Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/5cc9dbfb-67db-31bc-becb-eb128825a647.roa
File:                     5cc9dbfb-67db-31bc-becb-eb128825a647.roa (raw, json)
Hash identifier:          Ao6bul9FI8lfvQQakZhVFfTpzwfsiMOJx/ePW9f+XrU=
Subject key identifier:   9B:70:64:48:C8:57:D8:1F:30:51:BA:D1:80:87:59:E2:70:6A:68:98
Certificate issuer:       /CN=d0e55fb5-7c4e-4041-b853-ad74b8542e86
Certificate serial:       010D0C9F4328584E6574ADBD85A673503DF5E600
Authority key identifier: 50:F4:9B:3B:6F:60:84:6C:76:5A:85:5E:71:1B:36:29:78:20:1F:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/5cc9dbfb-67db-31bc-becb-eb128825a647.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     207977
IP address blocks:        167.253.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/d0e55fb5-7c4e-4041-b853-ad74b8542e86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/d0e55fb5-7c4e-4041-b853-ad74b8542e86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:ad:bd:85:a6:73:50:3d:f5:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e55fb5-7c4e-4041-b853-ad74b8542e86
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=e7401b38-9f2e-46cf-b511-4f1b5083778b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:1d:4c:12:a1:66:80:ce:be:5b:27:9c:31:
                    27:12:2f:73:44:6b:34:3e:e5:75:52:8a:d9:76:c2:
                    e5:e0:57:21:06:b4:9e:d4:05:84:6b:29:b3:52:90:
                    63:bf:2e:06:19:50:6b:85:b7:38:62:74:e2:91:6b:
                    35:15:32:6e:55:be:bf:bf:ad:22:12:0b:75:5c:82:
                    2f:28:ee:43:db:bf:e4:d4:1c:fe:a1:4a:0a:e9:4f:
                    f9:c3:d0:87:8f:e5:a7:a0:0f:b3:92:25:87:4f:d9:
                    60:e0:ca:65:bc:fb:ea:de:30:45:59:ad:44:ae:f4:
                    30:e2:ee:0a:1b:31:82:1f:04:44:64:c7:ad:43:b8:
                    88:6c:c0:6c:0b:d1:29:35:76:8b:12:f9:38:ca:8f:
                    6d:98:48:d1:b8:a1:2e:1c:56:24:99:14:55:33:1a:
                    89:43:04:3a:d9:86:7d:29:83:20:cb:b4:00:86:05:
                    4b:7a:2d:4e:bc:90:38:79:1b:e5:69:b6:fe:d8:b2:
                    42:09:dc:a6:a5:15:c3:89:3a:9f:67:91:13:25:c2:
                    74:1c:7b:e4:0c:dc:50:a2:d1:fd:5e:91:0e:08:52:
                    fa:08:61:c4:22:78:d2:a8:46:19:1d:dd:df:9e:65:
                    a9:a3:0c:81:7e:06:a5:bf:66:91:5b:9c:0f:92:22:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:64:48:C8:57:D8:1F:30:51:BA:D1:80:87:59:E2:70:6A:68:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/5cc9dbfb-67db-31bc-becb-eb128825a647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/d0e55fb5-7c4e-4041-b853-ad74b8542e86.crl

            X509v3 Authority Key Identifier:
                keyid:50:F4:9B:3B:6F:60:84:6C:76:5A:85:5E:71:1B:36:29:78:20:1F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:1f:7b:4a:f2:d4:3f:12:67:9d:58:bf:4b:09:e4:2d:a6:
         ce:91:fc:f6:40:15:05:31:b6:31:5f:09:17:3f:bf:7a:73:ce:
         7e:81:0e:6f:07:32:7b:a4:2c:ca:fb:b9:ae:bc:f2:92:da:04:
         92:d0:d9:6e:a2:a6:68:f4:d9:25:55:5b:d4:43:15:02:ef:52:
         2a:52:2c:10:11:16:9b:40:01:cf:91:57:22:9a:2e:89:0f:01:
         8f:cb:9b:0a:0b:b4:a2:fc:bc:09:3f:d1:8f:b5:71:18:55:9d:
         69:ca:3c:30:01:a3:51:f9:77:79:22:f0:50:ff:97:08:c6:84:
         3c:12:7b:50:01:ff:ea:f2:a5:3a:ad:26:32:ee:61:55:28:c7:
         59:c5:2f:d0:64:13:8c:4c:d4:cd:f9:62:b2:4f:00:9d:2d:a6:
         46:2f:1a:70:ba:04:b8:a1:4b:03:09:62:68:26:97:fe:70:18:
         a7:93:69:fb:39:ac:bc:da:f7:cf:8f:81:32:1e:d7:d4:5e:b6:
         d5:5e:89:db:3d:56:4a:c4:8e:96:01:4b:1f:0d:ae:56:f8:8f:
         49:dc:09:b4:fe:0a:90:d3:f4:19:3d:52:0e:7a:95:02:58:73:
         6e:57:1a:f4:65:5d:e6:8d:f2:8e:d5:1f:90:1b:8a:c8:c9:04:
         69:26:c8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:16:35 2026 by rpki-client