Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa
File:                     393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa (raw, json)
Hash identifier:          hyFI+2vQ1KIY2+gb7NU9yt0kGCe+vSzRpAVjqZaHVUs=
Subject key identifier:   2F:5E:75:AD:86:CA:C7:B7:AF:5C:46:6C:8F:E6:22:73:E6:E2:15:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EC20C72F9C03D5CD5A7F09650
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     36183
IP address blocks:        172.225.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:72:f9:c0:3d:5c:d5:a7:f0:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=2f739bd9-6971-426c-be69-5a08022e4b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:0a:23:74:79:99:63:14:27:8f:27:de:6d:
                    9d:2e:59:e0:ef:89:7a:f2:98:ff:e7:05:f8:f1:d7:
                    71:38:da:93:0f:18:12:fc:65:0c:60:cd:d3:63:f7:
                    98:81:0d:ca:44:44:bf:71:8c:06:a7:af:2a:ff:02:
                    96:29:b4:f0:27:85:bf:bc:6f:a3:29:6f:1f:37:5b:
                    de:03:2d:38:ac:4f:6e:fd:bc:70:ad:e5:66:9b:50:
                    a4:9a:02:01:75:7d:30:1f:6c:cc:31:f3:38:ae:a1:
                    2a:2f:5b:00:f7:a6:df:af:7a:19:52:12:fb:62:0d:
                    6d:32:3c:da:74:e3:43:9d:15:51:d7:37:3d:22:4f:
                    45:12:85:23:eb:3f:ac:15:2a:a9:a5:6b:03:e7:f9:
                    29:59:3f:53:4e:4c:8f:ea:8f:01:37:d4:76:0b:af:
                    72:ed:63:6f:e4:1e:59:0a:d9:28:70:64:7f:48:1e:
                    04:1d:56:1c:af:34:28:5e:a4:f7:25:7b:d2:7e:17:
                    27:b9:04:43:a0:ca:16:46:fb:27:39:83:c9:a5:1a:
                    73:9b:d6:0c:18:0a:60:74:0f:f3:2f:7a:e7:be:09:
                    d5:75:e0:73:2c:87:f4:e9:33:21:35:a4:6e:fb:fe:
                    bd:5e:f6:a1:a9:4d:3b:21:1a:de:7c:62:71:b5:3a:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:75:AD:86:CA:C7:B7:AF:5C:46:6C:8F:E6:22:73:E6:E2:15:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/393d7f86-72e1-38cd-8eeb-8b9f3e961ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:fe:ac:06:21:5d:fc:40:7d:20:b1:07:d4:9c:8d:bc:c7:
         b5:99:95:4e:c2:75:5b:30:1a:33:e5:d8:0b:dc:ec:2e:43:eb:
         4f:83:18:a4:d2:74:cd:1c:9a:3f:f4:6f:fa:e3:52:72:e8:c2:
         1f:6a:3c:17:49:64:63:18:5d:fc:89:0b:b0:11:5d:68:5b:1f:
         86:0d:8e:72:7f:22:58:e7:ec:b9:ed:fd:67:27:50:7c:51:4a:
         b0:91:b0:65:07:01:40:e9:6c:d4:1d:e9:79:86:76:b0:0b:f1:
         1e:2d:1f:6a:24:75:7f:f1:85:b5:06:ff:8d:53:cf:ea:be:d0:
         e5:5e:ff:b8:8f:4f:48:9a:b4:c3:9d:bd:1f:7a:cb:12:2b:aa:
         65:05:12:82:c9:0b:b5:6f:79:00:db:72:0d:97:b2:78:f5:5e:
         3a:7b:bc:58:4a:c9:15:ea:a2:7b:c7:56:ff:e6:bd:e9:b7:26:
         61:bb:78:3f:bf:3b:2c:b6:b6:3b:f7:cd:eb:03:7d:28:de:69:
         60:00:77:46:21:bf:8f:71:b3:04:5e:db:0c:86:68:1f:dc:7c:
         39:cd:fe:5f:d9:b3:3c:3b:36:65:69:31:88:74:52:7d:04:a3:
         65:cf:10:fc:3d:32:de:95:50:c4:06:a8:05:af:a3:fc:ac:9f:
         42:74:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:45:36 2026 by rpki-client