Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa
File:                     4427a838-ef7a-315d-9336-e75e68d4876e.roa (raw, json)
Hash identifier:          bIOZjf9Vb8oJrxBkHlcPQ+1h7UQjkeVAxWKyTXUj+/Y=
Subject key identifier:   D9:5C:35:3E:ED:11:05:5F:C2:88:A3:6B:CB:7B:88:AE:45:5F:3A:B5
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584E7204DB57E70509617C07FB00
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     1097
IP address blocks:        167.88.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:db:57:e7:05:09:61:7c:07:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=76f3f143-e69f-4360-8999-08b111003d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:f0:cf:3d:c8:0f:e1:35:e1:16:72:01:6f:
                    cc:42:7b:63:c6:de:b4:94:95:76:f9:4e:48:a6:5d:
                    01:a7:ae:40:39:62:52:66:68:c4:83:c6:db:2b:0c:
                    eb:87:6d:9f:d3:e0:e3:a2:3c:8a:e2:9f:cc:9d:da:
                    35:b8:3c:16:27:95:3e:00:df:8d:80:68:96:a7:9a:
                    f9:a5:32:bd:99:b7:27:15:a2:cc:6e:9d:8c:96:1f:
                    7f:a2:f7:4a:05:da:8b:b2:4e:9f:50:96:d6:ed:a6:
                    a6:3a:35:cd:b8:4e:5a:d4:f6:1a:aa:ab:9d:f8:1b:
                    4f:88:41:ca:75:7f:3e:f5:14:e8:6c:0e:3d:72:8d:
                    8d:88:66:f6:ad:41:ba:7b:32:e9:93:84:93:a2:ba:
                    f5:99:d5:37:92:35:60:12:37:bb:e6:44:91:d3:d9:
                    fa:85:d9:ba:08:89:83:71:71:5d:d8:d3:a4:ef:fd:
                    7b:1f:46:9e:a1:37:26:65:00:98:2f:79:44:e8:a9:
                    1e:cc:12:c3:d0:8b:42:59:3e:ba:10:69:c4:9e:e2:
                    ce:91:e3:2d:46:20:89:de:a8:77:c0:42:86:e6:76:
                    c2:43:5f:ad:46:60:8f:84:79:81:c2:6a:4e:77:e8:
                    34:a8:4e:d9:a2:56:d8:98:1c:d7:17:a0:19:2b:68:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5C:35:3E:ED:11:05:5F:C2:88:A3:6B:CB:7B:88:AE:45:5F:3A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:97:ba:14:df:bb:16:bd:a9:57:a3:ea:eb:62:36:85:b8:d9:
         5e:99:49:13:8d:74:f0:a9:aa:26:aa:02:18:60:03:a7:e8:15:
         40:97:38:3d:0d:88:1c:3d:1c:f9:ec:9c:ca:c1:b3:36:c9:ab:
         ae:f7:d1:e9:4a:02:5f:8f:18:f8:0f:80:3c:93:c1:30:3e:08:
         55:54:e7:92:98:3e:06:98:8a:ce:ea:b1:4b:1f:ff:94:9f:e7:
         1e:a3:99:23:44:88:f1:31:36:2c:62:89:eb:eb:cd:b1:0f:be:
         7f:61:53:17:01:22:18:cc:85:7b:b5:00:ae:d9:b6:3a:f0:dc:
         fe:34:3d:56:26:7b:f3:86:99:2c:6b:ea:6a:b7:cf:27:56:ac:
         46:4c:fb:e9:0e:71:b3:48:00:c1:6c:d8:62:bb:7d:59:cd:0d:
         5f:55:9c:c8:41:ef:c0:1b:cb:a0:ca:b5:3d:1e:fb:64:f1:e2:
         d5:c0:cd:22:b5:82:83:4f:91:6f:dd:ea:b6:64:08:69:db:ee:
         9f:2d:22:cd:d9:3b:39:5a:ed:7a:68:54:b9:c6:4a:61:99:44:
         5a:fb:86:d1:f8:98:60:22:44:8c:fd:42:70:9b:0e:8c:ef:f0:
         aa:d0:65:ea:a0:46:83:40:bf:4b:56:df:be:d8:de:0f:57:54:
         ad:b2:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:03:27 2026 by rpki-client