Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa
File:                     89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa (raw, json)
Hash identifier:          /kOfO4DfO3tb4/teZCmbcE7vjxOzWz6Hp6PnxIDZqNI=
Subject key identifier:   BA:E8:18:FA:48:25:EE:63:C7:F0:90:17:06:30:EB:76:39:75:E0:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144C211A1DF5A9560830F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        174.163.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:c2:11:a1:df:5a:95:60:83:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=9508b69c-980e-466a-8499-e415805e5348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:3f:5a:db:69:26:4f:a5:a2:b4:17:fe:b4:
                    38:60:2e:41:bb:4e:90:86:24:73:49:d0:51:80:0e:
                    30:dc:98:ce:57:9f:d4:4e:d7:ad:13:b7:78:03:22:
                    d8:9b:80:68:c9:a4:86:e2:25:07:1b:65:4e:c3:d3:
                    90:18:cf:9c:16:59:7f:5b:47:c6:68:6d:78:4f:c5:
                    42:0a:3c:78:ef:5a:c4:5b:d3:85:2e:93:b8:a4:fe:
                    65:d8:37:15:14:a9:bd:07:75:33:db:e4:ae:48:69:
                    2e:b5:6a:68:52:9d:a9:18:54:d9:2c:e3:22:f5:ec:
                    19:28:d9:5c:0c:95:c5:b2:4b:ec:f7:e0:1a:7e:73:
                    30:1d:cc:85:ff:c9:6f:20:9f:ea:fa:59:dc:2d:37:
                    6d:4c:25:34:25:0b:06:f3:2c:07:86:1b:3b:9a:45:
                    d4:f0:9c:40:b6:aa:c1:84:7e:79:24:4b:46:cb:9d:
                    37:7b:85:ed:ec:5f:66:71:11:14:5e:ef:28:5b:32:
                    b0:5f:41:f0:88:44:d6:b8:6d:fe:1a:0e:5b:8f:36:
                    cb:33:98:f8:2d:be:3b:fa:c8:c4:3c:b7:91:83:06:
                    58:17:cf:ae:b1:c2:35:4a:e2:36:22:70:a3:e6:0d:
                    b1:68:ee:d0:b6:46:ac:a4:e2:3d:9d:f1:49:4b:8d:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E8:18:FA:48:25:EE:63:C7:F0:90:17:06:30:EB:76:39:75:E0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.163.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:44:fa:b7:7c:94:17:70:2f:ab:e0:ef:4f:50:dd:36:dc:
         7f:be:fe:1a:43:25:e0:a1:2d:1b:79:d0:d0:5d:1e:d8:91:05:
         3e:77:96:57:15:54:d6:91:c9:c0:50:3a:18:53:ea:a1:8c:83:
         fe:dc:33:34:16:cf:98:03:43:60:cd:a6:e3:ba:cc:fd:a8:6c:
         4d:fc:5c:0b:db:51:79:ef:8d:17:85:c8:d7:28:e7:51:41:4e:
         c6:2e:7a:b7:9a:eb:8d:fb:9f:03:72:50:a4:96:91:1b:f6:f0:
         83:4a:2b:56:62:5a:14:14:25:26:68:d0:84:e6:46:2b:1e:ac:
         11:47:1e:33:b1:55:9a:2f:f5:08:d4:1c:a9:8d:ab:11:92:fd:
         22:c1:e8:04:89:ad:c9:dd:4b:5f:37:eb:3b:b0:c0:80:83:67:
         a6:09:e1:ca:4e:e6:c9:e0:ec:ce:dd:48:02:2b:7d:3f:5c:19:
         34:fa:c4:cf:de:45:bc:a8:9d:89:21:39:ce:22:59:3b:d6:a4:
         19:cb:61:56:3f:4b:5b:18:9c:0a:fa:96:ba:b0:eb:c6:fe:e8:
         f0:e3:3f:d8:46:d2:37:96:1b:50:17:82:a0:ca:f0:f9:d9:64:
         c3:6c:9d:6b:84:31:f6:bc:b8:d5:7c:66:64:3a:14:1a:c2:a0:
         df:71:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:31:07 2026 by rpki-client