Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa
File:                     fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa (raw, json)
Hash identifier:          X+GCUWgL3rtH9R9pHgK43KQIz4hJniN9EBykaJwlROo=
Subject key identifier:   56:44:CB:A7:29:48:19:F4:94:CB:21:68:09:54:EC:33:61:F1:62:EF
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584ED001DE4329A6D01845560900
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        155.63.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:de:43:29:a6:d0:18:45:56:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=200901b2-91bd-43d0-9fba-8eba927428f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:05:35:91:fc:7e:e1:63:f8:a6:6f:e7:2a:
                    df:e6:9b:a7:cb:83:9a:70:74:26:88:2b:cd:29:32:
                    ca:9e:da:3d:ee:39:09:69:88:9a:1a:ad:30:82:7d:
                    45:bf:57:47:c1:fb:c8:5a:9c:15:d9:89:fc:0e:61:
                    6b:8d:1a:8c:d3:98:f9:8d:51:85:27:3e:7e:69:43:
                    a8:2f:cb:fb:9a:92:91:f2:0a:8d:10:9f:f8:1f:a7:
                    0f:6e:cb:a5:cb:1f:3d:22:5a:35:e2:c1:75:15:8b:
                    ff:8e:e6:47:cc:d3:f6:20:09:81:7e:a1:36:84:9c:
                    23:a7:88:12:ac:73:47:50:21:ef:3d:99:b9:4d:40:
                    03:7c:dd:1e:f1:1b:c7:66:f8:6f:5c:4d:ab:b6:75:
                    98:16:c0:71:e0:2b:c3:4d:0d:b4:e5:1b:90:ab:b3:
                    3f:69:7f:04:28:08:9e:c9:f4:16:58:1a:7b:f2:bb:
                    2d:59:9e:d7:3e:d0:eb:29:46:7f:1c:be:05:72:b8:
                    e6:ce:05:e6:36:17:94:23:c9:cb:c8:d5:9c:c6:6e:
                    41:d8:c6:dd:2d:54:87:aa:a3:13:b7:80:67:04:81:
                    c3:e4:c1:41:b9:3f:e9:fe:d8:83:27:e3:1c:2a:5e:
                    c7:2b:93:ac:ff:31:32:55:c8:4c:b5:89:84:25:4e:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:CB:A7:29:48:19:F4:94:CB:21:68:09:54:EC:33:61:F1:62:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:4d:36:85:bc:bf:29:19:2f:1c:4e:c3:c3:c4:ee:70:0d:
         82:b6:3e:82:ce:66:b7:db:c2:c8:07:d4:35:b1:a5:a3:37:20:
         73:f1:e6:ec:8b:aa:b7:2e:a5:56:91:bc:f1:1b:2f:3c:48:9a:
         e9:78:d7:de:bf:ed:75:01:27:68:95:9c:62:8b:00:49:03:03:
         7d:2b:f5:25:31:37:0e:ad:4d:40:4c:a8:7a:1c:a8:49:dc:12:
         06:6e:1e:5e:e1:0c:22:57:1d:6e:65:7b:48:58:4e:15:87:a6:
         31:19:48:b0:64:f6:1a:f5:0f:a1:61:d1:bd:a2:0e:ee:bf:cb:
         9d:5f:c2:b3:1f:c6:12:32:fe:cd:cf:73:71:04:51:22:14:fb:
         7e:b5:54:f2:7f:cd:ce:d6:01:d3:a3:ee:f2:e7:67:20:9e:99:
         ce:66:61:b0:67:f4:95:62:12:f8:4e:29:55:2b:a4:c3:f9:c3:
         93:7a:34:aa:65:17:c1:8f:78:21:6c:af:a7:88:29:ba:b8:6c:
         f8:2e:98:59:bd:8b:1f:dc:df:de:aa:93:34:99:23:a1:ce:7b:
         21:36:a5:50:09:13:44:67:0b:0b:d9:97:80:1f:30:c2:55:6d:
         93:3e:aa:8e:4a:e3:88:72:c2:e9:55:41:4d:bb:bd:99:e1:12:
         08:3f:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:55:27 2026 by rpki-client