Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/beaf19c6-4a48-331d-8880-6d0b8d9033cb.roa
File:                     beaf19c6-4a48-331d-8880-6d0b8d9033cb.roa (raw, json)
Hash identifier:          EEJhxNx6X9HyOxWLN6Xcj8/x5fhd6WOw8Mu7eiufwsI=
Subject key identifier:   36:4D:2B:2F:81:49:74:37:8B:74:8E:A4:BE:2C:E8:51:F9:2D:B6:16
Certificate issuer:       /CN=b22497e5-0c43-47f7-b5bb-766cb0487668
Certificate serial:       010D0C9F4328584EAA518A3933D3E18903538D80
Authority key identifier: 76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/beaf19c6-4a48-331d-8880-6d0b8d9033cb.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     22460
IP address blocks:        165.197.172.0/24 maxlen: 24
                          165.197.173.0/24 maxlen: 24
                          165.197.174.0/24 maxlen: 24
                          165.197.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:8a:39:33:d3:e1:89:03:53:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22497e5-0c43-47f7-b5bb-766cb0487668
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=95a32e36-9792-46a8-8cce-4263533edeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:52:c4:cb:4f:d6:f4:e4:95:5f:ce:66:b4:
                    a0:98:b1:2e:19:8f:a1:45:6e:ad:80:78:8d:3e:d8:
                    0f:b8:c9:28:b0:a8:23:e0:35:9f:e0:0e:95:24:98:
                    b7:82:00:39:1e:78:c0:b3:67:d5:b2:68:d3:7f:81:
                    aa:39:79:de:99:84:84:0b:51:20:0c:2f:fb:1e:c2:
                    3b:d6:53:23:36:17:46:24:0c:46:c9:69:93:a5:57:
                    03:0d:cc:4e:a3:61:87:fe:5e:70:a1:b5:cb:20:d0:
                    5d:2a:e9:3a:40:50:c2:bf:ab:d3:12:95:0b:db:07:
                    58:56:51:04:c4:4e:a9:05:15:46:08:28:b0:4c:67:
                    d5:d0:85:77:37:67:b0:63:5e:2e:89:20:4d:b5:5f:
                    09:a7:fd:55:0d:db:98:d5:a3:8d:5d:b7:18:0e:6d:
                    40:b0:09:9e:16:d9:d2:d7:63:cd:17:64:00:89:2a:
                    9b:fd:ab:0b:55:17:c9:16:78:f9:29:ea:b6:d8:ed:
                    39:fb:8f:f0:a4:81:60:be:b5:f0:26:4e:dd:96:02:
                    b2:a0:89:d1:ae:6d:9f:13:49:c9:c3:38:a4:54:ed:
                    9b:ba:7b:3a:8e:5c:6f:e4:04:92:9f:ad:50:61:89:
                    03:a7:cc:f3:b0:9f:aa:1b:c0:d0:69:59:84:86:3f:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4D:2B:2F:81:49:74:37:8B:74:8E:A4:BE:2C:E8:51:F9:2D:B6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/beaf19c6-4a48-331d-8880-6d0b8d9033cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.crl

            X509v3 Authority Key Identifier:
                keyid:76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.197.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:eb:f5:32:ca:36:cc:e1:67:c2:bf:d8:31:cd:79:ee:56:
         a4:e9:56:49:19:53:95:70:00:18:d4:38:5b:fd:02:c4:83:a4:
         70:46:b5:32:6e:94:50:6e:31:a8:bd:6a:39:88:b9:ad:47:0c:
         a8:2d:0a:18:c3:8e:ac:fd:4e:e5:c1:7a:61:9b:e8:a0:09:a7:
         2d:89:9c:28:1c:a1:1f:c5:69:a7:eb:16:b7:c4:82:08:45:b8:
         17:9f:0d:11:51:f9:86:4b:d8:d3:23:1c:f4:01:f0:ef:06:33:
         e5:3e:5e:4f:d3:4e:02:2a:bc:4f:02:4f:bb:3d:89:38:13:74:
         5d:e2:f3:38:e3:00:5a:41:bc:0d:c0:7a:96:86:ac:99:c2:31:
         ac:9e:ac:f4:66:43:a5:d5:d8:9f:b9:63:19:e9:73:f1:1e:32:
         aa:45:bd:d5:2a:e2:1f:e8:fe:c8:25:06:ba:22:79:c4:93:1a:
         3b:42:fa:34:db:7a:70:cf:3c:22:87:27:b8:34:2e:50:91:51:
         da:13:e9:29:be:ca:f5:be:31:41:84:38:2c:ed:95:32:d4:dd:
         44:91:85:b7:59:35:8c:d8:4e:13:78:05:bc:41:97:9d:28:a1:
         a9:37:a3:12:90:27:14:02:ea:c5:4a:39:e5:21:5d:36:9c:72:
         df:c8:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:21 2026 by rpki-client