Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f7b26590-e694-357d-8127-ee8f83901870.roa
File:                     f7b26590-e694-357d-8127-ee8f83901870.roa (raw, json)
Hash identifier:          HKbWwe9OJ8mfFzAjAsf5jxtYyMvjXGTYHVzrsi+Jzuc=
Subject key identifier:   67:F3:6F:DB:65:52:3C:90:9F:44:F0:1B:AD:F9:06:9E:47:0A:4E:C0
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584FA2C886E0C9B98033E65EBC00
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f7b26590-e694-357d-8127-ee8f83901870.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     17941
IP address blocks:        107.155.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:86:e0:c9:b9:80:33:e6:5e:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=2b1ff8a0-dd0c-4877-bc96-2f4d90118582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:96:f8:f3:40:69:93:f3:83:aa:0b:df:51:
                    f7:a5:5d:26:2a:f6:8f:38:0f:6e:cb:c5:8d:06:aa:
                    a3:ab:3d:07:64:18:bc:fe:0b:70:74:d4:a4:3a:2f:
                    93:d0:86:3a:d2:2a:a4:50:04:f5:59:9e:ca:3d:97:
                    a0:79:2f:61:5e:60:01:ea:f3:3e:cc:f0:b9:7e:4f:
                    eb:b7:70:6f:1f:d0:51:b1:19:57:b7:cd:3f:d0:86:
                    e5:80:03:13:4b:b3:5c:93:12:52:03:d9:96:22:b5:
                    86:71:76:8f:ab:64:a6:3d:06:06:15:f2:f9:25:1b:
                    09:0a:b4:13:96:e1:b2:70:be:21:55:31:3a:56:f7:
                    9f:da:7d:01:29:34:40:e2:e2:43:98:b5:b3:c0:2d:
                    55:f4:00:b9:12:08:db:b5:e4:38:70:df:bf:49:28:
                    9e:1c:33:7c:67:5f:eb:2c:aa:2a:ea:36:24:fe:b1:
                    19:3a:01:4f:91:2a:8c:9e:be:07:a4:be:bd:8c:d8:
                    79:b5:73:cc:ce:e9:d2:6f:74:ba:2a:22:6a:82:fb:
                    b4:4c:ca:aa:d8:38:34:32:fc:3b:39:33:21:1c:37:
                    6f:6b:ef:f9:cd:a5:85:88:ee:9a:37:fa:ad:b1:e8:
                    18:0c:40:20:2f:55:b3:36:9c:55:d6:9f:f5:3a:06:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:6F:DB:65:52:3C:90:9F:44:F0:1B:AD:F9:06:9E:47:0A:4E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f7b26590-e694-357d-8127-ee8f83901870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:27:c1:03:a0:41:a4:ba:73:26:ad:8a:53:a3:1b:e0:31:2a:
         f6:fb:ae:d8:fe:f3:30:11:f1:75:c4:84:46:83:59:dd:22:21:
         c4:96:be:bd:6a:d1:a6:81:0c:24:f9:1c:c8:e6:bc:ac:b2:eb:
         25:d0:3c:92:01:53:da:d9:0e:fa:25:b6:a5:1f:7a:38:ca:d1:
         7b:0f:f5:89:60:22:e6:52:dd:79:26:35:a2:4a:45:10:8d:86:
         73:12:3d:cb:a1:66:5d:20:99:70:3e:a1:0d:df:0f:34:ed:28:
         67:85:b9:ec:4e:d4:32:c7:c9:89:5f:8c:1e:6f:61:20:72:3d:
         d0:7f:93:52:82:cf:f0:04:03:37:ba:d7:d2:8a:50:01:ff:9e:
         0f:a8:6e:b4:10:6d:25:55:05:74:01:c3:3e:b9:43:97:2c:2f:
         05:5e:c5:4a:ba:77:a9:da:2b:6c:87:9d:9e:b3:d7:b0:0e:2c:
         a9:2d:d0:f7:7c:cd:f3:c8:87:88:7a:bf:6b:80:92:00:ef:37:
         8a:50:c6:8c:f4:9c:07:81:b7:7d:c9:96:57:4f:c1:22:fe:f5:
         54:79:99:71:18:b7:b1:40:47:01:da:6b:78:a8:2a:32:bf:c4:
         a5:fd:29:98:d3:a2:ab:d0:56:08:99:6c:65:21:68:aa:ea:7a:
         f1:18:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:01:25 2026 by rpki-client