Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/4397a5ad-7d38-3fce-8a31-14ec655bb137.roa
File:                     4397a5ad-7d38-3fce-8a31-14ec655bb137.roa (raw, json)
Hash identifier:          hg3sNDDSvOuAuclt1CYx3zVHwrDVSge4fvuzIoMSJF8=
Subject key identifier:   CB:4E:6B:5D:00:3E:FA:C2:BC:49:2F:94:8A:B5:4C:26:0B:D8:21:EB
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584EA5AA777755A0B18A44B88A80
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/4397a5ad-7d38-3fce-8a31-14ec655bb137.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     30513
IP address blocks:        162.213.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:77:77:55:a0:b1:8a:44:b8:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=7342684c-462f-49c1-bbeb-b70257034ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:c9:ee:9a:26:1f:39:de:4d:dc:41:18:74:
                    de:f7:5b:44:6b:cf:7f:b1:3b:53:43:fa:ee:6d:f4:
                    23:57:14:d3:c6:a4:19:e2:83:42:a6:71:6b:bd:5a:
                    96:e3:bc:25:a7:43:31:e8:60:d4:a5:93:dd:14:58:
                    3e:f1:31:b8:fc:64:26:e0:e3:c2:3f:79:02:20:4c:
                    6c:f1:03:65:9c:83:b8:bd:da:cb:5a:72:f0:6f:4f:
                    5b:de:a3:51:a9:a8:b8:32:5e:71:5f:33:19:74:03:
                    50:77:0d:1b:fe:ea:19:b8:2a:57:a8:d9:e6:c5:03:
                    9a:fa:18:6b:8d:6c:57:92:a2:d4:bf:bb:42:ee:68:
                    55:c5:67:9a:5b:5d:91:05:dc:4e:66:6e:a7:d7:eb:
                    00:6e:ce:0d:6b:ad:47:ca:ad:23:88:25:b9:22:e5:
                    95:6f:19:56:9a:36:26:0d:e9:7e:db:ff:d3:d5:a0:
                    6e:91:b8:01:b3:8c:07:54:9b:7f:0a:71:8d:2a:78:
                    6e:73:66:40:7d:83:74:ad:bf:fb:07:a0:b8:56:9b:
                    4e:71:7a:fe:f1:4a:63:c6:6f:27:19:82:16:57:d9:
                    5a:1a:5d:4d:d7:13:6d:69:90:3a:f8:93:2c:e9:aa:
                    74:4f:b6:23:7e:85:84:63:fb:02:b1:9e:62:b3:c1:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:6B:5D:00:3E:FA:C2:BC:49:2F:94:8A:B5:4C:26:0B:D8:21:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/4397a5ad-7d38-3fce-8a31-14ec655bb137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:72:77:f3:fe:f2:5b:06:59:1a:55:d0:18:a3:52:c4:74:e7:
         27:e0:51:46:6a:ff:e5:c2:83:03:9d:ab:08:3a:67:97:02:f4:
         73:ce:67:b6:cd:c0:b6:af:d9:0b:48:d2:f4:df:7d:62:c1:50:
         5a:16:33:f1:a2:29:42:9f:a3:03:89:53:a1:6d:fc:45:13:4b:
         53:bd:fd:36:60:f9:28:f0:9a:13:5e:42:d4:27:0d:02:60:06:
         e3:35:94:55:ee:b1:d5:d4:aa:17:4c:2b:c3:37:58:8f:7a:90:
         e1:4a:ee:84:26:10:cd:3c:dc:e6:8f:2c:4a:c6:17:10:5d:b5:
         09:4f:bf:01:64:23:ac:6b:e3:fe:9e:23:e4:3b:58:1a:cf:91:
         35:4e:11:a3:45:c4:e3:9a:62:91:b3:51:1f:2f:d9:9e:e9:84:
         92:64:ce:b4:1b:0e:47:9f:b1:73:88:b4:ed:92:b5:84:54:55:
         3a:62:5c:63:2b:03:9b:4f:a9:73:fd:a7:ac:54:f5:70:b6:dc:
         17:32:a1:64:ed:e0:12:99:bc:65:19:1e:d7:6c:e2:3c:1e:6e:
         e6:79:a3:2d:01:67:6c:3d:52:67:f0:48:66:86:5a:b9:3d:1a:
         3f:d0:d3:10:61:ec:b7:93:2b:01:8a:90:9a:c6:3f:bc:bc:7f:
         4e:28:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:43 2026 by rpki-client