Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/1087eb82-234c-36e3-a526-9bccb1d6ff86.roa
File:                     1087eb82-234c-36e3-a526-9bccb1d6ff86.roa (raw, json)
Hash identifier:          zPID2uIKCB3A2zjoOOJUQw458SYOuqKt+deuRN6/cTU=
Subject key identifier:   9E:6C:D6:2F:C0:4C:43:69:88:FD:D4:63:27:D5:6F:72:FD:A7:AE:28
Certificate issuer:       /CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
Certificate serial:       010D0C9F4328584EA7924BDCE4C1C939083E9660
Authority key identifier: 11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/1087eb82-234c-36e3-a526-9bccb1d6ff86.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53347
IP address blocks:        72.46.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:4b:dc:e4:c1:c9:39:08:3e:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=913d2d6a-c1f0-40a1-8ea9-84b14b1866a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:98:fe:0c:c7:47:3c:ab:f3:04:50:eb:4b:c6:
                    96:1f:c3:c7:1c:5a:c4:18:ea:84:f3:fa:b6:16:3a:
                    c4:a2:3a:58:c4:98:38:32:56:6f:46:54:a0:b7:1e:
                    df:d2:cd:be:d5:b8:6f:d6:62:67:47:04:3d:17:22:
                    ef:34:38:31:08:11:02:39:da:37:ad:f1:9c:14:11:
                    5b:d5:7a:68:b9:e8:e4:74:43:1e:ad:ab:c9:03:4e:
                    79:07:aa:5e:9d:21:44:e6:85:12:67:05:9c:2c:3e:
                    1e:0d:e0:33:ea:7e:ea:e3:07:ce:3d:f9:57:37:d6:
                    4a:e9:9b:53:0c:ef:eb:15:6f:5c:f0:0a:07:9a:1e:
                    2b:af:bc:ce:ad:94:b0:53:82:9a:39:2b:87:4e:10:
                    f6:ae:6d:e5:6f:2c:6e:cf:99:73:08:30:90:c4:26:
                    3d:a0:9b:3f:8a:6e:df:b8:d5:39:b1:f6:34:2a:05:
                    0d:9e:f3:cb:1c:89:c9:5b:83:0c:fa:9f:0d:24:77:
                    a5:73:9c:0a:97:c8:9b:f7:f5:5d:0c:bf:ed:33:47:
                    39:71:a9:57:ff:db:c9:33:e4:8c:82:8b:8c:db:d5:
                    2c:7a:20:48:0e:1d:e6:66:cb:d4:52:0f:fd:06:9b:
                    44:d5:d0:ea:c5:6b:44:ad:9f:28:15:c4:3f:6e:a1:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6C:D6:2F:C0:4C:43:69:88:FD:D4:63:27:D5:6F:72:FD:A7:AE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/1087eb82-234c-36e3-a526-9bccb1d6ff86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl

            X509v3 Authority Key Identifier:
                keyid:11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:36:52:13:59:d6:f4:67:9c:47:b8:20:76:df:f3:3f:05:23:
         e2:e2:d2:03:9c:b5:3b:cc:03:2d:3f:be:94:8a:34:44:a6:e4:
         2e:04:95:52:a8:19:32:7f:c1:95:c8:c7:d9:31:8e:28:7b:e9:
         65:39:99:fc:0e:18:5a:aa:a8:d8:b6:b1:36:14:9a:9d:e5:71:
         e7:b8:3a:67:12:22:a8:20:05:cf:95:82:4a:a2:ea:fa:13:b0:
         13:bf:3b:6e:96:4e:48:cf:67:93:64:a2:13:92:a2:be:e3:6c:
         8a:94:3f:3c:4c:49:8d:e9:16:b2:c9:e0:a3:c6:8e:7b:8d:bd:
         0c:07:46:31:f5:9e:cf:51:89:93:1b:44:8d:64:43:c8:8c:a4:
         06:4e:b1:1e:ff:65:5b:38:0a:6d:aa:f4:72:20:d9:82:5d:4f:
         40:ee:37:ba:bd:38:6f:5f:ed:86:e9:cf:d6:21:16:17:2c:e8:
         8b:c9:61:b5:a9:c5:52:e1:e0:17:d3:46:18:0c:6a:05:1a:09:
         77:b9:83:7c:08:41:61:46:cd:f2:ee:ba:cb:07:f4:a8:30:6b:
         3a:d1:fb:d2:c8:ec:ad:14:60:2d:fb:c7:f3:f5:24:70:07:c8:
         0c:26:41:03:10:a7:b1:11:d2:cd:00:17:14:ce:68:2f:42:b8:
         bd:1d:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:06:56 2026 by rpki-client