Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
File:                     8457e11b-32d1-34c0-81ea-624f8e85267e.roa (raw, json)
Hash identifier:          2EiuKMFySIHGYqN0YkfnEeoFg1XDOhv9q4iIVUizNdQ=
Subject key identifier:   31:2C:A5:B4:1B:B3:64:EC:5D:DD:F6:2E:52:88:5C:E9:95:E2:3D:CB
Certificate issuer:       /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial:       010D0C9F4328584EDC92110F4DA28925FBCE7A00
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     55254
IP address blocks:        72.46.80.0/22 maxlen: 24
                          104.37.112.0/22 maxlen: 24
                          162.211.184.0/22 maxlen: 24
                          168.100.192.0/19 maxlen: 24
                          172.96.20.0/22 maxlen: 24
                          205.201.30.0/23 maxlen: 24
                          205.220.192.0/20 maxlen: 24
                          216.10.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:11:0f:4d:a2:89:25:fb:ce:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=8f668f8e-7629-4f6e-ba30-b927e1fda930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:be:0a:89:b8:e7:98:d8:df:89:f8:e4:ec:
                    b9:49:5b:47:e7:f9:c4:f6:4a:14:79:50:71:43:5f:
                    66:ed:1c:d1:58:d0:08:e3:44:d0:d7:5d:aa:11:f4:
                    7c:79:4e:18:f6:4a:d1:d4:64:1d:ef:7c:1e:5c:61:
                    45:bc:d3:96:90:66:34:17:a4:d2:b0:89:f8:04:fc:
                    41:15:ee:ea:23:db:a5:e0:25:66:b2:18:17:d5:24:
                    94:1e:a4:5d:34:a8:91:6e:14:ac:b6:db:a6:a6:80:
                    66:dd:34:18:93:14:79:d3:44:69:56:18:39:05:35:
                    53:12:da:67:a3:88:20:c4:ce:f8:b7:08:f9:24:01:
                    72:25:c3:ea:82:3c:05:b7:fe:fa:c9:b6:1a:ba:69:
                    a0:7a:0a:43:cb:49:fc:23:4b:f2:01:43:70:ab:b1:
                    db:2d:40:b2:86:f0:48:cf:e1:f4:8b:92:fe:34:d0:
                    b2:fb:43:cf:8f:6d:7d:ba:61:c5:a3:33:79:2c:9b:
                    92:9c:e4:9e:64:e2:5b:f9:09:30:c8:ab:2c:08:bf:
                    75:19:5f:8b:e6:c1:34:ea:f9:e7:a0:41:e4:22:60:
                    53:ad:14:87:15:22:97:53:63:60:90:93:eb:04:70:
                    d6:47:68:0b:e4:a6:88:67:99:74:b5:77:21:6c:5e:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2C:A5:B4:1B:B3:64:EC:5D:DD:F6:2E:52:88:5C:E9:95:E2:3D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl

            X509v3 Authority Key Identifier:
                keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.80.0/22
                  104.37.112.0/22
                  162.211.184.0/22
                  168.100.192.0/19
                  172.96.20.0/22
                  205.201.30.0/23
                  205.220.192.0/20
                  216.10.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:47:7f:c1:0d:68:0f:32:82:cf:63:ec:7b:e0:96:79:bb:9f:
         92:1b:a0:16:76:d5:2c:fb:8a:95:a2:fd:1a:66:55:75:2d:2a:
         08:85:dc:11:92:91:19:6f:d8:ff:59:58:d3:d6:59:c3:23:86:
         bf:80:04:44:8e:1c:8c:31:91:c2:a2:7a:c6:7d:ca:0c:e4:7e:
         8f:7a:c2:0f:fa:fe:f8:d0:7a:50:e3:90:0a:c6:1b:9e:97:25:
         07:fd:31:bf:4f:c4:8f:84:ff:bf:a1:2d:47:5a:3d:eb:4e:c3:
         4a:0a:33:83:e2:98:0a:72:d7:b8:af:b0:3a:4a:ee:3b:10:04:
         b4:64:d9:09:24:0b:b2:32:c8:ad:2f:dd:5e:59:45:48:2a:c4:
         c1:40:5b:d7:43:65:b1:59:46:a8:23:dd:05:e7:2c:f0:dc:ed:
         bd:6b:c1:e3:85:57:6d:a1:74:ed:d1:5b:67:fd:cc:31:41:08:
         c8:08:10:3e:a2:9b:8b:2c:cd:bb:ea:06:c3:eb:e9:f4:cf:b0:
         da:26:63:6f:94:b5:c7:32:33:d0:4a:63:27:e0:a6:74:99:3f:
         03:ac:94:32:85:f1:82:e3:14:67:95:a6:e2:ce:00:26:57:9f:
         d6:bd:b4:79:10:37:98:a9:9b:1e:fb:c1:cf:07:0d:22:ee:fb:
         f0:88:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:21:53 2026 by rpki-client