Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/215e3977-3e20-30b0-a29b-55e9e0df0433.roa
File:                     215e3977-3e20-30b0-a29b-55e9e0df0433.roa (raw, json)
Hash identifier:          pNcr1Iy4eVHl56x2QBJeKjdp+yd0hsDiZJZ1mf1F1e0=
Subject key identifier:   EC:69:56:37:E4:D8:0C:FA:6D:D1:61:90:14:0D:86:A8:D3:FA:5A:B1
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584EA7940971D674C0366775AF80
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/215e3977-3e20-30b0-a29b-55e9e0df0433.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        164.55.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:09:71:d6:74:c0:36:67:75:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c8308736-d2f7-4419-bda6-aa48ea3fbfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:fb:96:e9:25:b9:c0:24:d3:99:40:8a:9f:
                    3c:ce:bf:50:cb:49:03:6e:26:e6:59:8d:b8:16:15:
                    63:3b:ee:13:02:ec:d8:cb:78:1f:94:e6:67:5d:e7:
                    ff:c3:1f:98:e6:2a:73:d8:3e:ba:72:f2:2b:7b:1d:
                    8d:8d:be:45:58:3e:20:4a:fc:02:24:89:16:3f:01:
                    64:54:9e:f2:7a:cc:97:0e:37:e5:f3:3f:37:7c:b3:
                    66:68:74:76:05:04:50:88:b2:8f:be:ea:be:6d:e5:
                    f7:e5:ff:db:d5:e5:b9:f8:59:f8:13:8f:d7:aa:aa:
                    b0:7c:fc:0e:3d:99:87:10:24:54:70:f1:79:c7:e2:
                    a8:d1:34:87:19:71:85:00:6e:6e:39:27:f6:50:af:
                    1a:e4:0c:34:54:9c:b0:8f:f3:ea:01:34:00:03:54:
                    f7:8e:3b:c0:24:f9:1a:61:a1:df:3c:5c:22:dd:e3:
                    b3:be:5e:95:48:cf:fa:89:c9:03:43:72:0f:fb:62:
                    df:c4:56:84:a2:6e:c7:58:0e:8e:82:b2:97:83:2e:
                    dd:0c:14:cf:95:34:46:07:cc:7c:34:73:c0:f1:55:
                    34:46:97:e0:f9:8c:f6:73:84:1f:17:27:94:3f:81:
                    63:fa:74:5e:11:dd:5a:b9:8f:84:b2:99:95:ab:42:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:69:56:37:E4:D8:0C:FA:6D:D1:61:90:14:0D:86:A8:D3:FA:5A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/215e3977-3e20-30b0-a29b-55e9e0df0433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:2c:58:6c:0a:13:e5:f6:05:cd:4a:7a:46:cf:fe:d5:61:
         2f:05:f1:ca:31:63:39:21:a6:84:26:e1:30:ec:97:da:49:de:
         e7:7a:50:19:f8:bb:3b:c9:f9:f3:da:b6:63:d9:7f:66:45:3e:
         12:3a:3c:87:15:53:fe:75:31:91:e9:1d:e8:d9:a8:e7:24:8b:
         30:2d:84:78:d1:d1:21:c0:c8:9d:6e:2b:76:d9:40:24:2a:de:
         f5:b0:68:3c:7e:d7:17:92:c3:a4:6b:be:18:2d:83:e5:c1:f4:
         aa:c5:ea:1b:ca:ff:db:04:3a:ec:d8:ad:52:2b:49:6e:0f:af:
         a4:81:3c:b0:85:dd:f0:c4:a2:5d:ef:22:30:6b:fb:b3:6e:bd:
         ae:45:89:98:32:4e:fc:d3:0e:12:b2:24:2a:65:95:32:36:d7:
         23:87:7e:6e:b0:88:91:24:fc:9e:71:d5:06:71:76:fa:94:8e:
         c6:e7:d4:5c:04:7d:ed:09:a5:16:ef:b7:af:51:57:07:cc:d0:
         4d:46:2e:75:a7:13:e6:26:33:39:75:30:dc:35:4c:4a:00:d0:
         81:2f:52:c2:4f:14:9a:50:48:44:47:94:c4:11:be:0d:8d:a8:
         30:d6:ce:51:9e:1c:ba:7a:ac:50:20:8f:91:9f:d7:53:22:81:
         a8:71:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:46 2026 by rpki-client