a:8f:
                    ea:4c:05:0c:9d:ba:17:37:74:61:b8:c1:6d:f1:a0:
                    d6:2f:9a:a6:f6:b9:b2:53:68:74:7b:d5:0b:eb:6b:
                    c6:ff:0e:ca:b3:d6:69:bb:e7:91:93:ce:df:25:81:
                    99:40:87:67:c8:a5:ed:a6:10:12:d7:3d:a6:da:8d:
                    3c:d1:0c:8b:bd:0b:ad:ad:79:14:b3:8b:67:44:df:
                    06:dc:16:3b:0d:3a:d2:1d:7c:19:be:2a:f0:bb:b6:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:92:D0:19:44:0E:87:3D:4F:4B:04:28:61:4A:0E:23:CB:C4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.8.0/22
                  192.153.46.0/24
                  192.245.118.0/24
                  208.93.220.0/22
                  209.141.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:d1:ce:84:32:e9:08:a8:dd:c7:9a:3e:84:86:7a:46:78:
         db:5b:6e:07:8d:86:13:a8:86:15:37:13:6e:49:9b:9e:d1:59:
         9d:da:4e:ad:68:69:56:e2:18:6b:c9:c4:7c:2d:ce:9c:16:16:
         63:bd:8e:f6:19:58:04:6b:f7:20:68:23:1b:7a:e2:ae:1a:01:
         4e:28:28:84:15:9a:82:d6:04:1b:94:dc:c1:1c:aa:00:d4:97:
         8b:1d:47:f5:61:b7:01:b7:4e:de:e7:a5:53:0f:ee:c0:b2:d8:
         d3:c6:95:f0:3e:43:96:b3:02:9c:78:50:b6:29:04:3d:bd:ce:
         97:fc:50:56:11:db:30:f8:50:04:e1:67:6c:57:05:e3:5d:57:
         0c:d2:5b:61:14:71:4e:8b:3c:ac:02:0a:99:4b:c6:c6:f4:d9:
         67:52:da:cc:6f:9e:aa:8b:df:ee:49:fc:7a:21:eb:22:68:3a:
         27:46:81:74:93:b0:5a:5e:cd:56:61:14:42:a2:1c:ea:68:ae:
         7b:fe:78:ac:02:db:9e:7b:73:63:fa:08:86:42:99:92:46:c1:
         cd:f0:82:19:0f:48:97:a9:90:07:e3:f9:50:33:ad:7b:ba:e5:
         c7:b3:ae:80:c9:29:a3:af:94:4d:6e:12:db:5e:8d:28:53:ef:
         a0:f7:d9:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 12 12:16:23 2026 by rpki-client