Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/658f1720-2708-3805-9736-0f0fbb20ebba.roa
File:                     658f1720-2708-3805-9736-0f0fbb20ebba.roa (raw, json)
Hash identifier:          THp3sULarqjTxRpwovrqG9x/f/MHCQPw0SRLBZ44Igk=
Subject key identifier:   E3:14:9A:18:46:5A:75:1C:A4:89:DE:91:2C:EE:60:00:47:9D:AD:2B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E2F045605AA01903F9FC7E500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/658f1720-2708-3805-9736-0f0fbb20ebba.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     132372
IP address blocks:        172.94.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:56:05:aa:01:90:3f:9f:c7:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=b4f8bc59-164c-4c69-a359-975f73a51712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:ae:89:0c:3e:10:63:96:a0:22:1d:84:50:
                    19:f2:80:70:1d:4e:01:a0:93:3f:5c:c9:a4:ca:b3:
                    85:17:bd:27:5c:55:08:e4:72:2c:4c:cf:1b:13:a3:
                    37:bd:a3:d2:59:c6:dc:28:42:2b:ae:1c:01:cd:16:
                    1d:42:4c:e2:2e:41:a5:33:f5:bf:23:c4:fd:a3:1f:
                    19:2c:ec:e9:3d:d7:3a:fe:1b:1d:f4:3d:55:a1:39:
                    1e:7e:d0:8e:8b:68:1f:9d:0f:1d:b1:45:c3:ae:de:
                    25:6b:a6:21:3e:ce:b2:2a:53:f7:1c:96:50:77:52:
                    a5:89:cd:4a:63:6c:a0:02:66:04:d7:63:6d:61:43:
                    c7:ab:04:d7:64:b2:4e:c8:a2:92:8f:01:b7:bd:56:
                    47:0e:2f:f1:91:93:34:1b:ad:61:ad:90:57:f5:77:
                    fc:41:93:af:89:73:f3:bb:aa:01:57:ba:7e:97:39:
                    18:93:ca:68:26:72:a3:3d:2e:f0:55:1f:eb:b6:61:
                    aa:51:e8:d6:6e:b1:d6:0a:75:55:31:99:39:5a:c7:
                    fb:1f:c8:4a:32:e2:a1:9c:70:0b:c7:fd:2e:f6:4a:
                    2e:0f:fa:62:70:95:e9:1a:60:cc:db:e2:ba:72:9b:
                    c7:56:03:40:96:18:0d:51:1b:27:90:30:e6:7a:e4:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:14:9A:18:46:5A:75:1C:A4:89:DE:91:2C:EE:60:00:47:9D:AD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/658f1720-2708-3805-9736-0f0fbb20ebba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:5e:f9:ef:cc:fb:f2:a6:b2:34:34:6a:3a:30:59:aa:61:
         54:2b:84:b4:22:81:e5:b6:3b:b4:cc:ca:68:3b:a7:ee:ed:da:
         73:99:c3:ca:bb:5e:c2:9a:f7:e1:58:04:7c:64:4c:24:85:63:
         a1:19:e4:fa:ce:25:34:eb:4f:56:e3:6e:69:7d:48:0b:82:6e:
         cb:b7:c1:f0:3f:51:65:2d:a6:bc:43:67:f0:e1:3c:2b:57:9c:
         ad:d0:b8:41:20:a7:ca:7d:14:be:d8:73:92:5f:e7:8e:a2:c7:
         11:10:9a:06:a1:0d:f5:a5:cf:ad:ce:95:55:d3:48:04:99:a5:
         0e:09:42:09:b9:61:91:e4:37:50:c6:ac:53:4d:af:1e:fc:ba:
         d3:eb:2b:d8:09:e1:14:0c:fb:67:3f:19:18:ac:96:e0:9c:11:
         78:4b:89:86:20:71:de:66:45:db:17:0c:a6:e0:93:11:f5:b5:
         5f:d4:6c:11:f6:58:61:07:e2:27:6c:63:cc:fd:55:d9:07:aa:
         90:0c:ff:8d:ba:fd:01:07:c8:4b:7a:18:ef:62:ca:54:ec:56:
         26:ea:3b:a3:1a:95:46:ee:24:85:08:1e:83:68:5c:3d:75:ec:
         32:b8:82:84:33:54:d5:6a:9b:4f:d3:10:f5:ab:88:db:5c:e0:
         92:9a:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:58:16 2026 by rpki-client