Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa
File:                     87fd4b0d-6f9b-3caf-ad67-299517a44066.roa (raw, json)
Hash identifier:          MqDh6vkdo+IeX+0f3687MHD41B8FkN3L34Wld/bMs7w=
Subject key identifier:   0C:8B:48:77:50:BF:47:70:4D:1A:A7:54:19:77:35:AC:A6:33:F5:F6
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584EA5AA781261CA1165E71FC400
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     174
IP address blocks:        65.110.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:78:12:61:ca:11:65:e7:1f:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=d7cef626-67de-4ed8-9603-20eae6539e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8c:32:f9:63:77:b7:65:be:6e:d8:0c:17:93:
                    69:f8:81:94:5a:b3:06:df:70:3d:ed:70:a8:0f:54:
                    d6:1f:96:13:3c:8c:81:fb:38:95:6d:ee:61:84:74:
                    18:3b:2c:ff:d2:dc:9c:28:02:af:6f:17:bb:4f:b2:
                    df:e1:6e:46:34:a5:b0:c9:94:ac:4c:88:03:e4:28:
                    0f:6e:4d:b4:e4:17:60:4f:f1:29:a5:0e:f4:ab:ce:
                    d7:3a:2c:fc:d9:5f:9e:83:6b:d7:bd:06:36:7c:97:
                    59:bb:43:24:54:7b:16:64:96:62:4e:34:be:3b:2d:
                    21:c1:d3:b9:66:e8:0b:86:c9:6b:b6:53:78:ba:7d:
                    10:c3:e9:67:2c:df:7d:ae:4d:ee:0c:94:80:88:c1:
                    4c:78:3c:16:f5:70:01:76:64:e9:b4:cb:ef:ed:62:
                    2e:60:fc:6e:dc:48:02:ec:38:ee:57:0b:ab:7b:ba:
                    62:0f:01:93:20:b2:01:49:5e:53:58:0a:c4:9d:60:
                    73:f9:2f:04:ff:52:26:45:9e:78:38:de:66:87:0d:
                    a8:40:36:ed:d6:7a:05:73:bd:b4:58:da:89:b3:c6:
                    54:5a:92:7c:1e:45:a7:a4:d9:b2:53:75:65:a8:ff:
                    9e:1c:e2:79:8f:78:22:3e:ac:0f:39:6c:ba:b7:f0:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8B:48:77:50:BF:47:70:4D:1A:A7:54:19:77:35:AC:A6:33:F5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:57:72:d0:1d:6c:65:22:5c:73:1a:0b:d8:73:56:40:73:
         9a:14:65:1d:66:e5:2e:ba:db:7a:d5:1f:47:74:9e:c3:80:ef:
         96:2c:65:9f:3b:fd:dc:da:10:10:7e:b0:98:75:f3:e1:47:df:
         6b:da:cd:8c:a5:0b:f7:46:05:00:69:22:dc:69:da:e6:29:8c:
         73:c1:95:c6:2a:b3:6b:92:96:a9:b5:43:a2:f7:fe:fc:ac:17:
         27:19:d2:a6:d1:ec:11:9a:8d:b3:bf:d0:bb:2b:bf:af:3e:4c:
         34:34:d5:16:8a:fa:73:ad:fd:ae:a4:56:27:1e:41:29:e3:55:
         5e:0a:9e:e3:6d:4b:69:d0:20:8d:6a:67:69:16:5c:d6:81:42:
         04:20:80:fa:4d:de:03:3e:ba:ce:45:f2:b7:2f:29:a8:bd:3c:
         02:bd:cf:1f:2e:38:b1:86:3f:75:bd:fe:d7:14:3d:60:e1:27:
         3f:d4:26:c9:05:a4:93:4b:9c:61:df:b5:8d:03:78:5c:5d:28:
         20:af:ad:8a:c2:56:5e:76:ec:8c:d5:bf:1c:09:97:67:ff:0a:
         e9:41:9a:67:00:1d:45:a1:b9:47:8e:c1:f1:16:25:25:d1:2c:
         28:f6:29:dc:47:77:66:9b:94:9a:8b:95:11:eb:7b:12:1c:9b:
         a3:c1:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:40 2026 by rpki-client