Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e85e67b-9137-3b1a-954a-a6f03523b072.roa
File:                     3e85e67b-9137-3b1a-954a-a6f03523b072.roa (raw, json)
Hash identifier:          kv4zuIuZ4D+13QlVW/WDmizysUxn6pdvgFhCR8pLBw8=
Subject key identifier:   9F:5A:6B:7F:91:B1:B4:71:51:AC:89:47:1E:E0:B9:21:05:98:E8:5A
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA236F5FB7BA47BF0749980
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e85e67b-9137-3b1a-954a-a6f03523b072.roa
Signing time:             Sun 19 Jul 2026 18:24:20 +0000
ROA not before:           Sun 19 Jul 2026 18:24:20 +0000
ROA not after:            Sat 17 Oct 2026 18:24:20 +0000
asID:                     54858
IP address blocks:        162.211.216.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:36:f5:fb:7b:a4:7b:f0:74:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:20 2026 GMT
            Not After : Oct 17 18:24:20 2026 GMT
        Subject: CN=6077d6a8-efdc-4ac2-bbca-8937ba561ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:0b:3b:61:05:19:5f:05:0e:00:7a:2a:84:
                    aa:6b:13:ec:a9:c6:c2:ad:2f:91:5d:8b:fa:da:4b:
                    9d:e8:ed:ab:ab:94:b6:05:6f:2b:16:bd:43:21:2d:
                    3d:f3:37:88:ee:a9:86:fb:e6:81:40:e0:45:d1:cb:
                    30:db:e0:cd:6c:6c:28:f1:bc:44:79:cf:d7:d5:fb:
                    1e:d1:87:36:ad:ad:75:02:f7:79:7b:8e:d4:17:a2:
                    03:2c:14:b9:92:76:c2:01:23:0a:11:3c:ca:07:9e:
                    56:f5:66:45:39:75:2a:0f:e0:f2:25:6b:33:02:ab:
                    c0:94:b3:56:40:48:93:91:41:e9:c3:71:3d:93:e8:
                    9e:36:a3:28:43:6f:0a:7b:19:e1:a7:68:b0:f4:16:
                    0d:d0:63:10:4a:00:7a:34:e8:86:fe:a0:25:75:f1:
                    cf:ca:8c:85:d2:26:2e:26:01:3f:7e:b6:eb:25:8c:
                    17:c2:76:03:8e:4b:db:db:75:8d:8a:2b:0d:41:37:
                    4c:83:64:7c:a9:09:ca:c6:63:0e:0f:dd:2c:f0:03:
                    98:88:47:27:42:2e:2d:c7:4e:3d:12:79:e2:58:b9:
                    c2:df:e1:bf:13:36:fa:64:ce:25:cf:d8:7f:5f:2b:
                    28:6f:47:b1:d5:a2:08:e9:b5:fa:43:85:ed:08:8e:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:6B:7F:91:B1:B4:71:51:AC:89:47:1E:E0:B9:21:05:98:E8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e85e67b-9137-3b1a-954a-a6f03523b072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:8a:9d:69:9b:d7:d4:43:41:c8:13:a4:24:6a:3b:d9:32:
         dd:5e:0a:f9:f1:a8:3b:ee:4e:d4:ee:a1:88:56:77:ca:98:26:
         38:b6:a9:20:36:b3:69:43:07:af:0a:02:a1:5d:57:a7:d3:c9:
         e1:32:04:a7:45:36:a2:b1:fa:8f:9a:fd:c9:6d:85:3a:07:d0:
         66:0f:b2:48:49:cf:4d:52:6d:20:a9:a2:43:95:62:2a:f4:ec:
         b6:c3:a8:8a:25:35:d1:25:d8:b3:60:42:17:75:c0:de:90:b6:
         7c:7b:2b:a0:c5:fe:6e:5b:17:3a:5e:11:97:e1:7d:a8:cc:bc:
         b2:2d:c4:5f:75:d9:a2:d9:69:80:6f:27:be:a2:4d:ce:92:86:
         c7:2a:c4:ad:81:1e:58:5b:1c:48:e6:4e:90:3f:ed:f8:5f:46:
         2b:ed:ed:89:25:47:f1:99:08:90:1e:8f:1c:86:f8:30:b2:2f:
         da:49:77:78:e3:62:0a:72:76:e9:83:9a:26:23:e4:5e:3f:e3:
         f4:4b:d1:65:8c:a2:bc:78:cc:b5:98:67:92:03:1e:28:45:83:
         c3:4a:f2:56:b5:f3:38:a8:f0:71:51:4c:3f:b9:51:bb:c2:cc:
         6b:bd:9a:96:6d:58:82:4f:ee:b2:fc:78:bc:aa:de:f6:c1:5f:
         88:b4:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:33 2026 by rpki-client