Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa
File:                     72035800-3e75-3949-9085-d1960203a8c1.roa (raw, json)
Hash identifier:          7S7ciiktrf0A+4UxTmg+LPMpf3yCUBjuS4zJ/ZTf5vs=
Subject key identifier:   86:8D:47:45:1E:09:08:AB:56:17:66:B5:E9:E4:BD:E2:6F:C4:87:4D
Certificate issuer:       /CN=e553e5ec-0211-480d-9476-86db3dbe2182
Certificate serial:       010D0C9F4328584EA791A9406947A828636BF7B0
Authority key identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        192.159.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:a9:40:69:47:a8:28:63:6b:f7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553e5ec-0211-480d-9476-86db3dbe2182
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea494016-63b8-4c20-8cf6-fbac2a6bacf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:85:8e:ad:4e:39:47:e8:c7:f2:a0:86:ec:
                    25:2b:98:00:11:ce:e7:de:e7:a5:a0:cc:c1:b6:a0:
                    19:a1:85:97:7e:e5:68:ca:31:6d:24:72:20:f6:6d:
                    f3:7e:2a:9e:29:c7:8a:30:bb:c6:be:9a:0a:90:23:
                    28:70:4f:29:7e:b8:d6:9b:f6:ad:6c:3e:61:35:3a:
                    75:7b:a2:2e:23:f2:b6:d8:f7:60:15:0f:47:62:8e:
                    18:84:7c:4a:f3:21:f9:70:df:c7:dd:f1:a6:8d:df:
                    39:23:c8:3c:11:97:f5:25:b5:dc:2c:68:ad:de:a7:
                    d3:96:41:d7:1f:94:f2:74:50:e9:f8:58:3b:5a:a4:
                    be:94:68:7f:74:9e:b8:0b:23:cc:d6:23:6b:51:93:
                    16:d6:b3:70:82:5d:36:4e:15:0d:95:26:dc:16:d4:
                    c8:1b:57:1e:e7:69:66:87:2d:da:46:36:6c:5e:6c:
                    75:ec:d8:d0:b6:f2:99:1e:ec:c5:f4:b7:bc:45:3f:
                    8e:29:88:58:f8:21:64:82:01:8c:7a:cd:e8:3a:00:
                    a6:d1:54:48:86:81:8a:76:72:82:1e:71:07:ed:9e:
                    22:44:d6:66:2c:73:ef:76:d9:ed:39:e7:ca:0f:91:
                    59:cc:e9:1a:2d:4c:bc:5c:69:73:d7:ee:28:4d:e9:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8D:47:45:1E:09:08:AB:56:17:66:B5:E9:E4:BD:E2:6F:C4:87:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl

            X509v3 Authority Key Identifier:
                keyid:74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:45:4d:0a:4b:c0:29:ac:87:e1:3a:e8:02:ee:39:17:ee:28:
         8f:76:30:c1:59:a0:2d:64:44:4f:1f:cf:d1:ac:45:f7:09:5b:
         dd:7a:b7:f9:31:0e:36:10:44:1f:be:80:e6:69:13:13:97:71:
         2f:ed:96:33:bb:d4:c8:6a:fb:0d:01:4c:2d:59:5b:77:53:05:
         a2:53:ab:8a:8a:32:67:c0:64:d3:83:bc:8f:0e:6f:54:03:1f:
         25:04:23:c6:78:b3:ae:da:19:83:d0:2f:db:bc:c1:7d:c7:50:
         1b:4b:79:d4:bc:c7:09:68:ab:96:a6:ec:74:0d:05:f1:93:b1:
         6c:23:95:95:26:60:a8:3e:e9:d9:9a:8c:54:91:01:d4:5e:c3:
         82:31:c8:6e:14:e8:cb:1d:8f:98:e0:31:75:53:b2:3b:3e:28:
         6e:96:23:8c:eb:f1:0f:11:9a:aa:3b:d4:98:ee:2c:a8:58:3b:
         f9:ca:ab:65:50:ef:5c:f6:35:d3:9d:6b:f5:7d:c9:ad:e8:86:
         fd:87:ca:17:45:82:e0:77:20:b0:ad:9e:c1:c5:27:9e:b8:c5:
         a3:68:83:a3:84:a7:70:93:44:d6:61:f4:7d:6f:bc:d9:2b:9b:
         ce:af:05:10:56:80:fe:9c:68:5b:1d:b8:3b:25:fa:d6:48:6a:
         f2:c7:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:16:02 2026 by rpki-client