Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7b55b087-2f80-305a-8888-8ca670e0303a.roa
File:                     7b55b087-2f80-305a-8888-8ca670e0303a.roa (raw, json)
Hash identifier:          IdRPmmYrMYD3kSIkkvOj1ig/jM7cN/um0ap/mpsoi8U=
Subject key identifier:   6A:7E:D9:C3:D7:BE:6A:BF:39:2B:D2:7D:FA:FB:98:09:CB:F8:3A:2F
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F497595D3DC7BCA9768C18F80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7b55b087-2f80-305a-8888-8ca670e0303a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13768
IP address blocks:        64.226.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:95:d3:dc:7b:ca:97:68:c1:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fa036a86-6aa7-4879-bbfd-b52beeafbf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:80:e9:c1:0d:31:e4:cc:52:31:9f:c1:82:
                    b9:3b:18:1a:74:c9:86:1f:43:a9:c1:ef:8d:9b:d5:
                    f9:c4:19:d4:18:2a:49:0b:6e:55:8a:36:54:0e:e5:
                    de:89:cb:e9:33:ea:d4:41:be:13:38:81:79:20:24:
                    c7:a9:31:ba:8e:90:ad:60:e7:18:f1:7c:81:db:f4:
                    3a:82:d1:ac:0c:b7:87:43:64:28:af:f4:10:64:00:
                    07:2a:6d:6c:b1:81:7a:d6:63:5d:4e:9d:25:f0:0f:
                    94:50:62:d5:c8:44:84:37:ff:c1:2f:c3:74:1b:12:
                    f5:cf:e3:73:7c:fe:ac:d3:c0:ce:7e:e9:ad:2f:6d:
                    83:04:bd:5a:67:79:a8:fd:53:7f:bc:78:9a:36:d7:
                    f3:72:69:b2:9c:79:77:a8:58:b1:db:46:60:b9:96:
                    f6:d6:79:99:47:9d:77:78:15:d7:5b:a4:1f:6f:35:
                    e4:88:74:00:fc:48:88:35:b7:53:d6:b5:ec:c4:35:
                    db:9b:b6:0c:5e:27:c7:49:be:cb:6e:f3:b3:35:62:
                    24:09:d9:77:e6:ef:84:b6:d1:c0:27:ff:08:7c:86:
                    7c:4c:d8:5d:29:79:60:90:25:28:cd:d7:85:06:bb:
                    3e:12:7e:a1:0e:f6:49:2f:24:72:b4:f8:c2:de:bc:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7E:D9:C3:D7:BE:6A:BF:39:2B:D2:7D:FA:FB:98:09:CB:F8:3A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7b55b087-2f80-305a-8888-8ca670e0303a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:14:fd:10:d3:c8:03:72:15:1e:ac:db:0f:b5:2a:7e:52:e5:
         96:3b:c4:b4:15:f5:53:1c:7c:0e:cd:b1:1c:f1:6f:14:0b:c7:
         cd:0a:0e:35:8e:b9:6b:90:c1:40:8c:68:72:50:3f:08:10:7c:
         d1:dd:dc:70:d1:43:29:5d:53:ab:3d:b1:88:17:bd:4d:f1:de:
         e6:c4:37:05:51:ae:d6:c1:eb:ef:2c:8e:ef:5c:22:08:06:22:
         ed:5e:ce:a2:54:31:22:04:d3:6f:35:df:f7:66:f1:0d:48:65:
         38:04:c5:17:4d:7c:a6:89:ca:31:27:4c:ca:ef:69:e4:04:3c:
         6e:d3:c6:22:c1:9b:5f:da:a2:c3:58:40:da:fb:9c:1b:24:c5:
         1d:45:9e:2c:67:02:8e:fd:64:7b:cc:5f:f2:6b:05:35:00:cf:
         09:00:53:e3:53:e2:dc:df:61:91:fb:ca:e4:22:5f:75:7b:c7:
         99:d6:88:0e:51:ce:27:0b:b0:db:46:5f:cb:20:79:31:1f:9c:
         4e:75:8e:54:9e:0d:0d:4c:d6:72:e5:da:74:7c:72:61:2e:d9:
         c4:a1:6f:5d:02:ff:58:00:9b:f0:df:b2:be:c1:95:01:a9:31:
         9f:6b:09:a9:27:30:54:83:0e:3d:1a:11:34:6d:4e:8a:23:eb:
         25:fc:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:51:40 2026 by rpki-client