Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa
File:                     b1ccda99-02e2-3927-8808-445f6fc6880d.roa (raw, json)
Hash identifier:          kWaUIkXN52gCCxXtDpyljhQYaX1DwHdDFEfK3Lk9bMQ=
Subject key identifier:   1F:36:B0:AB:0C:B2:47:E1:F1:99:05:D8:2F:DA:EB:90:FF:17:EE:65
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F4328584EA7943AB6E0A9898922D30500
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22135
IP address blocks:        173.242.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:3a:b6:e0:a9:89:89:22:d3:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36a52dca-f385-4255-b144-c557d68ea2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:b5:4f:27:0a:07:a3:45:c9:de:f5:05:32:
                    fb:1d:51:fb:75:1d:8f:7d:4d:15:62:d1:66:d2:6f:
                    ef:7f:e9:56:7a:b4:d8:67:56:ad:70:a8:93:89:3f:
                    5c:18:cb:23:e5:95:f5:74:48:6c:85:8f:8e:f8:e8:
                    d3:1d:8f:ec:05:ba:1d:94:e4:47:30:9e:c4:69:de:
                    59:92:f5:0c:cb:a4:05:79:6d:ad:d0:29:95:f7:14:
                    a8:1d:f1:ef:a2:40:8e:5a:d5:8d:8c:9c:0b:e0:19:
                    fa:49:6d:c3:88:ec:c7:8a:51:c0:c9:de:b6:e8:74:
                    a5:d1:3d:7d:6b:df:d1:6d:8e:cd:26:2e:c9:26:13:
                    cb:ed:27:38:c4:34:6e:85:4c:49:bf:ee:c0:91:43:
                    6c:3e:6a:0a:bf:d6:dc:7e:33:aa:47:f8:ed:ff:06:
                    24:df:40:08:bc:5d:62:d9:15:a5:61:6d:2c:bc:ec:
                    d8:f7:75:45:1f:b1:8e:e6:c3:29:b3:1f:5e:67:cb:
                    3d:a0:8f:da:41:b1:8c:fd:b6:41:a4:98:6e:db:4c:
                    34:9c:fb:5b:88:5c:9f:3a:6c:72:f7:0e:00:bf:3b:
                    99:1e:3e:07:8d:63:69:b4:64:c3:6b:71:a9:a0:0f:
                    95:71:e3:e8:dd:f4:08:60:b2:9b:d1:ef:1d:dd:c9:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:B0:AB:0C:B2:47:E1:F1:99:05:D8:2F:DA:EB:90:FF:17:EE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:a4:41:ba:dd:a8:fc:2a:9a:88:0f:e2:ae:54:e6:63:ee:
         44:83:9e:da:bc:a1:9a:d5:34:34:cd:9e:a6:95:c2:cc:54:75:
         53:b0:c1:bb:14:34:30:7d:2a:0e:77:73:48:e1:f7:68:73:13:
         22:0e:16:90:2d:26:4a:84:26:76:a7:77:d2:56:c1:e2:cb:49:
         a0:f5:55:66:c0:17:bb:f2:3b:76:59:d3:e3:2d:0e:fa:f2:24:
         da:7e:32:5f:a5:e3:3f:ea:0e:0c:f3:b1:62:19:48:c0:76:5e:
         15:60:ea:2e:aa:ae:ea:ec:aa:e7:e3:a3:0c:67:35:cd:33:6d:
         40:a6:4b:c0:ae:79:fb:f6:ae:39:9b:3d:89:4c:60:b2:c2:92:
         d1:99:50:42:55:0a:d2:69:ea:c4:a4:4f:9f:4c:d7:35:73:af:
         8b:6c:93:80:82:29:35:17:40:1c:eb:3e:61:03:0f:50:fa:76:
         71:89:c1:50:8b:7e:2e:01:ac:9c:49:2e:0e:fa:09:9d:f9:98:
         8d:47:ec:9d:ef:3b:66:00:77:f9:7c:59:a1:25:72:73:ed:d6:
         d6:ad:80:c8:4c:1c:3b:12:35:78:c0:c9:a7:e7:fd:19:fe:33:
         4d:aa:dc:4f:b1:c3:60:c1:90:a6:b6:88:d0:2d:4c:b1:f8:ff:
         93:f6:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 11:42:57 2026 by rpki-client