Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/86bb24f2-e1bc-3eca-bb39-b32f36b6b831.roa
File:                     86bb24f2-e1bc-3eca-bb39-b32f36b6b831.roa (raw, json)
Hash identifier:          dqORS7y9YUkzdIlC1BWQ62qGOprs25rHSi5X135aKXo=
Subject key identifier:   4B:1D:88:CB:76:31:32:A9:56:1D:90:E2:9B:06:1E:71:94:04:C6:57
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584EA798BD50428737A56A3026C0
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/86bb24f2-e1bc-3eca-bb39-b32f36b6b831.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400110
IP address blocks:        184.169.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:bd:50:42:87:37:a5:6a:30:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a962bc5e-9bdd-4dab-9346-b0e4de7d1ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:71:c9:05:f0:6c:8a:80:32:47:82:a8:1f:
                    5e:55:7a:34:44:b0:a1:5b:1b:44:c6:88:4c:a3:93:
                    de:a6:03:2a:95:2b:1a:74:6b:24:51:b5:3e:ef:e5:
                    a9:ca:de:ed:0c:ae:70:b4:f5:3c:41:bf:77:69:d6:
                    78:da:3e:89:ea:c1:24:21:21:ad:fe:9c:9e:c4:7f:
                    bd:7a:bd:2a:4c:45:ec:5d:b0:86:46:c2:1c:b9:b9:
                    e8:a9:67:68:0d:b7:b0:02:f5:16:e5:52:94:ad:00:
                    54:58:60:f3:86:b8:a3:c5:48:cf:90:18:8b:53:22:
                    83:16:de:b0:13:72:2e:c5:d8:37:e8:dd:69:48:9f:
                    ea:17:98:0f:84:37:2f:86:73:a0:47:75:20:16:cb:
                    c2:fa:40:92:f2:97:09:5f:79:db:ef:02:22:43:75:
                    88:41:cb:75:dd:17:f6:cf:f6:40:ae:ff:77:56:79:
                    e2:47:5d:15:19:fa:93:7f:b5:95:e4:a6:27:68:70:
                    0f:48:dd:d7:0d:d7:93:d6:c3:67:c9:0a:6a:54:24:
                    50:df:1a:fe:d3:36:45:0b:a6:93:0a:4d:54:be:e2:
                    3f:50:90:84:ea:6e:86:86:03:d8:0f:58:cf:8b:57:
                    00:de:8b:38:8d:f9:63:4b:55:94:75:a2:6d:e6:4a:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:88:CB:76:31:32:A9:56:1D:90:E2:9B:06:1E:71:94:04:C6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/86bb24f2-e1bc-3eca-bb39-b32f36b6b831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:71:33:25:d6:86:74:39:7f:47:4b:92:06:bc:5d:d3:2d:9d:
         67:92:62:f0:a6:72:cf:65:33:2b:1a:2c:0d:f8:ee:2c:1d:7f:
         8d:31:3e:32:0a:f4:ee:f3:bc:8c:cd:af:fb:33:d6:ab:24:4b:
         28:b3:8b:6b:ab:37:49:b5:db:71:90:3a:8b:61:70:ef:27:89:
         75:fc:e7:92:fb:69:54:16:5f:74:01:a7:33:e8:82:4d:95:da:
         10:87:dd:38:df:7b:4f:03:08:a5:97:68:fb:f9:2d:3f:d4:be:
         e2:37:2c:c4:49:da:91:02:45:fa:f1:4e:91:fa:53:50:81:8e:
         36:cd:bd:ea:f4:c5:c2:db:fa:16:cf:c5:7c:91:62:cd:f5:50:
         cb:16:c5:cf:68:46:d8:c4:31:da:cb:db:6e:5f:1d:87:16:05:
         15:1e:31:4b:c7:a3:20:a2:10:72:fc:44:eb:30:cf:aa:6f:02:
         cf:6c:cd:6c:89:24:72:8e:50:4d:48:bc:54:cb:82:63:e6:40:
         1a:a5:ac:63:d1:4e:2f:8a:75:3f:dd:29:70:5b:d5:17:37:95:
         c6:8c:19:46:ca:c5:1a:3f:6f:e1:15:33:05:f7:23:58:e9:56:
         b0:49:60:3a:11:7c:68:e7:fc:35:55:5e:24:55:28:6c:6f:57:
         cf:bf:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:05:35 2026 by rpki-client