Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/ebd423e7-a1d9-37f2-a9f6-7120fe6fbe05.roa
File:                     ebd423e7-a1d9-37f2-a9f6-7120fe6fbe05.roa (raw, json)
Hash identifier:          GGKIh4Pe8xCAcNGqYTxo/vqOzR1vGM3fC4+DpawNBB8=
Subject key identifier:   F5:95:52:C8:73:2A:02:5B:2B:6E:BE:7C:07:BA:A0:02:3B:8A:84:A9
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584EE9A73EA1D8852168ECC655C0
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/ebd423e7-a1d9-37f2-a9f6-7120fe6fbe05.roa
Signing time:             Fri 21 Aug 2026 17:28:50 +0000
ROA not before:           Fri 21 Aug 2026 17:28:50 +0000
ROA not after:            Thu 19 Nov 2026 18:28:50 +0000
asID:                     152179
IP address blocks:        104.166.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:a7:3e:a1:d8:85:21:68:ec:c6:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Aug 21 17:28:50 2026 GMT
            Not After : Nov 19 18:28:50 2026 GMT
        Subject: CN=36e45ca7-7663-4667-864f-11019736b054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:cf:42:84:25:30:0a:3d:3a:2b:73:4f:c4:
                    6a:82:90:b1:ae:1e:38:d1:33:c2:4e:76:c8:dc:ab:
                    33:d0:e7:eb:f7:99:c6:19:e3:22:a5:2f:3c:e9:21:
                    9f:da:7e:02:88:61:74:0d:53:63:4d:f2:f5:93:9c:
                    51:63:c3:e5:da:6f:ec:b6:dd:0c:78:59:64:87:8c:
                    e5:9b:69:1b:42:7f:ba:32:3b:ac:e2:fe:75:a8:34:
                    25:85:47:71:ab:2d:99:b7:ba:e4:7f:bf:3a:09:d5:
                    61:ea:ba:23:ba:d9:cf:f6:35:88:18:5e:ab:83:41:
                    af:7a:87:2b:b5:49:6d:4f:fc:32:c5:c7:fe:45:f5:
                    4a:db:75:38:51:2d:35:f5:64:5e:4d:6d:55:36:3e:
                    aa:76:5a:d8:c2:b5:df:b8:71:c4:93:f8:d6:b1:68:
                    9c:1b:59:f0:f6:39:96:85:62:50:5b:db:d1:45:41:
                    82:38:86:8d:4f:b7:03:91:5c:8f:85:14:33:90:23:
                    30:4e:ed:0e:2c:aa:b0:a7:7d:c9:a0:01:c7:4f:20:
                    92:c3:3f:26:49:c2:81:b2:d3:d5:df:d6:95:59:e9:
                    e9:81:d8:bc:c1:85:99:f7:76:82:b3:4b:ce:1c:41:
                    0f:59:bf:ac:3e:10:d7:c2:b9:82:a1:6f:f2:c7:ed:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:95:52:C8:73:2A:02:5B:2B:6E:BE:7C:07:BA:A0:02:3B:8A:84:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/ebd423e7-a1d9-37f2-a9f6-7120fe6fbe05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:df:18:e7:54:ea:ea:de:93:e0:58:10:ec:ec:f2:d8:f1:fd:
         2e:69:37:71:10:f7:b1:50:61:4a:47:e3:9b:e3:c1:4d:5d:54:
         3a:3d:c2:6c:8a:59:fc:ab:ca:7c:2d:d0:09:7f:72:26:47:2e:
         08:7b:20:44:79:46:6a:f7:e5:94:d2:2b:02:9e:11:f1:da:6b:
         f1:08:cd:0a:fe:6c:72:b0:a5:d7:b6:0b:bb:69:b2:4f:2f:7d:
         9c:37:5f:7b:83:8f:34:12:e9:49:05:71:a5:5e:8c:6d:14:4b:
         79:ac:b9:63:7f:9b:33:91:b7:ef:a3:a8:cc:96:11:d5:f5:15:
         95:bf:8d:82:8e:fc:b9:97:8e:f7:24:4a:8c:5b:67:7c:3a:2f:
         9d:e1:98:8a:23:5e:83:66:1d:5b:94:d8:bf:d2:00:c2:85:65:
         ab:2a:12:b9:20:f1:41:db:9a:e6:5c:36:61:72:fd:eb:88:82:
         3c:fa:75:79:08:d7:25:19:34:d6:78:62:6d:d6:65:20:a4:0d:
         1d:7a:ca:1c:a2:33:53:e1:a4:d8:b0:f0:97:ea:ac:e4:0a:3d:
         8a:c5:de:8d:15:4f:b0:e2:ee:fe:9c:c8:0e:47:8c:e9:4a:2a:
         88:c1:05:a1:6e:67:e6:a9:96:dd:36:b8:55:72:96:cb:12:68:
         ad:7e:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:00 2026 by rpki-client