Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa
File:                     acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa (raw, json)
Hash identifier:          nkq5a2JEXIr2zmgd8r0ZmUOcxSsw7w7BkLrbVRAmqJQ=
Subject key identifier:   67:02:96:76:E4:FD:0C:18:1E:76:96:68:01:48:E1:8D:26:32:14:42
Certificate issuer:       /CN=55e1a161-664b-438c-b63c-711509db185e
Certificate serial:       010D0C9F4328584F612D61673388E010BF4EB0F0
Authority key identifier: 5B:02:1D:1E:32:BC:A0:D1:5F:30:7F:F8:24:EA:0B:43:52:E9:28:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     30072
IP address blocks:        69.55.192.0/20 maxlen: 24
                          208.84.20.0/22 maxlen: 24
                          2606:dc40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/55e1a161-664b-438c-b63c-711509db185e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/55e1a161-664b-438c-b63c-711509db185e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:61:67:33:88:e0:10:bf:4e:b0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e1a161-664b-438c-b63c-711509db185e
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=f401cb80-237f-4c09-a592-086ef5339533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:b1:d1:c1:1f:c0:5d:35:86:c3:55:0a:fb:
                    a9:51:5f:c5:ff:0a:ba:e0:c7:ab:73:85:8b:f7:07:
                    67:3e:0e:7f:28:87:84:6a:51:f7:34:56:1e:93:cd:
                    21:c7:6f:7b:90:65:c4:5a:0b:86:fb:15:ef:13:8e:
                    55:5b:37:02:db:f8:70:0c:8b:fa:5a:b9:c4:8d:ea:
                    d8:72:7b:5d:89:bc:90:20:86:d5:2a:f9:15:3f:1e:
                    cf:90:52:27:19:3f:5c:e3:a9:17:8e:d2:40:75:87:
                    c6:d9:04:5e:1c:d1:d2:d1:90:fb:12:72:fd:83:e8:
                    51:7a:53:2b:32:4f:a8:c5:68:27:ca:8a:87:dc:98:
                    ca:ce:7a:f6:eb:e9:f9:20:50:b4:45:71:e1:c9:3c:
                    d7:d1:78:33:73:53:af:d5:a2:c0:06:47:f0:0a:88:
                    4c:5e:5d:6f:77:94:46:c8:b1:99:63:fc:75:fc:1e:
                    48:09:20:ca:9f:49:78:01:54:cd:d1:b0:de:7a:6a:
                    3a:61:bc:29:43:c7:f0:78:4f:26:e5:51:36:69:c9:
                    12:22:eb:5f:3f:c7:16:9d:fd:59:db:d9:c5:64:1a:
                    16:f9:cd:86:7f:30:48:82:7d:18:98:5a:56:ba:99:
                    16:50:02:d5:8c:28:23:02:47:5a:f0:b2:7e:b1:54:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:96:76:E4:FD:0C:18:1E:76:96:68:01:48:E1:8D:26:32:14:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/55e1a161-664b-438c-b63c-711509db185e.crl

            X509v3 Authority Key Identifier:
                keyid:5B:02:1D:1E:32:BC:A0:D1:5F:30:7F:F8:24:EA:0B:43:52:E9:28:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.192.0/20
                  208.84.20.0/22
                IPv6:
                  2606:dc40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:08:a7:f2:ac:56:2a:b7:97:eb:34:54:c5:d6:5f:d2:e4:4f:
         29:73:23:6d:cb:b9:10:20:af:e8:43:39:b1:80:eb:4e:06:87:
         7a:5e:01:fe:a5:fe:31:f8:3f:60:36:10:c1:2a:2b:41:7c:d7:
         6a:45:c2:dd:76:9f:b9:80:67:d5:74:7c:d3:42:f7:a9:8c:a0:
         77:9b:a0:68:05:a2:d3:66:49:d9:6d:33:7b:b2:c5:d8:9f:71:
         14:3d:91:1c:00:f6:14:df:dc:27:c5:cc:69:cb:23:f4:a8:db:
         eb:f2:43:26:52:6b:57:a7:43:19:f2:fc:15:20:84:2a:68:d4:
         63:1d:c5:02:ac:6b:9f:5e:3b:cb:99:cb:84:95:92:53:d5:43:
         61:3e:d1:a1:3c:57:8e:84:da:5b:66:bf:0b:ae:79:86:f3:fd:
         7a:69:f8:83:cd:10:84:3f:cc:6a:aa:8a:3c:c6:2d:0f:03:e3:
         0f:e3:6a:97:65:8a:34:11:40:ec:9c:01:cd:c3:8b:e2:22:db:
         5c:33:e1:52:fa:a9:4c:f2:b0:d7:63:ed:32:7b:94:4b:c0:24:
         9b:34:8c:9f:c0:f2:2e:2d:3d:e8:97:16:13:3f:45:53:4d:fa:
         b1:ed:a0:6f:49:74:1c:d0:a2:75:96:47:9e:43:95:86:33:73:
         94:e9:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:04:58 2026 by rpki-client