Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
File:                     e4b01834-8b58-3933-9837-0bd7809c602d.roa (raw, json)
Hash identifier:          bw7FH4cMm1rOPtEoic+qkZIx0FAA/QyUR6WLu0Lt9Zg=
Subject key identifier:   B0:40:D5:6B:8E:86:F3:5F:5A:95:D6:9D:F1:3D:81:3D:D4:D6:1F:55
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA798B1513B502D86597203A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        172.218.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:b1:51:3b:50:2d:86:59:72:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=01627dd4-6e8c-4714-839a-b6f5eb0f74cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:31:77:37:c1:89:44:90:67:66:a2:7c:13:
                    fa:53:62:3c:6e:21:82:28:f8:54:f5:44:1c:7b:38:
                    f4:3b:77:af:d7:a8:93:e7:8f:75:e9:3a:82:66:29:
                    0b:78:17:3f:73:0e:13:70:29:61:8b:22:53:43:4a:
                    91:e6:7f:13:66:a6:2d:b3:fc:32:a9:a2:11:1a:5f:
                    7c:28:51:71:db:35:65:3f:3b:39:fe:71:75:8c:bf:
                    62:69:d8:4d:f3:40:3c:de:55:7d:7a:1c:c6:12:b8:
                    8f:7a:cc:bc:25:2a:f9:89:58:60:60:9d:a0:56:4b:
                    80:28:29:0a:d5:5e:02:5f:19:54:bb:73:b0:1d:62:
                    10:5b:13:c8:82:19:5d:19:83:07:f8:b2:3a:3f:66:
                    99:fd:3f:b2:b5:9b:c9:76:92:af:30:02:73:6a:aa:
                    da:e1:f7:2d:f5:b1:54:74:4b:af:58:ab:92:4d:5b:
                    58:f5:1e:fc:1b:90:e1:7a:d2:05:1a:a4:5d:74:40:
                    be:5a:04:78:f8:09:4a:53:8f:4b:c1:2f:95:26:cb:
                    29:a8:bf:fe:97:d5:9e:27:0b:2b:65:d8:3b:32:bc:
                    b7:55:d0:45:13:61:91:ab:c1:36:37:5a:1d:d1:7f:
                    85:57:f9:4f:46:6a:bc:13:62:25:b4:38:bd:48:cb:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:40:D5:6B:8E:86:F3:5F:5A:95:D6:9D:F1:3D:81:3D:D4:D6:1F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.218.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fb:a7:39:e8:63:d2:3b:6a:0c:db:cb:b7:5c:b1:db:bd:e3:
         b6:58:fc:bd:ce:31:38:15:f4:db:f1:79:52:37:61:60:d1:2f:
         24:ee:90:68:82:ca:d6:d6:c5:4c:58:8c:97:f8:04:ef:a1:d9:
         c0:53:4b:c9:c3:bb:09:7a:d3:e4:88:b5:21:f3:f2:f3:ed:19:
         38:5f:66:e8:ef:7a:4b:37:0a:1a:94:f3:d1:01:1e:24:e5:7d:
         e9:3e:e0:39:01:37:36:fc:44:6f:8b:60:ab:2f:c6:d6:16:a0:
         ee:25:25:8f:a0:ff:e6:4a:6a:57:24:9c:6e:c1:4f:6d:2b:83:
         a4:e6:48:b3:85:fc:a9:60:ae:e0:12:d3:cd:4a:1d:cb:15:a5:
         14:58:e3:c3:f7:73:01:9b:5f:19:f5:c0:6d:c9:34:1c:45:10:
         fe:9b:e4:d2:49:76:cb:17:73:3a:e6:c0:b5:20:da:06:d3:cf:
         d9:58:a2:94:2d:5c:6c:0a:b3:a7:5e:01:e6:b0:7c:0d:62:fb:
         7b:72:4a:96:64:29:1b:16:10:dc:16:61:8e:4f:89:1d:a7:df:
         31:5f:10:44:56:fb:19:39:f2:ba:b5:20:37:31:c6:5b:e9:e8:
         b7:5a:4b:8a:60:eb:ad:3c:7d:ca:4f:a5:c9:bf:97:2a:bf:cc:
         9b:d7:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:08 2026 by rpki-client