Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa
File:                     b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa (raw, json)
Hash identifier:          L5YmnAbLJykaE+1XfgMfk8eGYjHgbET5lkkWgn8Jg1o=
Subject key identifier:   89:CD:8D:00:8B:FD:C4:AD:93:1E:19:42:C5:28:23:2B:2F:CF:F0:17
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F4328584E78FF7E398B0C622540040300
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        162.212.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7e:39:8b:0c:62:25:40:04:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=87f846d3-b1a3-488c-b3e9-71cfbc2a539c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:35:83:a0:a1:4b:dd:bb:fc:05:ae:bc:fb:43:
                    3a:6e:52:00:d2:2b:6d:1c:48:e7:f1:da:cc:0a:f7:
                    50:c1:32:6f:b7:d5:0a:79:77:04:90:19:2f:bf:dd:
                    0d:26:88:8a:4d:f1:e0:42:c2:63:d9:c2:f7:53:85:
                    1c:3b:fc:12:53:af:16:0e:dd:9c:13:79:a7:8f:6b:
                    f0:fa:b3:a3:09:30:43:05:56:6e:96:24:de:f7:cd:
                    af:ee:ca:ae:4c:5c:a6:c8:8e:6f:13:6d:c1:e1:a1:
                    ad:02:e0:76:ab:8e:a5:c5:47:ed:ba:6d:5d:c2:36:
                    ad:26:2a:3e:43:2a:ab:90:47:ed:c3:01:6e:16:7a:
                    0a:cd:92:75:42:59:81:ae:75:09:c8:f1:de:ef:06:
                    52:6f:5e:15:3f:b5:b4:29:d5:7f:3f:74:6b:a4:74:
                    ca:56:a3:63:f3:50:ed:e1:fc:47:a7:2f:ca:4c:6a:
                    7b:5e:9d:58:d2:d1:dd:85:63:b3:78:7f:2b:18:c3:
                    6b:86:19:21:f2:33:e7:d5:ea:ec:eb:ff:29:51:9a:
                    aa:c7:09:67:d9:37:b6:a8:de:d1:10:ce:64:e6:5d:
                    e0:5c:12:ad:65:b0:01:c1:46:c4:4e:7f:49:40:57:
                    e2:a1:89:e1:1e:d9:df:55:eb:31:29:10:9b:22:ef:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CD:8D:00:8B:FD:C4:AD:93:1E:19:42:C5:28:23:2B:2F:CF:F0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:9f:d3:ac:21:2b:d4:85:5b:9e:9b:35:c2:a6:70:96:6b:
         4d:53:6f:26:f4:fb:ae:55:5e:c3:21:de:ba:f9:d0:1a:2f:72:
         e7:2d:ce:49:75:e8:2f:10:4c:37:53:f8:a2:97:24:a1:58:1a:
         83:1d:0c:62:87:22:99:57:b8:b5:bb:32:53:7e:f2:db:6a:52:
         c6:b1:b4:82:8b:bf:15:5b:94:58:6f:04:2f:38:76:f3:e0:8b:
         aa:ff:61:8f:e2:52:4f:ca:6d:5b:cb:e8:f6:76:71:29:82:dd:
         4d:6a:cd:b4:14:0b:49:47:d2:51:f0:76:18:b1:67:66:e1:1c:
         bb:b9:e3:97:29:14:8f:98:bc:75:a6:13:10:00:ec:29:ae:09:
         37:46:a1:4a:33:05:65:7a:0b:66:c4:0c:a4:74:3d:ae:52:6d:
         cd:7b:40:da:4a:7d:83:92:00:b0:d7:69:c2:78:b4:fd:d4:4f:
         34:65:5d:75:6c:a6:03:c5:8c:8f:17:eb:5f:71:fb:80:b4:c3:
         12:3d:10:a2:14:be:bf:ed:6a:b9:74:65:4d:88:26:fe:75:d5:
         96:8d:fe:40:47:01:a6:3a:1d:a3:cc:70:ee:7f:70:fc:4d:8f:
         78:22:1d:7a:46:54:0c:83:18:c7:db:84:93:28:40:5a:06:f6:
         68:fc:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:21 2026 by rpki-client