Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa
File:                     640896d2-3779-3ec9-a9f8-7165c4473520.roa (raw, json)
Hash identifier:          o53haEWdnc9ZaU92waDhfL0ZDOuL5jpDIGYXndtmlqw=
Subject key identifier:   87:6B:91:3A:BC:CD:06:90:10:1E:FF:F1:45:1E:85:3A:66:CA:E9:E8
Certificate issuer:       /CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
Certificate serial:       010D0C9F4328584E4559E4CE6071302B2353CC80
Authority key identifier: 69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     393770
IP address blocks:        161.129.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e4:ce:60:71:30:2b:23:53:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=5bf50325-eb6a-4320-a36d-ceb6c16fbe74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:30:ff:ea:96:be:59:6a:5e:a2:81:2d:07:
                    c5:b5:1d:4e:92:f7:20:14:34:41:fc:ad:7b:aa:7f:
                    f9:ff:e2:0f:36:09:10:6b:e1:11:1d:5e:86:ab:1f:
                    3c:f0:03:d5:c6:0b:66:13:9d:e3:cf:70:5a:3b:ce:
                    c5:63:e7:05:f7:e0:f2:3e:c3:7d:02:d0:85:1f:41:
                    02:af:6a:d5:b7:f7:38:e7:a3:fa:63:b1:e1:37:d0:
                    1d:1a:cd:a4:59:75:42:9e:a1:6f:b7:ea:75:9f:52:
                    5b:10:c5:c9:1d:b2:06:1f:bc:c2:a8:7d:90:51:78:
                    07:4b:c0:28:4d:03:e8:52:e9:d1:01:9c:e2:99:77:
                    98:f0:13:10:48:ba:80:02:2c:df:58:7a:a6:81:1a:
                    f4:2d:77:c3:73:fd:ba:8e:33:e2:52:92:04:b1:5a:
                    82:6b:62:aa:75:08:ab:a1:fb:72:eb:6d:58:8d:3b:
                    ce:f0:20:b2:1b:7f:05:a9:74:96:c0:31:4c:ec:bc:
                    b5:09:e4:bc:b0:3e:c7:b8:ba:78:b3:5e:f1:10:53:
                    ea:88:d1:5c:83:9e:69:89:96:61:9a:7b:47:52:52:
                    45:5e:a8:9c:f7:d3:83:d2:5b:a3:ec:c9:f0:a0:22:
                    02:d8:c6:d3:00:95:bd:e7:75:ea:c1:f6:a8:ae:a9:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:91:3A:BC:CD:06:90:10:1E:FF:F1:45:1E:85:3A:66:CA:E9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl

            X509v3 Authority Key Identifier:
                keyid:69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:f0:3e:07:1f:77:6b:19:ff:6e:77:9f:81:68:15:0a:aa:
         9d:f8:4e:62:11:8c:48:6e:dd:6b:1a:9b:09:0b:06:f6:f7:10:
         34:dd:66:da:ef:3d:19:1d:c6:72:c6:c1:41:d5:07:fa:35:b1:
         66:ed:83:36:20:25:c5:6c:07:a2:5f:2c:ce:9c:63:ea:ec:98:
         47:a6:2d:b1:cb:c3:63:e8:bf:9a:16:4c:0c:9c:75:4f:4e:96:
         30:c7:c2:02:7d:08:a2:ec:16:1c:63:79:0e:59:38:90:8e:c4:
         e5:19:50:a1:fb:38:66:da:d7:4d:b5:52:42:9a:4e:74:b1:16:
         08:00:fe:9a:e3:70:70:15:28:c1:0f:f2:92:c6:8a:fb:09:d0:
         ce:be:14:0c:a7:56:be:de:80:21:d5:a1:ef:93:ea:da:0b:82:
         f2:ee:e3:a4:9e:89:49:a2:71:6e:40:19:be:b1:2e:2c:a0:3d:
         92:21:fb:b8:47:a5:70:84:59:50:d6:12:f9:d4:5d:a3:80:23:
         a1:61:2a:87:8d:c4:ad:c5:23:8c:02:0f:2b:11:55:df:a2:ac:
         5f:18:68:a5:4a:7c:de:f3:62:8d:86:40:f3:83:14:06:41:d1:
         56:06:5c:f6:cc:7b:d0:ce:13:f0:6f:f2:b2:ac:66:d8:ce:e8:
         b8:a4:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:30 2026 by rpki-client