Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa
File:                     b8e4ffb5-04fb-3989-bac1-011a62674a35.roa (raw, json)
Hash identifier:          1UEPdTmr2pbMNZZOTpVxb9Ramtz/4EIGW5QGse3QaTA=
Subject key identifier:   B2:76:C0:4D:CF:8A:BB:79:0C:50:1C:D5:88:FC:4C:BA:27:35:E1:EA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EC0A736E866AED6F1ED497640
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        172.217.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:36:e8:66:ae:d6:f1:ed:49:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=7d255aab-0c06-4adc-b536-59074d1f4dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:d2:00:92:3f:d0:a5:86:ba:cb:e5:45:e3:
                    d0:9e:52:04:34:97:6a:99:54:33:58:0d:78:01:a7:
                    75:e3:ec:f4:05:c1:82:6b:fa:7d:bb:5d:96:0d:31:
                    6e:b8:fc:c4:55:63:f8:17:23:a9:f9:be:ac:a5:80:
                    7f:a4:09:e6:8d:be:22:7c:6a:bd:13:61:7a:56:d5:
                    fa:8f:90:a5:73:c0:89:c5:fc:fd:23:90:b1:dc:90:
                    b1:d5:f5:8e:e1:a6:ff:a9:cf:ca:ed:61:83:87:42:
                    af:62:1c:5e:99:9b:ac:ef:e9:a9:de:88:c0:99:ce:
                    e8:bb:4b:88:b7:f4:ce:12:dc:4e:55:29:d9:99:bd:
                    93:b6:a0:99:13:b3:45:1d:0d:27:68:70:bb:8d:78:
                    62:98:89:77:50:f3:6d:e1:fe:f5:24:e7:64:d7:5c:
                    e9:d8:80:3e:d6:15:98:d4:ac:ef:bf:4b:54:75:e7:
                    2d:a0:60:75:6e:36:5b:58:63:73:ba:eb:3c:09:4b:
                    c9:0f:90:e5:b1:ac:f0:c0:ac:4c:7c:ae:2e:c8:2e:
                    91:7a:a2:d7:36:36:0b:24:f2:4e:8f:c5:7b:b6:3b:
                    e7:93:cf:33:0d:05:45:b0:b9:f7:90:e5:61:6a:b8:
                    68:01:31:03:a3:37:1c:70:51:73:20:73:fe:8c:43:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:C0:4D:CF:8A:BB:79:0C:50:1C:D5:88:FC:4C:BA:27:35:E1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8e4ffb5-04fb-3989-bac1-011a62674a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:f0:9c:dd:49:38:a7:a8:a4:50:24:89:e6:66:da:7a:b3:
         85:c8:13:56:42:e2:ab:77:5d:2b:22:98:e8:6f:7f:de:75:83:
         53:dd:5e:e3:32:4a:18:28:18:bc:4a:09:ab:6d:58:5f:37:87:
         bc:68:3b:81:99:a8:41:a3:4c:62:30:9b:78:1f:26:98:fc:01:
         22:9b:05:8f:33:89:e9:5a:41:84:53:e9:15:0f:08:37:f4:ff:
         66:15:ee:c6:a1:6d:9c:f0:d8:33:6a:cb:af:fd:a4:53:9f:28:
         50:0b:b3:11:60:e9:e4:7c:eb:09:c5:2f:32:2a:64:4c:9e:77:
         9f:0e:6f:50:5c:2f:50:65:df:19:ff:6b:59:f8:68:d2:17:a3:
         32:54:82:4d:9c:e4:55:d1:b7:b2:1a:88:ba:5f:22:b4:a4:1c:
         53:79:d2:0d:85:f3:e9:3d:53:61:76:84:48:a2:76:05:78:bb:
         ae:9c:7c:7a:15:1d:c9:8e:31:49:75:50:6a:d6:9e:28:5a:ee:
         01:6f:81:1b:3f:54:16:87:3c:0c:87:e9:fa:4f:f7:6d:c7:8c:
         ab:28:99:e4:22:cb:3f:c7:59:ca:75:fa:e9:cf:a1:fe:f2:c1:
         b6:15:1c:d7:be:04:1e:4e:b4:cc:36:63:36:46:39:74:42:f4:
         b3:e4:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:46:04 2026 by rpki-client