Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa
File:                     cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa (raw, json)
Hash identifier:          n33epyKW7Nhx4FWp0GmHfZ9AQQzrjvXruykFKxNdMhg=
Subject key identifier:   E1:53:29:55:0F:51:C9:67:DB:EA:1A:0E:E9:56:67:08:38:64:02:25
Certificate issuer:       /CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
Certificate serial:       010D0C9F4328584EA796DE4A7D55A148D82B3B80
Authority key identifier: 47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        159.220.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:de:4a:7d:55:a1:48:d8:2b:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e2dfc82f-a237-4c3e-9b3d-43704958a97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d3:10:c3:82:5b:06:2a:79:26:81:71:d5:ef:
                    fc:6f:ae:78:b9:5e:02:0d:38:b5:51:f5:c6:42:df:
                    c8:f5:17:c0:b2:3c:f3:50:d1:3e:93:ad:9a:b7:39:
                    01:08:05:fc:0d:f5:b9:55:4e:8d:37:61:d8:de:99:
                    de:53:88:4a:6a:76:ff:23:49:ff:cd:ff:57:55:f1:
                    25:96:a6:37:92:f6:19:d2:9f:14:91:d4:09:c8:0a:
                    57:db:b6:ac:f4:f0:6e:75:69:dc:55:18:8b:5d:7d:
                    53:f9:a9:09:c6:c0:22:f1:0d:e5:47:e2:f0:cc:52:
                    8c:80:f3:c6:b6:90:62:e2:4b:2e:6e:ac:2f:f0:8d:
                    55:e6:b4:36:a7:df:2c:ce:e5:3e:bb:42:b4:1f:1b:
                    61:6d:ed:c8:9c:77:5d:6e:8d:24:b2:1a:ae:63:d5:
                    bf:34:b3:5b:50:5d:d0:72:e6:5e:14:e0:0c:bd:d7:
                    7d:b1:a9:04:f1:c6:62:a4:be:bf:1e:a0:04:9e:c0:
                    6c:d5:7e:a2:b9:4c:06:fb:b4:ee:5d:45:43:54:7f:
                    d7:75:e8:ae:1a:bb:e6:1d:35:a6:a2:1e:12:5d:e0:
                    d7:e5:4c:a9:7a:94:d4:9f:4e:39:7f:c6:e7:df:ba:
                    2c:0a:03:ee:39:a1:0b:7b:b1:8f:99:79:56:a6:82:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:53:29:55:0F:51:C9:67:DB:EA:1A:0E:E9:56:67:08:38:64:02:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl

            X509v3 Authority Key Identifier:
                keyid:47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.220.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:38:31:87:55:d1:36:bf:fe:23:cc:c1:57:33:bf:14:7e:40:
         98:39:07:7b:8f:ee:07:3a:a1:03:69:32:15:69:2d:0b:2b:bc:
         cc:50:4e:88:4c:dd:dc:10:c2:6e:34:67:32:4d:fe:6e:71:03:
         7b:d5:99:49:45:25:a0:e8:48:03:cc:41:3f:6e:43:02:5e:6b:
         98:b9:6a:39:30:2e:93:df:b4:14:04:31:ae:92:f5:1e:de:cf:
         44:26:b4:61:0d:7c:44:98:5c:ea:08:68:6d:9e:ba:4c:d0:60:
         da:79:81:de:11:58:2f:9d:3e:07:5e:c3:dc:74:b9:4a:5b:57:
         b8:90:c8:a5:c8:06:a4:74:6a:d2:82:56:1e:f0:3a:ff:90:a7:
         f1:eb:03:80:4b:92:ba:bc:76:b9:a3:bd:c3:3e:46:86:cf:ba:
         b7:43:80:84:48:be:a7:23:7b:8c:df:aa:23:70:9b:e4:5b:69:
         a8:a1:40:1f:e8:eb:ca:fd:9a:6f:d5:f4:b2:e5:93:31:72:ee:
         32:f2:1b:ce:d7:68:f4:00:fb:89:54:7b:68:1c:79:fa:ba:23:
         77:1a:87:1a:35:09:df:dc:4c:53:89:8a:f1:f8:a9:9a:fe:c2:
         44:a2:68:3e:1c:cb:65:d3:98:f7:43:4b:86:67:87:54:ea:3e:
         fd:5f:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:48 2026 by rpki-client