Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa
File:                     c5228350-2799-3a43-abe9-42497ef211c0.roa (raw, json)
Hash identifier:          APhIPh4A2PyIQ1+XrGl0iukZSZ3a8fV0Wv+l0xrNVNs=
Subject key identifier:   CD:65:96:E1:AA:C9:B1:0A:D6:95:1F:D7:CB:A2:0E:EE:7F:AA:BE:92
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584ED001E1E22792DF71BFAEBC00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        170.72.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e1:e2:27:92:df:71:bf:ae:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=9ab7416b-8cf5-40de-9089-425608e5e6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:5c:ef:98:d4:2a:42:86:92:37:d5:ef:29:
                    57:a0:c7:f3:48:d1:44:38:3c:60:ee:cc:2f:78:d5:
                    51:38:5d:a9:7e:73:97:81:e9:f9:27:47:eb:94:eb:
                    6c:c6:51:55:2a:63:e8:15:24:47:24:16:62:9e:7f:
                    6c:2f:d2:9f:3f:d3:65:10:e7:10:f2:6e:03:65:d8:
                    95:fd:3e:ea:5b:94:62:f8:29:98:e3:50:35:f0:a5:
                    fc:e7:2a:17:b7:21:00:0b:f8:9b:66:0c:d3:b5:37:
                    89:36:c7:86:7f:75:dd:97:33:2b:f5:5a:bf:ea:dd:
                    0f:82:29:88:ae:8f:ef:38:05:14:55:81:78:ed:70:
                    ee:e8:5d:22:f9:3f:b6:c0:71:0c:59:be:c5:1e:4c:
                    eb:27:94:34:54:5d:7f:79:d7:35:9b:fe:f5:4f:7b:
                    72:7f:27:cf:f4:32:a8:88:9c:35:98:fb:4e:29:bf:
                    9d:13:cf:08:0a:ef:ef:56:33:77:a8:97:a7:9d:c9:
                    47:12:e0:1a:e5:29:d2:a5:2c:5e:a3:45:cc:ad:13:
                    ea:01:6c:d6:16:3f:c7:6a:90:8a:c1:dd:a8:1f:0a:
                    64:42:2a:b2:1f:c2:0b:87:ef:43:26:08:7b:e7:a9:
                    47:15:bb:81:f3:e4:3e:a2:94:02:b6:51:58:69:78:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:96:E1:AA:C9:B1:0A:D6:95:1F:D7:CB:A2:0E:EE:7F:AA:BE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:bd:14:f5:29:5a:f1:8c:e6:7b:83:a4:63:6b:97:4c:d8:
         58:a8:76:4d:14:37:27:de:51:29:df:86:56:6c:7f:03:bc:5a:
         67:6f:93:53:de:d7:fd:cc:5f:b7:b4:d4:7d:27:21:10:cd:10:
         6d:7a:52:cf:eb:7e:44:4b:7e:97:46:73:40:81:b5:9f:53:16:
         39:3b:cd:ec:0d:36:20:6e:fa:be:6a:d2:37:59:62:ce:80:1b:
         cd:11:9b:67:2a:03:15:41:92:31:54:ac:50:bd:68:35:ce:80:
         ae:8e:6c:45:d8:2e:30:30:71:dd:2c:3f:33:02:b0:73:0d:36:
         84:a9:43:a9:30:90:88:35:95:31:d5:21:81:34:ff:01:17:6f:
         88:64:ee:32:db:fc:94:75:d9:64:6d:bd:2d:86:c2:85:68:61:
         78:86:e4:30:49:c7:4a:55:99:a1:b5:d6:66:30:f7:1a:75:19:
         ac:a8:b0:95:f9:65:39:d8:32:da:e3:9e:91:db:c1:c7:58:74:
         91:81:28:fd:fe:0d:51:fb:f5:3b:fe:25:61:94:98:d9:e8:ff:
         4c:b4:11:24:32:30:1b:23:01:0d:0a:77:c2:51:96:03:2f:9b:
         eb:f9:54:ad:67:8f:f5:e2:b8:77:86:69:81:26:f6:88:a7:af:
         eb:a3:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:25:32 2026 by rpki-client