Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/59f79bd9-01ab-376c-aa85-fb25929f4d06.roa
File:                     59f79bd9-01ab-376c-aa85-fb25929f4d06.roa (raw, json)
Hash identifier:          JoHQRudFbHhDw8OuGb1X2IAjUxIikUsROq3MWLaTlO0=
Subject key identifier:   BF:05:54:E3:DE:95:B9:3C:EB:0E:E5:27:7E:DD:C7:9F:6D:3F:08:DE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372380D1677F07F69C56A40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/59f79bd9-01ab-376c-aa85-fb25929f4d06.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        47.2.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:38:0d:16:77:f0:7f:69:c5:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=c530d28c-4db9-4cb4-9e65-6a72b9bd1889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:2e:73:4f:6b:c3:0a:b3:cb:af:52:d9:2f:
                    ac:f0:8d:21:a2:99:a7:56:21:26:33:67:c8:ae:ce:
                    26:93:14:48:52:22:bf:fb:22:59:90:ad:af:49:c5:
                    7b:cf:17:65:13:1c:6a:34:0b:72:0a:dc:cc:2d:f7:
                    d8:20:89:00:ae:ab:eb:cd:2a:b6:45:49:dc:83:b7:
                    ce:8e:9b:0d:2f:34:45:e5:98:33:6a:96:50:9a:d9:
                    02:86:f8:89:67:54:54:15:dc:74:f8:8e:6c:d4:38:
                    f9:46:c2:ec:fa:c3:e6:ad:e0:50:3c:0d:46:c7:8e:
                    c5:2a:8d:a8:7e:14:6f:00:48:20:7f:63:b3:7d:2f:
                    fa:9d:b1:1e:3e:bc:6a:c2:91:22:2a:a2:49:bd:34:
                    7f:b8:06:17:43:0b:fc:f7:a3:cd:59:c8:61:d0:63:
                    a7:6b:e5:a7:55:a3:01:49:7c:dd:78:e2:28:2d:0c:
                    92:ea:62:da:ed:44:93:90:a5:c0:71:76:f9:52:ed:
                    89:9a:26:5d:f1:ae:fc:92:f1:3e:90:cb:9a:4f:32:
                    6a:fc:a7:c8:21:91:60:75:d2:7c:9c:51:73:e5:77:
                    33:cc:c7:54:ce:55:d1:7b:94:90:f9:0a:1e:4e:58:
                    af:c4:61:1e:39:17:6b:f5:b5:b7:6e:6e:cb:ef:7e:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:05:54:E3:DE:95:B9:3C:EB:0E:E5:27:7E:DD:C7:9F:6D:3F:08:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/59f79bd9-01ab-376c-aa85-fb25929f4d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.2.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:63:c5:f8:91:e2:1c:40:f0:91:c4:c0:9b:46:fd:20:e0:52:
         9f:ab:57:b0:a7:32:44:31:fc:0d:bc:11:f1:be:18:58:e7:07:
         b8:0d:b6:93:b2:59:82:45:e4:5d:e8:ac:e1:1b:72:9e:44:b8:
         9b:bb:4a:0d:41:1d:e4:20:73:5a:52:68:ce:23:3e:17:9e:ac:
         84:bd:b7:26:61:22:c3:f4:b6:23:2a:6d:ec:a6:c5:6a:10:ec:
         5a:71:a6:d6:ed:3c:e4:84:5a:76:c2:ae:dc:bb:c5:c3:9c:97:
         a9:72:6a:42:3b:3f:19:71:b8:0e:cc:e6:9e:4a:72:d6:51:32:
         4d:1f:ab:c8:ec:a1:3d:82:96:09:3b:14:aa:df:9d:ef:5e:cd:
         71:89:56:c4:3d:19:a3:fe:e5:7d:b0:fe:f6:70:bf:91:94:5f:
         35:6b:26:26:23:02:4c:b2:d7:e7:29:fa:a6:8e:4c:9e:df:c9:
         cc:8f:e8:8a:c7:2d:a1:2e:24:29:d3:22:3e:f4:d3:36:0c:1b:
         bc:77:50:2f:b7:bf:ea:26:2a:c2:42:80:8f:1a:88:a8:1b:9e:
         c5:3d:00:f4:a1:a8:e3:70:05:23:83:08:6b:1c:2e:4d:3b:40:
         99:0c:af:4c:8f:2f:28:55:80:a2:54:6c:99:2a:0c:d4:06:67:
         77:9a:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:15:07 2026 by rpki-client