Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa
File:                     3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa (raw, json)
Hash identifier:          bV23hDaf5JnuW53k3M+FntnAoKnUq9DQaQfVP1DV5Gg=
Subject key identifier:   6B:15:4A:6F:A6:7E:14:FE:62:45:B2:76:CA:D9:AF:4C:D8:1E:7D:E9
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F4328584EA5AA71B075565291121D1340
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     397654
IP address blocks:        172.86.230.0/24 maxlen: 24
                          172.86.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:71:b0:75:56:52:91:12:1d:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=9f5aaa52-51cf-4edb-beed-35acde8b7474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:c5:bc:83:47:80:d0:30:9d:ad:65:46:3c:
                    3f:57:2e:48:82:5b:31:0b:b7:4c:c6:f8:ac:95:8c:
                    91:44:43:d5:c8:5a:e1:85:ad:6c:19:52:18:1c:31:
                    71:30:88:ad:aa:07:4a:ce:95:b7:53:9a:30:35:4c:
                    60:1f:04:f7:9f:da:98:cb:b5:6c:db:9e:ef:ff:80:
                    6a:bb:2c:f3:a8:c7:c5:ac:a1:5f:fd:3e:df:c5:e4:
                    20:b1:0f:a8:af:91:d8:7c:db:bb:18:63:c1:dc:2e:
                    7e:47:fc:3c:9f:01:a3:23:28:20:8e:19:97:b1:5a:
                    31:dd:e5:12:dd:6b:1e:d9:e5:09:e8:2d:c8:5e:39:
                    3a:35:ec:c4:b6:ea:ad:95:9a:16:e7:52:f9:fa:66:
                    dd:95:a3:42:7a:7d:bc:4f:2f:3f:6b:86:bb:e6:7a:
                    8c:00:43:e1:b5:9d:c8:52:bc:67:8c:18:b6:63:bc:
                    9a:86:38:42:11:e1:f7:4a:41:82:48:7e:a2:a1:9b:
                    a9:9b:6a:df:26:e3:86:44:c5:0b:d8:d6:34:c0:57:
                    8b:1e:5a:6d:77:05:76:f4:e9:d5:4c:10:f1:b6:9a:
                    5f:9d:7b:cc:45:6f:fc:5b:df:13:73:24:95:f0:73:
                    ee:fc:f8:11:96:f8:0e:a0:86:eb:63:c4:72:dc:b6:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:15:4A:6F:A6:7E:14:FE:62:45:B2:76:CA:D9:AF:4C:D8:1E:7D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:52:3d:49:91:89:8c:68:2c:0c:4e:7e:85:40:b6:c2:ee:51:
         f1:dd:a7:ed:e3:00:70:f8:60:d6:d4:19:8b:96:c7:3b:57:32:
         bd:f1:17:a1:11:e4:bb:96:d3:b7:62:1f:9f:43:81:0c:cc:99:
         23:63:1c:9c:01:f1:59:b9:e8:60:bb:b1:30:c9:d2:be:0b:03:
         24:49:e0:dc:45:71:b5:e5:f0:6a:3b:7c:36:70:49:4b:3a:9a:
         b1:d1:03:de:4f:e6:18:4b:24:e3:2f:fc:2b:47:aa:99:50:43:
         99:70:c2:dd:89:5a:10:90:8d:c6:ab:36:f9:aa:20:71:c3:f9:
         42:c6:37:6b:4f:b7:e2:0d:2d:61:72:dc:12:4b:45:26:a5:3c:
         0b:d6:ed:c9:ee:9c:d2:4d:9e:7a:7a:f8:a0:86:fe:ef:d2:65:
         0a:02:5c:77:37:ee:42:44:f5:22:07:93:d4:f6:6e:af:5e:89:
         2a:ce:40:f0:20:35:fa:a7:6b:0b:6d:6f:cb:19:6f:f7:93:da:
         71:cd:0a:82:0c:5d:88:68:85:a3:ee:cc:84:7b:cf:fe:96:15:
         b7:fa:af:22:86:af:84:08:82:41:92:c3:a0:9c:d5:d5:cb:05:
         41:07:58:92:27:50:9a:2d:1b:bc:c0:cb:d1:1e:8d:53:12:f0:
         5e:f3:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:34 2026 by rpki-client