Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/54dbaed3-865a-3b47-ab26-a1b7778cff69.roa
File:                     54dbaed3-865a-3b47-ab26-a1b7778cff69.roa (raw, json)
Hash identifier:          cZ5xFYFJzlWh0FGATd8w0b4NTYlFnaZDhqXV//fIjis=
Subject key identifier:   DA:AB:82:96:DC:6F:95:9E:87:AB:DB:1C:D3:0B:95:11:A9:74:BD:A3
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EA78722BB56AECF46F722D788
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/54dbaed3-865a-3b47-ab26-a1b7778cff69.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        173.44.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:22:bb:56:ae:cf:46:f7:22:d7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef433ddc-7742-4fa8-b2c9-1c5fe704c942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:59:fe:ab:7d:11:85:8c:f9:6e:28:ce:17:
                    ce:e3:52:06:6e:aa:f7:08:a0:4c:ca:cb:c7:ff:73:
                    ce:17:e7:c1:4a:88:fe:aa:11:9e:b7:6e:17:6f:0b:
                    4f:ac:57:ee:05:44:be:fa:6e:4e:4a:87:af:67:59:
                    64:61:70:fa:2c:70:1d:7f:71:95:82:d2:8c:ab:f9:
                    ed:ec:ab:33:d9:94:77:d2:bc:70:3c:bd:25:56:ba:
                    e8:9c:ec:00:30:36:34:5c:16:ea:5c:bd:93:b6:12:
                    87:13:7d:c6:dc:5f:6d:9d:a5:c5:f8:37:27:6a:26:
                    32:c7:4f:f1:12:e8:b5:d5:b3:84:32:18:7b:c7:8c:
                    88:25:43:7b:45:b0:cf:09:f7:70:c0:63:aa:f5:d3:
                    9e:89:00:e8:ef:6a:ba:b3:25:81:ca:c0:42:f0:fe:
                    c9:fc:07:6a:d6:af:12:00:1f:af:81:a5:cd:60:14:
                    e0:33:88:39:49:15:ac:2f:ae:4b:d1:0d:13:40:45:
                    d4:17:15:a8:8d:58:3c:ee:a6:05:2d:49:39:70:1e:
                    af:d2:9f:4b:6e:0b:ea:78:21:1a:0a:47:c9:ca:d2:
                    4b:64:41:ca:d0:c7:cc:99:de:e6:dd:11:77:ac:46:
                    bd:87:79:46:ad:2d:7c:40:9e:26:35:ca:d1:60:0b:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AB:82:96:DC:6F:95:9E:87:AB:DB:1C:D3:0B:95:11:A9:74:BD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/54dbaed3-865a-3b47-ab26-a1b7778cff69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:16:ea:96:32:e5:e7:10:d7:57:8b:c2:25:e9:cf:a3:b5:
         0d:0a:6d:1b:01:a8:c8:5c:b7:25:e5:0a:90:fa:74:f9:95:24:
         88:12:cf:b6:53:5b:3d:89:ab:71:9c:3a:6a:3e:f1:8e:40:6d:
         c6:06:fb:0a:a5:f9:81:a9:ab:d5:e8:93:97:ad:d9:6e:55:95:
         2d:12:4d:58:8f:eb:7c:6b:08:df:5b:40:68:5b:90:cc:73:ec:
         d2:55:b8:88:14:fe:f7:f4:9f:a4:28:66:4f:58:f7:46:d6:e9:
         69:79:e8:ed:a1:11:1d:9c:d2:61:91:e9:59:24:6b:fb:8d:eb:
         5b:f0:40:f3:4b:b9:4e:21:f5:b0:5c:fa:7c:f4:ce:62:4e:af:
         85:78:29:ed:f3:05:0e:96:40:78:09:32:07:a9:ee:40:91:0e:
         27:8d:58:16:6c:13:19:de:82:72:4b:d2:ad:c0:ab:89:e5:20:
         f7:18:d4:a5:f8:c5:0c:c4:06:0a:3e:58:a5:2e:ef:f2:cc:09:
         5b:23:70:aa:b7:1e:6a:25:92:83:93:f8:1a:72:f0:c8:fa:0e:
         2c:df:5d:bc:75:c2:d1:64:ff:b1:04:c6:7a:5f:24:03:8b:83:
         58:39:76:1f:c1:d5:3e:98:cc:01:31:ed:49:65:36:5b:4c:5b:
         5e:f4:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:21:53 2026 by rpki-client