Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/55c77c85-556f-3d0c-9b43-5fbc9f62d1bd.roa
File:                     55c77c85-556f-3d0c-9b43-5fbc9f62d1bd.roa (raw, json)
Hash identifier:          SxLGVSOs430veG29FB4mgRnReqgz6L7tz0DjFa+DfbY=
Subject key identifier:   1D:D2:1C:0D:26:6C:CA:81:86:DB:5E:6C:AD:AD:DB:53:E5:D8:2D:B5
Certificate issuer:       /CN=64849421-205d-4186-ad31-30e1d9a48122
Certificate serial:       010D0C9F4328584EA791657B0132608194B10AC0
Authority key identifier: D4:0B:F0:75:62:FF:FD:A9:D3:6F:44:73:C5:42:18:67:AE:C9:ED:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/55c77c85-556f-3d0c-9b43-5fbc9f62d1bd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395228
IP address blocks:        159.222.0.0/18 maxlen: 24
                          159.222.64.0/19 maxlen: 24
                          198.35.64.0/19 maxlen: 24
                          198.35.96.0/20 maxlen: 24
                          198.36.72.0/21 maxlen: 24
                          198.36.80.0/21 maxlen: 24
                          198.36.96.0/20 maxlen: 24
                          198.61.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/64849421-205d-4186-ad31-30e1d9a48122.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/64849421-205d-4186-ad31-30e1d9a48122.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:65:7b:01:32:60:81:94:b1:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64849421-205d-4186-ad31-30e1d9a48122
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a646771f-95d2-4d3d-8e6c-5084b1b98e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1d:ef:d2:c4:15:dc:78:eb:d6:38:e9:f7:f5:
                    a2:1a:d9:86:bf:ec:0c:09:94:d8:df:46:af:52:fd:
                    ba:f8:51:a6:f0:eb:7d:7e:7d:b0:39:d4:b6:ff:fb:
                    08:96:6d:d2:84:11:83:45:39:e2:c6:57:e9:5b:3c:
                    46:70:70:c6:25:81:1d:35:b6:80:29:18:58:50:00:
                    b6:93:9d:6b:7b:27:aa:34:db:ed:3e:60:8b:58:98:
                    36:43:8f:07:64:d9:8a:f9:77:37:58:4a:dc:3c:33:
                    96:6c:a7:74:24:78:64:76:e5:56:e8:c0:b6:06:10:
                    16:08:42:a0:63:5c:31:22:a6:96:37:7e:97:c0:3e:
                    2d:28:b2:99:74:33:ff:69:14:d3:df:d6:6d:a1:fc:
                    3e:bc:6d:96:22:f5:0b:dd:11:b5:04:b0:3d:74:4b:
                    71:1e:ff:33:ec:7f:04:38:76:cd:24:21:75:3c:d3:
                    50:e6:69:3a:8c:34:92:f2:7b:47:73:60:ac:60:cf:
                    ec:3c:1a:b5:93:0d:46:5e:12:ed:78:5f:f4:89:23:
                    ed:a8:55:45:4c:c4:78:9c:80:7b:95:e8:58:3e:0c:
                    e8:09:09:df:77:38:c1:17:ec:27:6e:05:53:6b:39:
                    ff:bc:5c:4e:20:06:d0:01:50:45:da:38:0f:52:32:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D2:1C:0D:26:6C:CA:81:86:DB:5E:6C:AD:AD:DB:53:E5:D8:2D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/55c77c85-556f-3d0c-9b43-5fbc9f62d1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/64849421-205d-4186-ad31-30e1d9a48122.crl

            X509v3 Authority Key Identifier:
                keyid:D4:0B:F0:75:62:FF:FD:A9:D3:6F:44:73:C5:42:18:67:AE:C9:ED:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.222.0.0-159.222.95.255
                  198.35.64.0-198.35.111.255
                  198.36.72.0-198.36.87.255
                  198.36.96.0/20
                  198.61.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:51:a0:e1:89:db:0a:c2:c6:bb:86:4a:10:d2:c4:bb:a2:10:
         08:ae:e4:9f:7d:fc:ca:fb:c5:42:2d:1b:28:bc:73:fe:7f:2e:
         81:82:ec:35:c5:11:d4:5f:45:76:fe:8c:37:51:e5:6d:a1:0a:
         d5:0c:fe:66:65:6d:1c:e2:97:52:52:35:0f:85:0f:de:93:2c:
         74:7e:aa:1a:ed:6d:b0:a1:93:7d:6b:58:3d:de:cc:8c:51:19:
         f9:f9:73:85:68:47:f0:bd:a8:25:92:de:4a:74:96:bd:9c:75:
         40:f6:be:c6:e8:8f:cd:83:4a:5b:9f:58:85:3c:ae:b4:3d:5b:
         02:5b:c0:ce:e0:6b:79:81:75:a9:c7:61:d3:e1:fd:57:a1:88:
         77:fc:a6:f3:77:ca:c8:6e:89:d7:44:b6:7a:4d:f6:73:1c:fa:
         d1:97:cb:54:c7:7f:d2:18:1f:f7:ec:5c:70:0d:5f:0f:54:a4:
         a9:16:e7:63:4c:0c:a8:55:ce:09:09:5c:d9:b3:38:9b:fc:74:
         51:ca:74:af:54:20:b2:a0:94:e0:49:30:d1:77:82:8b:b1:9b:
         1e:86:1b:70:13:a1:78:ef:a7:e4:da:77:7f:b3:2e:72:13:ff:
         31:27:ce:93:30:9d:25:76:fc:0f:a7:ce:d4:d4:97:df:9d:b0:
         89:52:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:46:07 2026 by rpki-client