Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa
File:                     52ab951c-a52a-33ca-832a-3433fe906f80.roa (raw, json)
Hash identifier:          bSrijLMjz+gsjrTMuXwJFBfSt0HWf7nHICwmz6UDy1c=
Subject key identifier:   AD:C6:BC:3A:C6:66:5B:AA:AD:F3:1B:95:94:9B:A9:07:BF:06:5A:42
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA796BFD7965A4A4B36D96ED8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        172.217.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:bf:d7:96:5a:4a:4b:36:d9:6e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=49c65a3e-1edc-4467-915e-682159c31f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:9d:56:42:31:c2:51:40:b1:72:9a:78:78:
                    41:83:43:4a:6b:56:3e:de:8a:7a:57:f4:95:68:7c:
                    9b:20:50:cb:09:53:44:7e:92:b1:4b:97:b0:ae:97:
                    c5:20:5b:88:a0:8a:82:59:bf:68:b3:3d:f8:c0:26:
                    d8:73:19:78:89:df:0a:2f:50:92:8e:82:a6:f9:2e:
                    11:e8:31:01:80:9a:0c:b5:32:1e:84:35:d5:6d:ad:
                    a0:2c:3a:58:0c:fa:e2:fe:0d:98:cc:80:cd:95:bf:
                    4f:c6:24:ee:b7:cf:a9:e8:49:13:4a:e4:0a:58:f4:
                    54:02:ab:64:1c:67:d8:bb:e2:bf:18:91:57:07:49:
                    4a:fa:88:f4:5b:6e:de:76:9a:a7:9f:00:38:35:cb:
                    ca:f0:ef:eb:8c:83:2e:dd:22:ad:72:d2:07:9f:b0:
                    28:1e:70:b3:90:4c:1e:59:58:0a:0c:b2:04:80:ee:
                    1b:63:4b:b9:7c:fa:ba:6c:36:14:b1:00:b9:1b:58:
                    4d:bc:b5:62:1e:30:46:fc:2c:af:30:ba:ae:d7:5b:
                    99:c4:95:9c:93:db:ec:40:99:de:a6:c7:dc:0f:1c:
                    eb:60:4e:3b:d6:ae:8e:9c:1f:69:e1:20:44:2d:40:
                    fe:b6:5a:8a:be:5a:8f:6e:f3:2d:ae:49:0e:9e:81:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:BC:3A:C6:66:5B:AA:AD:F3:1B:95:94:9B:A9:07:BF:06:5A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52ab951c-a52a-33ca-832a-3433fe906f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3c:dc:18:ea:43:05:b5:a0:3c:39:f6:5b:8c:cd:fc:35:33:
         16:62:b8:2c:38:df:39:90:24:f7:61:54:ce:97:25:ca:bb:2b:
         79:1c:f2:c4:1c:b9:23:1d:27:81:d3:01:29:3a:37:29:dc:be:
         94:7e:12:88:87:f2:7e:31:fb:6d:c2:36:09:7d:5e:64:8f:db:
         0a:35:43:25:fa:fb:d5:3a:35:86:8e:2b:0b:b3:fe:eb:d8:29:
         9a:8d:40:d9:06:a5:51:a0:34:21:24:3c:4d:95:7a:70:73:07:
         18:77:19:0b:f2:e1:54:9f:2a:dc:e4:a9:64:02:ec:07:04:a2:
         74:5a:16:15:d1:6e:76:5b:fb:02:ec:1e:3d:90:09:c6:ed:08:
         1b:65:ba:df:d7:60:71:99:52:7e:58:9d:98:bb:08:87:3a:03:
         b8:d4:64:df:b1:d7:a8:8c:e1:21:9c:03:71:dd:9d:42:3d:f9:
         4f:31:ff:92:6f:12:da:19:ad:32:72:de:6c:98:47:d3:29:8c:
         ce:6e:62:36:fa:31:f8:b0:d2:04:4e:ca:1d:86:de:ab:6f:cc:
         bb:4d:61:b8:37:6f:d6:41:dc:51:13:e8:d2:69:b4:80:40:95:
         fd:07:87:1d:ee:8d:a1:74:d8:fb:95:b7:93:99:c1:3a:87:6c:
         f9:a4:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:45:39 2026 by rpki-client