Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa
File:                     3581304a-962f-3365-9bef-ffc42b70f1cf.roa (raw, json)
Hash identifier:          3FTbt6XKGnY+I6j/T5LyDCAEcQJnukAqaoUBxpbCACs=
Subject key identifier:   F7:A9:0B:66:D4:6D:9D:13:07:1D:FD:CD:13:41:2A:52:43:54:42:F3
Certificate issuer:       /CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
Certificate serial:       010D0C9F4328584ED861D937FE91005D873BAA80
Authority key identifier: 6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     19050
IP address blocks:        156.40.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:d9:37:fe:91:00:5d:87:3b:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=b0d84768-fea3-4478-9db2-713a28a87c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:df:fa:f6:bc:39:7b:ad:85:58:7c:15:cc:
                    92:5f:91:70:8f:26:06:7c:67:7d:f1:97:c7:c0:ad:
                    45:ca:38:d0:0d:4f:3d:3a:bf:be:46:53:6c:b5:64:
                    c4:9c:66:34:99:a9:26:ca:8b:b1:41:5a:35:fe:95:
                    17:a5:9a:bc:d1:1c:5b:7e:d1:f5:84:b5:f3:f5:67:
                    a4:04:d8:af:00:7c:45:b3:ab:5e:88:8e:24:8e:6c:
                    ac:e1:a5:e1:b0:49:34:a2:d1:f6:fd:2d:9f:96:eb:
                    52:da:aa:fd:4a:e3:e2:53:cc:26:a2:85:41:6a:30:
                    45:fd:9b:80:8e:ce:70:2c:82:5f:e5:e4:df:d7:a9:
                    0e:45:4a:c1:1c:06:7d:44:5e:85:4c:8c:2c:b7:fa:
                    01:d5:0e:7c:a3:75:4a:1c:01:99:22:33:9c:3e:a3:
                    b7:c1:d4:cf:c0:98:ef:77:a6:dd:65:55:83:8d:14:
                    be:a9:80:eb:5a:a8:48:a9:29:7a:6f:d5:2f:c9:c7:
                    56:22:8b:12:55:ef:c9:43:f2:16:0b:98:25:98:79:
                    59:8c:fc:75:6d:8f:df:d8:f5:39:24:6d:89:6d:a6:
                    03:0e:68:3f:41:b7:bc:05:d0:a7:4f:e7:6d:86:27:
                    f6:6f:b1:50:99:d6:2d:bf:33:14:5c:1b:ea:a8:32:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:0B:66:D4:6D:9D:13:07:1D:FD:CD:13:41:2A:52:43:54:42:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/3581304a-962f-3365-9bef-ffc42b70f1cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl

            X509v3 Authority Key Identifier:
                keyid:6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.40.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ae:71:93:26:99:f4:73:b4:c8:16:7c:2e:db:0f:8a:74:0a:
         ec:b5:39:a2:f5:8c:97:9f:a3:a4:f2:33:85:e8:a5:05:f1:9a:
         23:1a:03:c9:2f:f1:9e:45:67:c4:c0:a2:d0:54:d9:ba:b3:b3:
         44:c0:0b:ab:90:90:d1:69:48:19:30:f7:9c:41:c8:b0:2f:44:
         8a:01:53:f1:7d:d4:e9:55:b5:af:a8:d3:92:eb:d2:a3:14:bc:
         f6:7b:90:8f:ba:aa:bf:d5:fd:1c:a7:4f:22:09:5d:96:62:65:
         d0:3a:75:b2:3b:70:ed:cf:0c:43:32:52:40:47:e6:cb:1a:c7:
         40:68:49:66:84:86:a8:af:63:06:15:ba:bd:b4:b7:dc:50:a4:
         6a:d0:99:69:31:3c:1c:cf:19:bc:0e:20:12:cd:fc:1c:3c:05:
         1b:7d:c5:2f:8b:9f:2b:4a:f4:15:ae:8d:48:ee:02:bf:46:6a:
         62:18:dd:fe:94:66:da:e5:e7:21:82:6c:f6:43:2c:6f:a3:68:
         b0:80:e0:d9:fd:df:09:28:d8:a8:09:04:ec:ac:ad:ba:99:e7:
         7b:3f:90:a5:df:77:46:c3:12:87:53:81:2b:2d:1f:80:08:21:
         8a:c5:4e:3d:b8:a6:6d:95:62:b9:b6:9d:b7:a3:fc:46:38:79:
         a9:a4:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:40 2026 by rpki-client