Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c147bfd7-1d2a-3456-92ae-74b2ad4b07c4.roa
File:                     c147bfd7-1d2a-3456-92ae-74b2ad4b07c4.roa (raw, json)
Hash identifier:          n1cEaZbzoMvzKV3bBxtXGWf9B9tidovHcj55QUyAkPc=
Subject key identifier:   57:71:E3:1B:5D:8B:50:57:CC:AB:E1:6A:46:FF:99:79:CA:0A:10:BB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74888492E52C35F8F094A
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c147bfd7-1d2a-3456-92ae-74b2ad4b07c4.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     20115
IP address blocks:        174.80.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:48:88:49:2e:52:c3:5f:8f:09:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=902752f1-c608-49e3-887b-1026b3f53d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:0c:47:72:61:cf:b7:3e:fc:35:5a:6f:59:
                    6f:1d:d2:d5:83:8d:71:e9:54:b9:d8:46:56:11:ff:
                    59:cc:05:2f:d6:ea:da:64:b6:c5:18:c2:78:3c:a7:
                    e2:71:7d:cf:2a:7c:fc:56:c6:1f:b4:c5:3f:a9:1b:
                    79:b6:ab:9a:e9:81:b8:9e:40:e9:a2:9d:c6:ac:97:
                    74:04:bf:0f:50:02:85:0e:bf:74:f7:f7:ae:a2:7a:
                    29:8c:d0:cd:27:30:98:f5:38:66:e1:32:5e:84:2b:
                    8d:ae:96:a2:0f:9d:7b:d2:58:0c:83:2c:08:42:a7:
                    88:2b:f4:60:66:b3:73:2e:4e:36:ec:e7:e8:12:cd:
                    a7:aa:b2:a4:02:36:44:aa:24:06:74:7b:c7:fd:10:
                    84:48:ee:36:8a:84:49:79:62:6c:b4:38:03:a2:44:
                    f7:e0:c6:b3:b2:ab:c8:58:d9:5b:78:2a:7e:e1:53:
                    fa:a4:43:61:7e:c3:90:3e:c7:37:42:d5:e3:93:96:
                    ba:18:2f:35:9d:56:68:4b:2d:24:e2:0c:60:94:32:
                    96:a4:54:7a:97:91:38:20:c4:bb:20:fa:22:d1:5c:
                    0e:47:54:f9:d5:e9:b6:e3:9c:06:4b:5d:e7:3c:73:
                    46:33:58:8f:ce:44:1b:8b:9a:ff:12:83:c1:98:0d:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:E3:1B:5D:8B:50:57:CC:AB:E1:6A:46:FF:99:79:CA:0A:10:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c147bfd7-1d2a-3456-92ae-74b2ad4b07c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.80.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:03:e4:ca:72:5a:99:73:44:f8:29:08:09:8c:fe:7d:a4:bb:
         e1:19:aa:74:1d:49:5c:22:83:56:77:74:60:ed:db:7e:bd:f4:
         81:a6:6d:dc:a1:33:8e:37:27:f2:85:30:af:2b:95:e6:99:a7:
         48:6f:a1:79:00:7a:cb:f0:13:3e:f5:db:c8:a7:e4:8d:ad:da:
         88:87:c8:63:dc:54:ab:f3:b6:52:4d:7a:e9:df:54:e8:af:89:
         bc:03:c9:3f:c3:17:68:61:bd:17:df:52:fb:ec:c0:f8:dc:ed:
         78:36:e7:6c:63:4e:b5:9e:37:86:a1:27:aa:0f:79:72:bd:e2:
         29:9d:b3:ea:4c:d7:ad:4e:2e:89:74:b2:c6:ec:55:37:00:64:
         03:f0:a1:bd:6e:56:0e:f7:8c:d7:34:df:9f:34:a7:d8:e5:cd:
         77:68:5a:9e:e1:26:c6:d6:85:db:e9:0e:84:39:18:f9:f6:5b:
         e6:f8:5c:06:70:a5:d5:41:ad:53:d1:25:02:97:42:04:b1:cd:
         e3:27:f1:0e:25:f4:77:9c:11:52:f3:94:d2:50:c6:7c:e4:28:
         4f:74:13:74:97:d0:c2:f2:c8:ee:16:ea:94:5a:7c:4d:7f:e8:
         8e:b3:2f:45:7a:ef:df:42:49:3f:70:53:74:1e:48:6b:38:cb:
         91:f7:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:24:34 2026 by rpki-client