Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa
File:                     df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa (raw, json)
Hash identifier:          hBIVMLGBf8bB9+Q1IFoFsHEbEMgXXG3PrkaLGBsjKQQ=
Subject key identifier:   DB:A4:28:3E:84:E3:A2:C3:08:5E:C4:54:DF:69:6B:BA:7C:B3:8F:30
Certificate issuer:       /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial:       010D0C9F4328584E9BE518DDC7D4FB82CBEEAB80
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     7784
IP address blocks:        65.79.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:18:dd:c7:d4:fb:82:cb:ee:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=89685fc5-77ee-49d0-bcbd-676a4c3d7a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:06:fe:ca:f1:46:3d:12:5c:9a:2c:29:52:
                    98:d9:7f:49:e7:b2:0c:bc:f0:b7:1d:87:8f:4a:5c:
                    3f:46:93:5a:56:e6:d1:8e:91:b0:da:e0:a9:80:37:
                    fb:a8:d7:32:f2:35:77:3b:4e:d1:ee:ae:ca:0b:a9:
                    ce:a0:92:d6:cc:2c:12:99:65:dd:8d:a6:6f:88:8f:
                    1a:a3:50:b5:60:6e:e6:fc:93:02:67:4b:e1:36:bd:
                    0b:73:50:e3:3a:83:fa:c2:23:12:94:41:67:71:47:
                    8b:53:b6:02:1a:14:89:04:27:f3:30:a0:89:a5:62:
                    ba:68:ed:68:c4:74:14:a9:8d:f4:53:c4:5f:9c:29:
                    0d:70:bf:f2:d1:cc:6f:ad:7b:e6:c4:c7:7c:01:9a:
                    95:36:17:cd:f0:cb:09:98:0d:49:e5:af:59:0a:19:
                    47:42:2a:26:91:a2:e1:f4:cb:0b:a0:7f:ea:4c:11:
                    2e:b6:02:dc:16:9a:ac:d1:1d:bc:85:53:d2:13:cd:
                    5b:1c:55:da:f9:72:03:d0:a7:12:01:9e:22:2d:2b:
                    be:cb:38:02:71:91:d4:18:d1:af:bf:bd:2f:b9:55:
                    df:73:2a:3a:4c:18:5e:80:99:5c:7d:19:33:12:89:
                    e9:1a:d3:65:86:f9:46:c5:eb:8d:42:34:96:c2:1a:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:28:3E:84:E3:A2:C3:08:5E:C4:54:DF:69:6B:BA:7C:B3:8F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.79.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:a5:95:b4:14:74:ac:02:89:62:95:b0:3e:80:e9:14:94:
         d9:1b:5b:60:8a:d1:00:ba:33:f1:64:6d:32:b8:e0:bd:df:2f:
         76:4e:01:14:b2:c7:00:39:02:bb:2b:d2:40:93:1f:c2:d2:5e:
         cb:cf:8e:cf:b0:07:00:06:80:38:98:1d:2f:01:8e:74:6a:1a:
         df:c0:6e:c4:c9:8a:b7:fe:71:4e:99:89:9a:5c:df:fe:fc:28:
         bf:07:40:1f:d4:1d:1b:97:60:ca:15:17:db:40:a1:da:12:6f:
         af:9e:bc:ef:be:24:11:4c:40:fb:31:b2:33:cd:19:f1:9d:4f:
         76:f4:e3:46:2b:20:16:d8:34:cd:b4:a7:cf:98:82:48:7b:f0:
         5d:6c:cb:b3:72:36:7e:5b:aa:10:79:f9:39:e3:4e:97:d4:fe:
         20:2d:fe:cc:ad:62:d5:00:4b:50:ac:99:66:39:1f:63:bd:32:
         bc:cc:cc:0a:ef:ea:5b:9e:90:51:90:a0:98:da:a8:4c:26:2f:
         58:e4:f6:2d:b0:87:d6:b5:5a:5e:aa:e2:a1:cc:dc:01:ba:24:
         d9:76:c9:df:75:45:a2:e6:0c:7a:41:e9:bf:c9:e3:81:e4:d3:
         99:02:32:50:d0:16:57:d0:88:2b:70:27:5b:77:98:69:99:0d:
         4c:d2:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 04:33:06 2026 by rpki-client