Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
File:                     c31be989-e6da-32a1-bc88-9cfec65bed62.roa (raw, json)
Hash identifier:          qRQ5QDRd7iQT3i9nt8kADQeDQR5dVHJad0j3YqjFk3k=
Subject key identifier:   87:65:E4:6F:EE:50:94:D2:EB:DF:0A:87:8E:AF:CB:BF:DC:63:36:DD
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584E6B0A13CCD465BF748FC81040
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     397423
IP address blocks:        104.255.173.0/24 maxlen: 24
                          155.254.16.0/23 maxlen: 24
                          155.254.28.0/23 maxlen: 24
                          2605:6c80:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:13:cc:d4:65:bf:74:8f:c8:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=110384ef-3ad3-4bd8-be5b-9bcdaab09eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:02:ef:a7:1f:c8:67:34:71:da:95:63:78:
                    a0:ce:43:59:16:60:7d:4c:c0:9f:8c:55:c4:64:f7:
                    73:a0:4a:43:34:94:ef:8a:66:9c:d4:73:e1:05:fa:
                    aa:a0:91:5e:4f:5a:08:78:bd:ce:0d:50:85:71:a2:
                    b8:dd:ad:9e:64:56:65:c2:7d:1a:4d:5a:6e:86:27:
                    2f:91:e6:54:bf:98:c2:ce:61:44:8b:b5:4c:d0:24:
                    44:ef:c1:86:1b:f4:8b:b8:75:aa:f1:98:cf:1b:73:
                    e0:f1:07:75:cb:b1:16:a9:5f:09:4a:0a:ed:34:4f:
                    56:76:9d:a2:d5:0e:26:dc:0e:63:0d:9a:40:3e:b5:
                    6c:5d:b2:81:0e:96:49:62:7d:4f:fd:cb:6a:a2:fe:
                    38:db:d5:fc:d6:5f:82:df:4f:a9:bb:b3:26:94:29:
                    fb:1a:70:9a:3b:6f:c4:e6:df:28:70:dd:ee:f9:3e:
                    fe:5d:df:b7:21:2b:74:44:75:44:a4:2a:d1:29:02:
                    b5:18:af:55:b1:18:10:48:00:1b:9f:f1:57:00:b8:
                    bf:9a:9e:df:e0:eb:0a:3f:83:b3:78:1c:59:69:ad:
                    de:ed:bf:ab:2c:58:84:80:1a:87:e0:75:a3:d6:9e:
                    87:6a:17:7f:bf:29:09:10:4a:61:cf:7b:95:8a:99:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:E4:6F:EE:50:94:D2:EB:DF:0A:87:8E:AF:CB:BF:DC:63:36:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.173.0/24
                  155.254.16.0/23
                  155.254.28.0/23
                IPv6:
                  2605:6c80:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:33:00:a8:73:87:aa:0a:90:51:3a:c7:f4:59:14:72:fd:45:
         96:c6:e7:24:36:64:e6:34:ff:e9:27:da:56:21:3b:0f:b5:e9:
         c0:dd:e3:0c:05:e2:b0:97:ea:9e:0b:af:82:13:20:60:0a:a3:
         48:02:7f:03:40:38:7f:bf:39:c3:cf:4e:36:f6:04:ca:87:07:
         f7:10:0d:50:be:b5:cd:5d:b9:e3:d6:bf:07:b1:8d:8b:97:40:
         2f:86:96:19:40:2d:b1:c9:b7:a5:4b:ed:0f:1c:31:2b:9e:91:
         3b:cd:cb:b7:c9:fa:a1:fb:48:03:6b:94:44:a3:7d:48:52:fa:
         bf:d1:52:c4:b6:f5:36:a7:d7:0c:97:c6:ce:4e:19:8e:4c:7c:
         a8:0f:45:bf:a8:7b:ff:02:fe:ca:52:21:09:3f:4a:f5:7d:2f:
         cf:28:56:96:fb:fc:6a:b3:dd:b3:8c:a7:55:cc:b8:e8:7b:dd:
         ca:9f:c2:a0:72:55:70:cc:e9:6f:b4:3d:bc:45:a6:9a:f2:80:
         58:72:2c:47:21:be:a5:ee:81:7f:87:c7:d8:7f:1a:26:89:fd:
         59:1d:70:88:0d:b0:38:c7:a6:05:39:d1:61:16:11:28:f7:58:
         1f:ff:28:7f:5e:7e:04:80:ea:6d:6a:e7:57:ad:c6:f9:d0:77:
         f7:32:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 05:45:34 2026 by rpki-client