Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa
File:                     04416291-d3d4-3bd7-a5e6-c378f705767e.roa (raw, json)
Hash identifier:          P5f4hn2IdXopnrAOe9lVay1W61e4Q5HTkOfjbcQrjIE=
Subject key identifier:   9F:33:48:9A:9D:BD:57:B7:DE:4A:1E:53:3E:53:CB:28:A0:E0:4B:A2
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584EA788C176F6ABAEF2A7E7AD80
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11377
IP address blocks:        216.20.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c1:76:f6:ab:ae:f2:a7:e7:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ff763c80-1691-4ddc-b688-84b1471adf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:45:ba:ae:43:c3:6d:d9:06:3a:5b:cf:26:
                    f2:fd:7e:e5:44:90:a1:da:7c:a5:8a:ad:c3:4d:cd:
                    b9:bb:76:5d:09:8c:9b:ce:17:a5:21:68:61:27:8f:
                    7c:36:7b:08:14:aa:85:83:37:e3:28:40:5d:19:59:
                    33:a4:32:7e:45:28:b6:6a:34:d6:55:23:d5:5d:bc:
                    58:1f:db:7a:3b:0f:4e:e7:07:a9:b3:65:0c:3d:d1:
                    06:10:89:b0:91:8a:8d:29:e7:ce:43:40:2d:45:91:
                    7f:0c:95:fa:f7:22:7d:fc:8f:4e:44:29:be:f7:d8:
                    98:a6:69:54:eb:b5:5d:0a:7e:65:8b:23:92:fb:3e:
                    ae:d2:6b:7d:49:b1:b0:66:ae:cc:ec:41:5e:5f:a6:
                    77:8f:29:ac:04:0e:7a:24:7b:7b:81:70:90:85:55:
                    94:3e:78:be:21:ab:91:4a:d6:54:d5:56:21:7d:04:
                    74:92:0a:d2:a6:64:12:9e:4a:fb:6d:8a:15:67:80:
                    0f:48:a5:84:7b:07:ec:ff:91:ab:99:74:0b:80:ff:
                    2b:8c:ad:14:da:e9:0e:2f:04:fc:1d:62:c1:7d:f4:
                    1d:7d:3c:c6:84:b2:ad:eb:e1:51:26:41:68:f1:61:
                    a4:b0:c0:b8:0d:d7:31:99:2a:40:aa:45:38:f8:1f:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:48:9A:9D:BD:57:B7:DE:4A:1E:53:3E:53:CB:28:A0:E0:4B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/04416291-d3d4-3bd7-a5e6-c378f705767e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:57:74:54:b6:6b:60:fc:8e:f4:12:9c:d8:72:df:9c:6f:
         06:e7:f0:f1:18:13:7b:94:49:3a:2a:67:21:d7:46:1d:71:eb:
         6b:70:78:a2:5f:56:0f:71:d4:a2:c0:3d:34:af:53:80:36:b8:
         cc:7f:b4:bf:45:f4:e2:50:4a:73:f0:65:b4:42:4b:9e:1d:88:
         9a:eb:b9:9a:e7:62:dc:32:52:ed:42:d8:8c:1d:11:ff:8d:93:
         ae:35:b0:68:5c:fa:8c:e3:a0:0c:68:40:2d:08:17:13:36:bf:
         1a:32:07:8b:06:bf:c3:3f:3b:d9:23:2b:89:c5:85:6e:5d:4c:
         0d:56:8d:35:0d:65:cc:e5:cb:bb:28:be:06:d8:d1:14:90:dc:
         ef:71:93:58:d9:df:e6:23:36:bf:62:23:a9:25:fd:1c:18:fb:
         89:de:83:0f:61:e6:1d:03:bf:f7:40:01:5b:f7:68:b2:19:12:
         1f:21:77:34:a7:48:99:87:a5:ef:32:cc:44:ee:bb:5b:9b:47:
         d8:bd:31:3b:22:b4:57:d7:78:89:c8:95:6f:0d:6d:2e:86:b8:
         70:51:23:83:14:a3:97:82:26:72:97:3f:61:99:7a:18:2a:1f:
         d5:28:34:f8:30:43:f5:45:20:e9:b2:ce:8f:aa:3f:bd:e1:50:
         39:e4:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:53:31 2026 by rpki-client