Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7bdb138e-f133-35f7-aafc-98f7d4428755.roa
File:                     7bdb138e-f133-35f7-aafc-98f7d4428755.roa (raw, json)
Hash identifier:          42BnQ9FNC6NjwXcCtaNRkbNQfvlNIAPslxdQGte+M9Q=
Subject key identifier:   48:5C:9F:94:4D:95:43:BA:0A:9E:BF:D7:E1:9B:EB:B8:97:2E:6F:28
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584EA44515C89F51F4B1A8F11D00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7bdb138e-f133-35f7-aafc-98f7d4428755.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        170.114.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:15:c8:9f:51:f4:b1:a8:f1:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=6b918864-1ee8-4543-aeaa-69ac99ce701e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:ee:34:0e:7a:2e:63:d0:03:33:85:89:68:
                    a4:5b:df:9a:b6:d6:50:58:48:e2:81:a3:89:03:fe:
                    15:d0:6c:e6:59:ea:f9:b2:51:12:fa:d8:26:33:a3:
                    49:08:f4:e2:8c:98:e6:81:30:34:4c:f5:64:a7:4d:
                    ba:f0:2b:65:68:fc:61:4d:2b:84:00:88:47:8e:67:
                    1a:46:61:35:75:84:a4:e2:d3:18:7f:b3:d0:f3:c4:
                    2c:97:fe:dc:b9:20:77:36:42:f7:5d:a4:c1:bd:bc:
                    de:e3:62:93:54:61:a1:9c:2f:a2:1b:3f:4b:6d:51:
                    fe:00:ee:25:7a:7a:63:ac:28:ad:31:61:a0:33:9e:
                    26:84:10:8d:64:a5:e4:a2:8f:00:0c:d7:a8:b8:af:
                    86:0b:b5:37:af:23:cc:17:aa:f1:22:fd:e4:df:89:
                    56:6b:0e:87:f6:78:90:c9:fc:8b:a1:5a:1a:42:4b:
                    06:3f:c6:fc:fb:47:45:ec:1b:60:c4:3f:d6:ec:8a:
                    70:2e:e9:2c:b7:4b:d4:c7:db:08:ee:76:1a:cb:cb:
                    68:45:68:62:89:84:7a:90:2c:a1:53:83:76:bf:75:
                    0b:6a:c6:8d:36:8a:5f:e4:3a:c0:7d:cf:8b:72:53:
                    f9:e2:2b:97:11:a7:09:7c:d2:60:40:33:a9:f1:34:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5C:9F:94:4D:95:43:BA:0A:9E:BF:D7:E1:9B:EB:B8:97:2E:6F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7bdb138e-f133-35f7-aafc-98f7d4428755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:24:94:85:2d:35:88:52:73:ff:66:6d:4b:b8:39:02:14:
         1a:2f:32:30:c7:a4:e8:15:46:5d:44:6b:fb:ea:31:1f:96:1c:
         49:b4:e4:78:64:77:3b:66:aa:15:48:12:5d:70:1a:ca:0f:83:
         c5:95:80:84:a1:ca:fc:c2:82:10:d4:f8:49:ce:76:27:1b:08:
         d5:cd:fb:aa:c9:7e:19:c8:61:38:77:de:92:f2:ce:b7:d7:3a:
         10:73:b6:00:b8:db:ba:3f:52:1e:55:ac:a3:5c:25:e5:32:b2:
         e4:f3:b7:c6:94:e8:fc:72:72:8f:d7:b9:dd:72:66:26:e9:c5:
         06:e4:fa:8b:f8:b8:f0:a7:95:1d:2f:8a:76:12:9f:04:53:0f:
         c8:ff:7b:24:80:2a:2a:d2:99:07:b2:7f:c6:e1:f5:09:12:5e:
         e2:a6:ae:b4:51:70:69:7b:87:55:df:a3:77:79:b6:9d:05:a0:
         62:c5:97:4b:50:9d:0b:6a:df:89:b9:b2:60:eb:7c:d1:f9:d5:
         7f:84:b9:c2:1c:4a:a3:f1:53:03:48:65:e4:aa:44:ab:67:cd:
         2d:cc:db:67:7a:bc:82:0a:e5:aa:55:b1:a4:3b:8c:40:17:fc:
         82:a6:16:36:27:70:53:d8:a4:56:f1:2e:d2:81:69:34:1b:c5:
         e2:28:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:45 2026 by rpki-client