Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/b7df4d96-6c47-389d-9204-ae4a004de496.roa
File:                     b7df4d96-6c47-389d-9204-ae4a004de496.roa (raw, json)
Hash identifier:          AIjVnbOCQKpWffbNTe8MocWPbOHeqvtP0wwtB09Rf14=
Subject key identifier:   50:69:DB:A0:9E:C5:24:3E:A6:28:CA:A1:A8:7C:52:90:B8:A9:CA:F2
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA7913B22A46281058CC3A900
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/b7df4d96-6c47-389d-9204-ae4a004de496.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        171.159.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:3b:22:a4:62:81:05:8c:c3:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d4435601-7088-45b8-8ae0-5f9bb00d1eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:54:79:b2:0d:ec:6c:54:33:64:48:3b:82:
                    41:ff:c0:9d:fe:ab:9b:a7:1c:49:af:40:49:88:af:
                    5e:e2:5d:c3:78:57:16:9d:06:1a:ae:9c:13:02:92:
                    ce:9d:81:1e:bc:23:5e:6a:6b:c1:3b:d6:17:89:72:
                    ef:77:b2:90:4f:ca:a7:06:61:33:46:1e:54:7b:b0:
                    6a:27:23:33:99:ea:2e:70:f1:7c:82:18:8a:93:c0:
                    bb:ea:78:b0:d7:5a:94:46:67:1f:a4:14:67:8a:35:
                    1d:6c:3a:27:7b:47:19:78:22:56:42:ce:04:48:a1:
                    79:76:7a:cd:e2:15:52:25:c1:ba:5c:50:86:70:ea:
                    58:fb:64:ec:6f:38:e0:04:53:21:b6:99:87:14:1b:
                    10:41:16:5b:d9:56:0f:2a:80:64:92:07:45:27:72:
                    e8:74:51:a7:32:58:5a:85:73:ca:8b:d8:04:75:cf:
                    0e:19:b1:2d:82:74:d2:e5:5b:37:92:e8:99:f1:04:
                    09:2f:ff:e8:7e:20:5b:8b:d9:3b:cf:43:f8:52:e6:
                    0d:b2:5f:3f:cf:0c:a4:71:35:c9:bd:ac:b0:e6:80:
                    b4:db:e8:e9:5a:ca:80:b2:b8:a6:de:c4:12:4f:94:
                    ae:36:cf:ef:83:a8:db:fe:ca:d0:21:23:96:75:72:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:69:DB:A0:9E:C5:24:3E:A6:28:CA:A1:A8:7C:52:90:B8:A9:CA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/b7df4d96-6c47-389d-9204-ae4a004de496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.159.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:b3:ee:1e:cf:dd:01:29:50:aa:66:49:bc:d3:dc:49:75:
         69:ef:a7:e0:df:4e:cb:ef:7a:60:c8:d4:95:52:0f:59:cb:86:
         29:3d:6f:3f:99:b1:21:b4:36:f1:10:5a:e4:96:87:f6:5d:b8:
         5b:86:18:3f:93:12:3c:74:2c:8d:c2:2a:43:cb:fa:66:d5:b2:
         26:02:ce:51:8b:de:e8:cd:0e:1f:9b:5c:e8:2c:b8:21:d2:03:
         b8:e9:08:02:31:72:f9:e8:9b:e6:d2:01:a7:e4:f1:6a:c2:3c:
         e3:c7:ae:62:52:7d:bf:f6:c7:69:67:4e:06:14:bc:d7:9f:86:
         19:f5:e8:6f:45:05:46:65:97:89:d6:cf:f0:6a:5b:50:ad:73:
         64:10:f5:2a:57:86:7a:54:0b:4b:68:c5:d8:a3:35:c7:11:3b:
         dc:9e:b4:65:2a:41:9f:46:ce:c6:b6:f0:df:79:04:3c:1c:be:
         07:e7:e6:c0:b8:61:76:a2:fc:23:c3:86:bd:99:9c:20:6e:b1:
         92:c6:91:de:fc:c8:67:bc:17:2d:8e:ef:1c:c9:65:6b:22:f4:
         cf:76:8d:df:3f:72:9b:6a:82:db:02:73:29:29:d5:27:9a:f0:
         6f:f7:1d:26:a8:7e:79:77:e2:89:91:6a:19:4b:66:9a:e7:af:
         96:a6:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:17 2026 by rpki-client