Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/00a455b6-a711-327b-a3ca-2b023a5c3df9.roa
File:                     00a455b6-a711-327b-a3ca-2b023a5c3df9.roa (raw, json)
Hash identifier:          alOsV3z46qBkC8eVDlpfz1vaEx03+FxjPZxtWedBI60=
Subject key identifier:   41:B2:0E:73:F6:12:CB:36:48:E7:89:AE:33:AD:05:81:A8:70:C9:E2
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584EA787EE599FFE70803EE27CC0
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/00a455b6-a711-327b-a3ca-2b023a5c3df9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14955
IP address blocks:        64.68.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ee:59:9f:fe:70:80:3e:e2:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=da7a4d18-2c67-4c4b-905e-76b00bb03e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:35:f2:1d:c3:fa:09:96:cd:df:00:c7:e8:
                    c4:99:0a:e4:31:3c:46:e3:3a:6b:63:5e:82:08:a2:
                    a4:72:47:20:26:73:6a:e0:9d:3d:80:99:e6:03:af:
                    de:73:f5:2f:47:8c:7a:d8:ac:8c:eb:84:84:e7:90:
                    ef:bc:94:c2:c9:1d:ee:7b:ea:cc:5d:74:44:fb:63:
                    6b:d4:b8:80:4c:ad:25:57:1c:e6:fa:85:b8:1a:6e:
                    e4:34:a3:ec:8d:eb:fa:38:8c:3c:3d:84:ce:2d:82:
                    fc:10:c8:af:4c:9a:cd:86:26:6b:b5:a4:e7:4f:6b:
                    48:b3:8b:d9:9a:34:e0:cd:b4:97:2b:05:66:38:cc:
                    eb:8d:ea:ee:2c:39:81:9b:01:7b:5d:e0:a6:ef:cf:
                    8a:b5:91:06:73:4d:c8:ae:b5:d7:0e:05:ff:92:71:
                    b5:21:ff:1a:ba:ca:0c:b7:7c:f1:e7:03:56:c3:09:
                    af:04:a3:7e:85:7c:ee:29:77:13:d5:10:3c:07:f1:
                    59:e8:28:04:b2:c8:85:c5:ff:bd:82:6c:c6:e4:4a:
                    a8:50:84:53:3c:d0:61:57:fe:15:b1:83:52:4e:c8:
                    2c:44:5f:cc:54:dc:68:3f:58:61:d1:d0:95:b6:5a:
                    be:53:ac:70:50:7b:1c:75:c2:5c:05:bb:38:5a:dc:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B2:0E:73:F6:12:CB:36:48:E7:89:AE:33:AD:05:81:A8:70:C9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/00a455b6-a711-327b-a3ca-2b023a5c3df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:8d:9d:0c:cd:33:5c:0c:35:13:c0:fd:f7:2e:8b:ec:d1:
         47:47:5a:8d:68:88:0b:f5:d8:12:d7:86:0e:09:85:d9:5d:c9:
         eb:d7:bc:ef:e9:73:a6:5a:5a:ac:de:66:da:c1:61:1e:d0:97:
         67:ad:dc:b8:68:63:4d:7c:8b:99:ca:81:a6:9c:d7:40:99:e8:
         c8:05:3e:da:be:f4:aa:a2:99:8a:d0:86:5c:ef:2b:3c:ce:56:
         f6:13:90:6d:46:1e:82:71:96:22:be:63:eb:60:9c:c2:c3:bb:
         01:2d:e3:62:bf:a2:a0:b2:36:ad:4e:c2:06:83:3a:e6:ca:b0:
         57:68:59:53:ed:37:e9:98:ae:5e:f3:37:00:7a:04:91:85:9c:
         79:35:e0:cc:07:dc:39:43:fc:53:ef:a3:98:45:04:53:b0:11:
         c0:46:39:05:a2:50:78:e2:86:1d:5d:85:d3:bf:60:eb:86:3d:
         78:9f:d2:71:e2:6d:1d:c3:67:0d:a9:ab:45:87:69:14:ac:37:
         22:64:b4:89:6a:f9:5d:73:d8:5f:1c:63:57:55:5c:13:ef:3f:
         97:72:c8:77:de:4a:3f:25:b7:9e:74:51:8b:8c:8d:ea:2e:d8:
         d3:04:74:2b:2f:90:4b:bb:e2:ec:d3:df:fc:b6:35:52:fa:02:
         4b:3f:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:38:42 2026 by rpki-client