Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
File:                     fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa (raw, json)
Hash identifier:          fc45ZDMl5zJiYTa/UNtnZCT35tAsl3755BE5GHxYbZA=
Subject key identifier:   1B:3F:30:F6:C6:9E:99:50:BC:11:83:29:BD:8D:D9:6F:90:50:2A:2E
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584DB77035BDDCF95A92991F2A00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     9009
IP address blocks:        172.85.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:35:bd:dc:f9:5a:92:99:1f:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=7241125e-df33-4ec7-be15-fabe74281a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:d9:31:85:3b:e8:eb:1b:08:91:bb:33:c7:
                    bc:bf:af:3b:16:df:85:5f:4e:6a:47:2f:21:49:e5:
                    75:5a:8b:3d:fa:de:f0:5e:e8:17:13:b0:d9:1d:76:
                    6f:4c:51:14:8a:db:a8:1a:0e:87:b7:03:f7:a0:b3:
                    13:68:96:71:b0:da:a7:4a:1e:6b:8f:9d:12:06:e3:
                    9a:fc:62:84:c8:f0:3e:11:69:45:e2:56:51:8d:94:
                    02:e6:18:76:c7:58:0b:58:d6:dd:40:34:93:95:d8:
                    d9:cc:95:eb:72:d4:e0:f5:70:60:9b:5f:df:ce:e4:
                    ae:1c:a6:37:65:89:63:59:19:8b:01:48:02:a9:b1:
                    7b:dd:1d:a4:9f:ac:94:47:af:1c:18:21:97:54:fa:
                    d3:7e:51:73:49:a4:f1:79:33:75:50:c3:1a:e4:a6:
                    56:a8:bd:3b:34:03:6a:63:65:13:d9:b3:f1:7a:84:
                    c3:d7:f5:5d:b1:b3:e7:33:b1:22:b3:51:65:a5:6b:
                    2e:f2:26:45:bc:4e:6d:35:64:19:a3:1d:50:48:ed:
                    7d:91:f8:e6:63:fb:64:f7:fd:33:17:72:b3:dd:d5:
                    fc:36:0d:1b:64:42:34:1e:63:32:e6:48:d3:63:6b:
                    7e:bb:80:90:2d:56:34:d3:4e:89:91:96:85:93:cf:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:30:F6:C6:9E:99:50:BC:11:83:29:BD:8D:D9:6F:90:50:2A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:7f:a7:70:54:dc:ca:df:25:32:93:cc:09:45:93:81:71:
         ad:b3:a9:f1:57:55:a5:d3:88:6c:4c:83:75:4e:c6:6a:d9:ba:
         11:22:ed:1b:8a:0d:d3:c8:29:8c:78:7d:4e:fd:7c:2d:2d:1b:
         37:64:9a:f4:ef:50:e9:a6:c1:1e:43:80:8f:f9:40:4c:49:9d:
         61:cd:73:64:bb:5c:33:14:88:9b:68:4d:6c:fc:8b:6f:83:9e:
         1f:90:f3:da:e1:4f:b9:5b:fa:71:55:75:3f:33:8e:15:62:62:
         22:64:55:de:84:f1:9d:10:79:54:ec:e2:3b:18:ab:15:b2:bb:
         69:a2:ad:a2:3d:eb:4e:b2:84:25:15:21:07:b0:e8:2d:f9:16:
         89:b8:e8:bc:a4:01:2d:a0:e1:4d:0a:0c:0a:a9:07:fa:b8:16:
         1b:d0:60:79:23:7a:da:36:a6:13:7b:d7:83:ae:04:13:6d:65:
         fc:85:ef:c8:20:fe:dc:2f:17:06:02:bf:06:cc:b5:0d:bf:5e:
         53:da:6d:36:85:0b:43:ad:a8:3a:4a:4b:eb:9a:c6:82:1e:8b:
         eb:46:06:57:6a:18:d0:84:3d:8b:4c:61:5c:e6:49:f7:96:1e:
         ca:f9:b6:96:71:54:fc:51:f2:ee:10:2b:05:bf:1b:12:63:6d:
         b1:fb:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:15 2026 by rpki-client