Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
File:                     dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json)
Hash identifier:          bDfUTz4Wg2gRS1nVxSQxpdGg+lV47UAtn4INJqKmA3s=
Subject key identifier:   4D:2C:20:44:07:BD:FA:08:93:4A:B3:DC:EB:06:9B:81:D8:BA:22:8E
Certificate issuer:       /CN=c22717c6-604d-4453-a20f-3430af557f6e
Certificate serial:       010D0C9F4328584E94EA5EAD2D15CF0B8D29C400
Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     11550
IP address blocks:        72.42.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5e:ad:2d:15:cf:0b:8d:29:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=ae1b6250-7944-4800-a0c4-9d450ab0010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:f0:b3:1d:78:8b:82:e6:fb:51:03:bf:90:
                    95:c4:44:cc:b3:e7:5a:af:73:cd:2e:b2:17:1a:77:
                    9d:e2:f4:97:59:66:5f:04:30:35:22:ca:a7:e8:26:
                    1d:5c:06:5c:18:18:93:06:30:ee:a4:81:df:4b:aa:
                    c6:e5:c7:fc:87:70:ec:63:37:cc:24:8f:6f:e2:a5:
                    fe:8c:36:9d:b5:74:55:0d:1e:90:05:2e:41:fc:c7:
                    0b:be:83:77:99:44:b8:50:40:20:ae:1c:e0:68:c7:
                    a6:d2:2a:a2:48:56:fd:aa:3a:49:54:a9:0f:38:52:
                    a7:d3:f2:08:fb:5b:4e:60:1f:f5:05:19:35:ea:d8:
                    60:8e:fe:2d:de:7f:b8:f1:a3:5a:4d:b3:7d:37:64:
                    bb:6a:f0:4e:61:ac:28:54:c9:38:f6:5a:ea:8c:e0:
                    b6:28:9f:79:ea:48:65:7b:73:4a:30:ba:d2:6c:6d:
                    6c:69:5e:84:df:c7:13:1c:2c:56:01:84:08:9b:45:
                    63:3e:0c:7a:20:81:7d:1f:32:7b:b5:e1:bd:e7:22:
                    91:24:9d:06:83:56:d9:d1:63:98:a6:45:1e:78:97:
                    2c:8f:3d:1f:c4:4d:b8:a0:bc:f9:b5:be:ff:44:43:
                    79:7c:e9:ee:18:ce:a4:d6:0b:18:7c:1f:7f:e2:bb:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2C:20:44:07:BD:FA:08:93:4A:B3:DC:EB:06:9B:81:D8:BA:22:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:ba:74:c5:f2:1d:b2:e0:f2:96:dd:74:6a:bd:ae:4f:0c:9b:
         61:02:3c:d9:70:a8:bb:17:e6:a8:b7:84:8e:d8:10:5c:46:e7:
         66:74:79:ce:07:f1:5a:45:ce:f7:2d:eb:4e:14:d5:62:0f:d4:
         7a:d2:80:cb:78:51:f4:0e:5b:60:6f:28:21:02:73:81:df:f9:
         ac:85:f3:17:9d:f6:1d:ca:f4:71:59:01:b2:12:f2:d4:0b:3f:
         91:ea:25:73:fc:ec:9b:29:48:46:09:2d:04:ed:42:19:e8:61:
         ca:7a:12:5b:49:4d:6d:f5:56:18:33:88:80:b7:a6:00:24:7c:
         82:12:f5:41:2a:2e:a8:1a:71:c4:64:eb:62:c7:93:a8:47:cf:
         9d:a6:f9:d5:61:f6:0c:c6:69:57:3a:76:fa:39:2c:04:f0:7b:
         2c:d2:ac:d0:fa:d9:7f:1f:df:56:1c:1a:8f:67:af:87:f4:a3:
         a0:4e:c7:e1:b8:16:01:ca:f4:2f:4e:64:c6:93:55:f1:eb:66:
         83:7c:9d:52:75:c6:a4:19:ad:f1:a7:90:0e:49:4b:3d:e7:f6:
         9f:4f:bc:0f:be:9d:f2:d2:ae:ef:ad:d3:e5:2c:33:2a:c6:c1:
         c8:f5:57:41:b4:a3:74:b4:80:6f:be:88:40:4a:1f:a5:5c:89:
         2f:c0:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:08 2026 by rpki-client