Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/d8f53276-4396-332d-b6bd-13bd5f560dc7.roa
File:                     d8f53276-4396-332d-b6bd-13bd5f560dc7.roa (raw, json)
Hash identifier:          fzyKJJTOc4M32aRDQKr+Mj7SSwTwnbGZneasMPb1mqg=
Subject key identifier:   3B:25:72:6C:20:6E:35:E1:83:B3:88:CA:FB:63:5F:9C:F3:62:46:68
Certificate issuer:       /CN=bb5c56f4-a742-4d7a-836d-03eb4bf08f38
Certificate serial:       010D0C9F4328584EA79B1DAE14DEE41CCD3DAB10
Authority key identifier: 80:84:01:5A:0E:FC:78:85:59:79:96:5D:6B:81:19:D0:42:04:D3:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/d8f53276-4396-332d-b6bd-13bd5f560dc7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401754
IP address blocks:        208.122.31.0/24 maxlen: 24
                          2602:f617::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:1d:ae:14:de:e4:1c:cd:3d:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb5c56f4-a742-4d7a-836d-03eb4bf08f38
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=18a4b62f-47d8-4c2d-8dff-32bb02a89338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:17:86:3c:b9:ae:d3:ed:fd:f3:14:15:a8:
                    4d:3a:87:64:4c:ba:bb:18:f3:bd:19:61:08:b9:4a:
                    23:df:c6:d7:79:08:2a:93:0e:8e:6d:c4:c6:46:c8:
                    34:87:86:11:3a:c8:ac:5b:c7:81:ca:20:5c:48:f8:
                    bf:78:57:ae:9a:e1:72:c7:a0:4c:5f:9e:76:b6:a4:
                    fa:22:da:03:57:0d:ca:e5:fd:77:31:81:9e:16:e0:
                    3d:09:03:5a:a7:84:73:22:04:fe:3a:de:23:10:b9:
                    59:38:21:51:b8:c2:69:b5:71:e4:cc:e6:47:61:1b:
                    59:ef:5b:af:fc:11:b4:fb:d6:e7:75:9b:76:e8:76:
                    50:1b:21:c3:c0:a9:2e:7d:7b:b9:5e:51:8d:cb:a3:
                    33:1e:9c:59:0d:1e:67:1f:44:fe:0a:a9:a1:09:7c:
                    83:7e:5a:77:44:54:7e:fd:c0:0b:38:10:80:4b:d8:
                    7a:f7:f5:17:b9:30:9f:a6:d2:25:a9:ad:dc:1a:4d:
                    c8:4e:d7:73:d1:ab:8b:f6:b3:20:c9:e2:1c:f2:b8:
                    b9:cf:ad:b6:d1:49:28:7a:7a:5d:25:56:58:84:68:
                    e6:79:9d:4f:0f:9c:b3:85:52:0b:16:2a:b1:83:be:
                    f5:10:29:96:9e:ef:22:0e:9c:1c:8b:5e:a0:7c:ab:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:25:72:6C:20:6E:35:E1:83:B3:88:CA:FB:63:5F:9C:F3:62:46:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/d8f53276-4396-332d-b6bd-13bd5f560dc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.crl

            X509v3 Authority Key Identifier:
                keyid:80:84:01:5A:0E:FC:78:85:59:79:96:5D:6B:81:19:D0:42:04:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.31.0/24
                IPv6:
                  2602:f617::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:96:f8:bc:49:03:1d:94:63:88:99:39:c9:9f:e0:2f:1e:11:
         5d:8b:b4:5c:4a:69:80:5f:ef:4d:54:4d:e6:f4:88:82:6b:53:
         2a:4a:89:08:e3:f1:00:15:f9:7d:be:36:31:92:9d:3b:dd:3b:
         ff:9d:01:f9:3d:1f:e9:6b:e1:6a:7f:c8:6b:41:80:8a:ad:ef:
         df:c8:57:b3:66:65:ad:43:db:86:a6:78:ad:70:e1:d7:12:d7:
         36:b0:a1:6c:da:b5:52:32:04:b0:23:82:0b:bf:c1:6a:c6:b8:
         ee:31:48:09:11:6e:69:1a:99:58:44:02:0b:3b:a2:6e:ad:8f:
         10:c8:08:1e:27:0e:86:57:33:6e:f6:b2:fd:ff:25:d7:06:5c:
         ca:77:30:2e:ed:2b:a6:1c:fa:c2:0b:21:d4:d4:b6:59:b5:a6:
         c1:9e:0a:8b:56:79:c3:60:ae:da:ac:70:47:28:d6:2b:f3:4f:
         b4:3a:b5:59:8f:8a:a6:00:51:c3:af:5f:cf:90:0b:50:d5:f2:
         ac:e5:c4:50:a0:50:24:3c:60:61:3f:7d:20:a2:15:c8:65:28:
         df:14:bd:7f:d9:e5:25:b4:15:da:b2:fc:86:33:2a:58:7a:7c:
         19:6e:08:ef:6b:9b:63:ec:0b:51:d7:1d:ef:7d:7a:1c:5d:24:
         f5:e1:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:51 2026 by rpki-client