Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b03c4c5-94ad-3a46-aeb4-035988c3da72.roa
File:                     7b03c4c5-94ad-3a46-aeb4-035988c3da72.roa (raw, json)
Hash identifier:          /h47J9ObwHim0cyppVgAZx9w/m1zvgpJ0OsM+TU3onE=
Subject key identifier:   D6:55:FE:FB:11:76:9D:28:9A:48:0B:0F:4A:8C:91:4C:3A:AE:CE:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E210FD905D9A06C0FE4CC2E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b03c4c5-94ad-3a46-aeb4-035988c3da72.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     36183
IP address blocks:        172.225.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:d9:05:d9:a0:6c:0f:e4:cc:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=c550ca97-1cf0-4dc6-9233-cc3bf0a056be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:04:9d:7c:3f:1a:6c:74:a2:76:87:04:05:
                    c0:3e:bd:2f:13:72:eb:b1:be:65:e3:24:6c:81:e6:
                    8d:fe:2d:9c:c0:5f:9c:b9:e4:10:9c:c7:6d:a8:f7:
                    23:44:96:e5:13:48:32:ce:7f:c9:85:72:01:7d:ae:
                    41:e3:34:7c:76:32:d2:40:a1:c8:cd:93:20:3c:da:
                    17:0e:05:1c:3b:a4:9a:06:92:29:e4:8a:a8:87:9b:
                    52:64:0a:ed:b0:e3:b5:23:24:be:08:0f:e0:8e:bc:
                    ff:fd:36:7b:4f:2a:b8:08:05:2d:74:d0:6f:e4:df:
                    8b:80:64:a0:9e:ab:4a:aa:5b:5d:c3:62:f0:8f:1f:
                    1e:4c:df:3e:c2:14:cb:5c:0b:4b:ea:dd:e8:bc:48:
                    6b:64:a8:2a:27:24:62:a8:16:32:54:5e:38:06:54:
                    16:3b:cf:f2:87:e6:b8:c1:20:aa:32:6d:a3:ee:36:
                    a2:8f:f9:c9:8f:9c:8b:b2:14:5f:61:ff:3e:3b:3a:
                    59:51:ec:1b:33:46:45:74:e6:3b:ff:bf:93:40:20:
                    bc:6c:11:cd:a6:47:07:3c:7d:36:4d:95:59:ab:13:
                    b8:38:eb:bb:56:92:0a:49:f2:bf:72:27:7e:68:d7:
                    11:2d:a4:a7:e2:58:ec:f6:60:2c:20:cb:46:72:b4:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:55:FE:FB:11:76:9D:28:9A:48:0B:0F:4A:8C:91:4C:3A:AE:CE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b03c4c5-94ad-3a46-aeb4-035988c3da72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:7b:19:6f:97:15:2d:e2:88:82:50:49:37:97:ed:40:ab:
         38:06:f9:fd:3f:b7:04:dd:43:89:df:75:d0:b0:36:11:f4:2e:
         70:04:c7:7a:5b:fd:3d:d1:d2:ee:a1:ae:70:9a:4c:28:2e:e7:
         4c:e8:3b:1d:4c:bd:49:4d:8c:99:cc:e9:7c:a0:1e:b2:4e:a7:
         44:1e:c0:cb:03:f9:d5:8a:a6:ca:8e:90:47:87:8e:93:54:7a:
         ad:ce:82:1b:3e:e3:c5:b0:f5:76:4d:d7:40:c7:14:03:b8:3b:
         72:07:18:bf:f1:17:41:dc:70:39:c9:45:57:3c:3b:c2:27:ed:
         cc:5e:db:c6:2c:1c:e1:eb:9d:1c:54:bf:b5:57:64:ab:e1:e2:
         76:90:cf:78:79:17:19:26:3a:fe:e2:98:06:d3:4d:c8:07:06:
         f4:dc:55:79:92:65:81:b2:8f:d3:13:db:b2:13:1b:53:89:9d:
         c0:61:00:23:dc:f2:4f:72:46:40:ae:91:78:d3:69:5f:9e:1f:
         38:75:2c:54:64:f5:eb:e4:c8:6c:36:da:a3:73:7b:23:df:2f:
         3e:fb:54:ff:1b:03:34:34:f1:7f:b9:6b:ba:5c:10:9f:19:4e:
         05:c8:77:5f:a0:95:11:de:e6:78:d1:1c:a6:7a:c6:fd:5e:da:
         73:08:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:59 2026 by rpki-client