Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa
File:                     1259bc77-3c13-370b-bc49-417ac4bc544b.roa (raw, json)
Hash identifier:          1BxNMaWgvO2Z38rr21PgDGKdlGFb1AMbGWwgpA22fbQ=
Subject key identifier:   2C:1B:0E:C1:50:2A:84:E2:06:AA:EA:1E:39:29:CE:3E:7F:DE:BA:5B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA7A05DA44A13EE418833B330
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        172.217.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:5d:a4:4a:13:ee:41:88:33:b3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=93e51f64-e547-403c-bcf0-e55c764c718e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:d0:83:a8:d7:36:6a:f9:00:b3:de:f5:3a:
                    bb:b1:74:f6:eb:dc:e9:51:52:d2:30:1a:4b:69:1d:
                    23:fa:6e:60:7f:88:82:60:0b:4c:15:ed:19:b5:84:
                    cc:83:30:c4:ac:4e:7b:39:29:9c:b3:24:bc:a4:df:
                    7b:81:76:84:74:c8:19:51:16:fa:98:82:8a:33:04:
                    f8:ee:8d:50:60:bb:a6:d6:cf:ef:84:95:01:72:d6:
                    d2:e8:30:14:f5:92:8f:66:96:7f:27:66:47:99:a9:
                    f7:51:06:33:0f:4b:c5:d4:c0:4d:78:1b:ec:d4:36:
                    d6:b4:00:3f:fd:cf:0d:17:0d:50:5e:df:d1:ee:74:
                    25:9b:b9:93:d9:e0:e2:f8:cc:be:43:90:10:24:2b:
                    3b:60:ad:b3:d6:fb:92:1b:67:8c:58:82:32:26:2f:
                    27:d1:ba:4b:42:8d:1b:75:5e:a7:67:6e:a2:8a:39:
                    e3:6a:8c:57:2c:39:ac:cd:e1:cd:e0:48:65:78:b8:
                    13:c9:df:be:5f:86:d3:a0:65:87:32:a6:b8:6a:e8:
                    c4:e8:4b:71:48:83:65:97:7c:26:1e:81:e0:ea:1f:
                    54:b8:5e:79:18:65:61:e3:26:1b:25:e7:67:c7:ef:
                    91:29:01:6c:b1:d1:c7:d7:4c:5f:1c:d8:a3:64:65:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:0E:C1:50:2A:84:E2:06:AA:EA:1E:39:29:CE:3E:7F:DE:BA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1259bc77-3c13-370b-bc49-417ac4bc544b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d3:fc:0f:4c:68:44:f7:a0:a8:e4:50:9f:de:e5:01:cc:6e:
         45:b3:41:c8:12:b9:55:9a:38:50:84:cc:2d:d1:c3:8a:f4:13:
         1a:46:ee:8b:e5:c4:cf:d3:b5:68:c9:56:be:a9:c4:e9:db:61:
         80:6a:03:e5:0d:5d:21:76:45:3d:97:53:96:fd:90:6c:57:6b:
         99:f5:bd:9b:8d:05:52:e3:7d:48:cd:6a:40:e7:9f:b1:d3:0a:
         3d:09:25:1f:17:09:14:ea:06:71:0c:72:64:96:28:c0:94:d2:
         e4:56:14:b7:42:c2:4a:26:04:0b:d4:e6:ad:a6:21:72:7f:76:
         7d:57:b1:49:2d:5c:f3:af:bc:16:d6:ee:97:f3:f5:74:51:5c:
         dd:9d:35:55:af:73:05:a3:03:de:c5:20:12:ed:dd:cd:c2:37:
         d7:26:9b:e0:12:81:3a:86:e0:8d:ae:d7:b9:86:af:7e:9e:d4:
         1e:e4:57:3c:4a:fd:b5:e1:c0:62:90:98:82:2e:60:5f:30:0c:
         35:e8:49:61:4a:72:1b:30:82:d5:9f:b2:60:cb:4a:17:64:9a:
         3a:98:69:4b:87:d6:f3:b5:89:56:76:89:26:f7:89:cc:32:92:
         44:25:a8:a0:a8:c8:0a:66:94:46:8f:0b:f9:c5:19:92:5e:52:
         98:cb:a4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:47:13 2026 by rpki-client