Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7406f15d-24c1-34d2-a447-b942c413de96.roa
File:                     7406f15d-24c1-34d2-a447-b942c413de96.roa (raw, json)
Hash identifier:          C993shmfR03BZbc7tU45NXh80sEkmEbe/fp2KsAWCGY=
Subject key identifier:   53:61:CA:CB:EC:64:43:70:41:C8:B6:0A:7B:42:25:0A:D0:F9:F7:02
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584EA787F7FEEC9F31C04DF63580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7406f15d-24c1-34d2-a447-b942c413de96.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     132372
IP address blocks:        172.94.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f7:fe:ec:9f:31:c0:4d:f6:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=883342a9-acde-4e79-b9b3-e429224acf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:70:dd:62:ed:e3:02:0b:6b:86:15:1f:b7:
                    22:9a:89:c1:a1:8a:a5:22:86:2a:d1:40:55:d9:2b:
                    07:84:00:b1:a8:84:bd:bf:fa:cc:cb:22:5f:6f:fd:
                    e0:06:90:c6:05:a6:9a:6c:c5:1d:9f:d5:fe:ad:38:
                    9b:9d:1f:fd:5b:02:e1:8d:23:3e:97:49:c2:2a:54:
                    8c:f5:56:52:0c:b8:91:d3:ba:06:90:da:14:52:81:
                    0c:4c:02:9d:81:7d:e5:12:7f:e2:d7:e8:71:5d:29:
                    4b:02:04:e5:7d:64:57:6b:06:f6:9e:9e:b7:d7:ea:
                    a1:d4:ee:86:bc:4c:38:25:cd:34:7f:5c:43:09:0e:
                    ed:5c:f4:e6:a2:b2:fa:82:65:45:e4:ca:42:f0:bf:
                    21:ea:f3:75:40:04:ea:4c:c8:34:7e:ab:d8:75:b1:
                    ff:9e:af:95:28:16:78:29:be:47:e9:55:df:a1:6b:
                    08:a1:10:96:53:fb:29:d1:2b:4d:8a:6c:99:13:ce:
                    93:ab:05:bd:c4:32:76:40:8c:59:29:d3:9b:52:bb:
                    7f:54:80:64:e5:02:bf:76:99:16:05:d0:46:73:de:
                    66:67:c5:f0:39:23:15:e0:1f:8f:4f:bc:7f:84:c7:
                    a2:3a:26:9a:0b:07:85:99:61:d0:a0:7e:e6:2e:75:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:61:CA:CB:EC:64:43:70:41:C8:B6:0A:7B:42:25:0A:D0:F9:F7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7406f15d-24c1-34d2-a447-b942c413de96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:18:d8:bb:af:14:ca:73:8e:50:f7:66:db:08:a0:da:ee:
         09:a3:d9:a0:55:85:4f:7c:b1:dd:d6:c2:b1:a3:29:23:2b:c6:
         e7:2a:05:78:ab:7b:9b:cb:26:c0:e4:23:25:cc:fd:c6:0b:44:
         b9:c0:bf:38:27:7c:6e:1e:e5:41:00:4f:52:50:d1:82:3a:7a:
         7e:dd:d6:30:41:44:56:b2:ef:3f:06:13:4a:67:8e:4d:d9:b6:
         b1:ab:28:4d:19:cc:d6:2c:df:a1:18:0c:eb:e1:e5:a4:ee:c7:
         ec:e9:26:0e:52:e4:93:e1:0e:97:fa:d1:be:2b:4d:e8:0b:cc:
         18:71:65:ae:ea:62:17:35:1a:15:78:ee:76:20:83:2f:f9:d4:
         d6:f7:90:75:c0:00:b8:19:c1:a0:9e:f3:8f:6c:00:12:ea:e4:
         c7:73:fc:b8:12:84:01:f7:4a:ba:30:64:96:50:0e:a7:13:c3:
         ca:67:6e:99:07:e3:e6:58:8d:23:b9:4c:df:4f:4a:a1:46:7c:
         c8:db:c0:2a:8d:98:56:5c:bd:ca:74:a1:42:2e:dd:f8:28:2c:
         71:84:58:99:de:59:f7:f3:4c:bd:da:aa:55:e4:82:2b:64:a0:
         a2:62:09:0d:74:e8:4e:91:66:1a:e5:db:9a:b2:18:d7:fc:4c:
         d1:fe:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:41:18 2026 by rpki-client