Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa
File:                     97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa (raw, json)
Hash identifier:          SyR5sd3tR4iOUcNVw41DFs0Zp9rx38ajNtcPj37wXf8=
Subject key identifier:   5E:78:91:97:F0:CC:75:66:CB:BF:F9:03:64:96:1C:15:16:05:B2:A6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EA8EC4B2A5A31736B7EB22AC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     33363
IP address blocks:        71.44.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4b:2a:5a:31:73:6b:7e:b2:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=72a481da-1c99-4057-b765-4d7ce43c1db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:1d:76:21:a4:d2:57:88:cf:4e:f4:0b:e9:
                    e9:c0:3f:6b:d2:89:6b:78:2a:ff:35:1f:2d:f7:92:
                    7a:48:bc:3c:9f:46:a6:9e:2e:86:0f:7c:4c:6c:08:
                    bf:61:2a:66:0c:60:f6:80:6e:34:1e:e5:82:4b:07:
                    f4:67:70:6f:b7:bd:f8:76:12:35:d0:d3:ac:7b:47:
                    e3:04:bb:bc:2f:d0:fc:e7:ab:5d:2e:0b:07:c2:0f:
                    e4:24:85:2f:d7:78:a1:70:5d:58:a9:0b:7b:df:ff:
                    b2:b9:f2:f2:cc:8f:a5:79:a3:21:17:a2:42:04:75:
                    86:ca:a6:e2:a3:ec:97:ef:ef:04:25:51:da:cf:2b:
                    54:26:b1:7b:92:f1:5d:8d:e9:28:d6:17:96:c0:d2:
                    41:3f:f1:c3:ce:17:96:b0:83:d2:aa:c4:b2:08:45:
                    9a:e4:24:b2:06:0d:17:23:26:4d:aa:2e:12:c9:68:
                    27:fd:89:46:4d:49:ed:b1:8d:d1:b4:1d:11:1e:fc:
                    11:7d:a2:01:98:d6:d7:45:a1:bc:b1:10:da:69:4c:
                    d0:79:71:94:a5:0f:19:ae:1c:e3:73:43:4b:67:75:
                    26:cd:59:53:11:64:3f:bd:30:13:80:1a:f9:aa:42:
                    d5:99:38:9b:1e:07:dc:64:a9:f6:de:1f:9a:cf:bd:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:78:91:97:F0:CC:75:66:CB:BF:F9:03:64:96:1C:15:16:05:B2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97be8681-f0a7-30b4-8bac-a34fd63ca7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8d:9d:e2:14:eb:a8:cb:07:55:30:24:d3:5d:0b:c0:59:bc:
         6e:06:1e:dc:c2:52:4e:e0:1b:88:f2:b0:32:18:52:5e:b2:57:
         b0:f8:fe:29:b0:9b:22:e9:b9:6e:a6:c7:02:1f:e8:ab:1e:7f:
         23:99:c8:f6:c1:ee:85:12:30:c3:b8:3a:74:bb:e3:d1:47:ac:
         2c:86:10:34:a6:2a:7f:ba:d3:64:6b:28:ef:84:0d:12:f3:ae:
         aa:2b:36:ca:56:53:a5:32:c3:a1:b0:b6:80:64:85:62:c3:d2:
         eb:81:d0:5f:0c:34:ff:1d:5f:85:15:73:96:90:60:1a:ac:e0:
         0e:b3:0f:f6:db:30:3a:2b:04:09:09:79:a0:24:3e:5b:c4:1a:
         57:bd:3c:12:6a:1e:14:48:e3:e1:a2:4d:cd:a3:82:96:12:08:
         14:24:b8:93:34:ca:50:5d:9d:96:b3:87:25:0c:79:56:65:c5:
         c1:a3:47:cd:04:ff:9e:d9:77:49:3e:a9:7d:28:49:3b:f1:8a:
         18:7f:09:1a:a5:45:bd:57:e9:6c:22:ba:02:75:bd:23:0e:e5:
         67:4b:9a:1b:37:2b:f9:15:8a:8b:83:8f:fb:1b:27:80:2d:af:
         00:97:b7:a5:40:9d:e1:72:51:fd:d4:62:3b:4a:c9:7f:de:33:
         ac:89:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:06:55 2026 by rpki-client