Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa
File:                     bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa (raw, json)
Hash identifier:          WzzKic++1k5CnUCTrk1gDTe1AvRXxaxBBQHOiR/iwHk=
Subject key identifier:   12:3D:61:7F:F8:34:C2:8E:EA:0C:08:8A:86:37:36:00:B3:2F:1E:D2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA795A010A1FD7289AB621E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     214054
IP address blocks:        216.122.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:a0:10:a1:fd:72:89:ab:62:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=30bbbe92-7a38-48d9-a148-43c2df1ef84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:86:01:93:b1:c7:33:c2:87:79:be:d6:52:a2:
                    d2:d4:1c:27:35:68:30:7d:3a:48:26:30:7e:5b:a6:
                    3c:54:68:49:6d:13:8f:34:b0:05:6a:61:56:37:28:
                    f3:12:42:ed:94:ee:66:1d:a0:88:4d:cc:7e:63:0f:
                    43:c1:2f:b6:f4:3a:ce:25:db:5f:f7:e1:c6:7c:da:
                    e6:8f:ad:8f:0b:2f:01:f4:9c:0c:e7:e9:fb:09:9e:
                    2e:2c:03:ca:8b:71:42:1a:95:aa:75:ef:d2:73:62:
                    5b:e6:66:d5:53:26:6a:8d:b0:37:61:17:c2:31:00:
                    22:8d:66:7d:21:ce:8a:95:c2:89:e4:f9:9d:2c:be:
                    c8:d5:6a:0f:9c:0f:e5:42:5f:e3:bc:8e:f1:40:75:
                    c9:10:45:01:d3:ea:f4:9b:f7:af:62:01:77:ca:bb:
                    23:80:9d:93:f7:09:ee:28:65:5d:7f:56:55:5e:07:
                    36:27:85:41:46:0b:6b:7c:d0:ed:5d:8b:37:4f:f9:
                    a8:b9:ff:27:af:87:b8:52:df:b1:ba:9b:67:7d:15:
                    eb:d0:de:b8:8d:87:6a:7f:5a:47:13:42:3b:ea:4f:
                    c9:b5:00:20:c0:5a:03:36:0e:56:cf:fb:ed:ff:cd:
                    44:5f:19:db:43:c2:35:21:0c:3f:8d:dd:fb:ca:21:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:61:7F:F8:34:C2:8E:EA:0C:08:8A:86:37:36:00:B3:2F:1E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:9a:b0:f7:6e:3a:cc:c2:6f:84:09:c0:2c:97:15:fd:6f:
         ba:29:93:db:74:24:87:96:2b:a5:22:9d:be:d1:aa:50:0a:3f:
         47:4f:ac:48:63:12:1a:21:49:fb:c3:91:ab:c4:f8:ea:1b:54:
         71:6a:cf:54:41:05:f9:1d:f8:5e:16:bc:d8:8a:50:b2:dd:37:
         fd:55:d2:4e:7a:f8:9f:d0:00:e8:3a:7c:13:15:ee:9a:ac:b8:
         b0:0b:d4:61:bf:8e:f3:0b:e6:ea:cc:5a:f9:4c:79:0a:82:ae:
         6d:2c:39:0d:37:31:f7:72:d6:28:29:94:0e:cc:98:15:53:6d:
         da:13:12:0e:84:7a:0a:20:7a:7c:af:ab:06:ae:a4:21:ab:9c:
         30:b9:c9:dd:46:3f:e3:de:55:1b:73:93:21:5d:5a:87:7b:48:
         3e:77:fb:60:f4:62:69:73:6e:86:98:1b:1b:a8:61:96:dd:f0:
         63:c8:cf:da:09:0d:10:3d:64:92:0b:d4:7c:80:06:7f:0e:ad:
         a7:7b:8b:00:64:4d:f9:1e:da:a5:e2:1e:82:e9:e3:2c:c6:48:
         7f:5b:95:6b:38:b0:73:53:c2:79:e0:3c:59:7a:37:3c:91:fd:
         af:9a:12:9e:ea:41:01:30:c3:4d:29:25:09:4f:e0:1d:7b:a8:
         25:f9:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:33 2026 by rpki-client