Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cb77d810-a2cb-36b1-9177-f7a605865559.roa
File:                     cb77d810-a2cb-36b1-9177-f7a605865559.roa (raw, json)
Hash identifier:          ya1AAaLm5fH0iUoZDOoNzBEfPalQ+6j+ljP9QfkmcCY=
Subject key identifier:   33:AD:5E:44:75:1F:1B:DB:2B:74:83:48:5B:A5:0D:DE:35:26:08:5C
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584E422B3C9305DFFC6C38D151C0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cb77d810-a2cb-36b1-9177-f7a605865559.roa
Signing time:             Mon 22 Jun 2026 17:38:59 +0000
ROA not before:           Mon 22 Jun 2026 17:38:59 +0000
ROA not after:            Sun 20 Sep 2026 17:38:59 +0000
asID:                     31898
IP address blocks:        162.222.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:2b:3c:93:05:df:fc:6c:38:d1:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jun 22 17:38:59 2026 GMT
            Not After : Sep 20 17:38:59 2026 GMT
        Subject: CN=5942e0b8-08f0-42c6-9e57-628322f42a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:d1:60:7f:8d:63:fc:08:86:9d:8c:62:61:
                    03:2d:54:d4:44:51:fb:ea:e8:6b:f8:95:20:59:b5:
                    74:12:1f:62:05:e9:73:60:f1:41:fc:1e:d1:7a:54:
                    1a:bc:05:0e:aa:fc:21:7c:a0:09:90:be:f8:0d:09:
                    c1:5d:f7:bb:33:cc:72:80:31:a9:1e:fe:ed:e8:20:
                    64:2b:11:1a:07:84:3a:d1:a0:f2:4c:28:da:65:dc:
                    59:55:56:c6:1b:e9:5a:3a:1c:11:c2:4c:c0:69:3f:
                    51:68:ea:85:2b:46:05:81:b3:47:31:63:0a:2b:01:
                    46:82:77:6c:cc:1f:3d:6b:27:0e:27:ab:b8:52:f8:
                    be:1b:6e:85:4e:ee:b7:2e:03:89:be:b3:90:69:6a:
                    7b:c6:f2:fe:da:1a:be:8c:dd:92:bb:8e:28:cb:ad:
                    44:72:bd:0f:4b:cf:ee:b1:ea:02:6b:f8:41:d5:25:
                    3e:80:2d:d5:3a:86:58:55:15:79:72:ff:59:2c:8c:
                    2e:c9:f7:fe:0e:af:8c:ae:34:7a:22:8f:aa:8d:18:
                    db:3e:c4:05:18:6a:08:cf:58:d1:c2:5f:c1:ee:b5:
                    b9:5a:02:53:78:18:3a:91:96:95:2a:4f:90:b0:5f:
                    26:53:00:15:48:a9:5f:01:cb:6a:b2:f6:83:0e:1d:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AD:5E:44:75:1F:1B:DB:2B:74:83:48:5B:A5:0D:DE:35:26:08:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cb77d810-a2cb-36b1-9177-f7a605865559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:55:72:98:86:30:12:f6:85:9c:bd:6c:10:56:a7:42:14:d8:
         a8:0b:34:a7:8c:ae:52:6b:04:49:5d:7f:15:a9:7b:48:81:18:
         65:4f:f0:ab:d3:57:b9:1d:b8:94:18:a9:27:c1:8d:ca:fc:19:
         7b:19:bc:17:bd:bf:31:25:86:55:06:41:01:47:fd:98:27:62:
         62:05:6f:be:30:d4:95:d0:76:c6:b5:e0:20:fb:b9:11:4b:bb:
         63:96:45:f4:5b:df:29:eb:85:f3:82:41:78:6d:c2:e6:78:d6:
         95:25:68:3a:69:ee:e4:e0:fe:72:b5:78:bb:e7:48:27:20:09:
         76:fc:08:f9:24:8d:8c:89:72:63:89:32:7b:a3:e7:73:73:da:
         59:a2:52:12:03:32:9b:48:44:a8:42:50:a4:f4:ab:19:31:ea:
         99:8e:32:29:4f:cb:8c:34:7f:ba:e2:b6:19:75:89:6f:57:0e:
         6e:28:3b:00:31:54:53:89:5e:05:b0:a4:5e:d7:3b:a1:b8:60:
         ad:08:0d:a6:38:7d:5a:c7:e6:1b:76:85:20:91:ce:6b:fc:ae:
         88:45:7f:46:ea:4b:0f:68:09:e4:ef:46:1e:28:40:15:73:a0:
         6d:4b:2d:05:67:a3:97:e3:da:fd:3d:00:6f:b2:67:03:f2:35:
         ed:e3:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:30 2026 by rpki-client