Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/b487cf0b-a6f9-3022-8ee8-0340f8957ef9.roa
File:                     b487cf0b-a6f9-3022-8ee8-0340f8957ef9.roa (raw, json)
Hash identifier:          Wl1ESH33VrV8GibFX5eOkUv9EZ3zakfP172Lo8pQG6g=
Subject key identifier:   3B:0F:E7:DA:A8:A4:75:2B:E2:31:C8:7B:4C:24:B1:F9:FD:82:ED:02
Certificate issuer:       /CN=6887eee0-416a-404d-ad65-190613613018
Certificate serial:       010D0C9F4328584E7634C55F254063169B68A300
Authority key identifier: 7B:5C:D2:6F:07:D1:24:31:AF:CF:CE:8F:F0:9A:EB:8A:04:A2:06:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/b487cf0b-a6f9-3022-8ee8-0340f8957ef9.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     400940
IP address blocks:        152.55.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c5:5f:25:40:63:16:9b:68:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887eee0-416a-404d-ad65-190613613018
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=282984b6-86cc-40b7-9854-228577ed7c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:bd:87:08:95:fe:da:ca:6d:80:2b:a5:c8:
                    5d:17:87:5f:bd:3f:89:c3:b6:9a:53:65:9a:74:76:
                    b5:c8:44:7b:42:89:80:c6:d5:63:06:ca:61:b4:1b:
                    c0:bb:2d:a5:4c:95:b7:de:58:b8:8a:0b:97:5c:1f:
                    42:18:8b:72:08:41:eb:2f:54:fb:18:94:19:5c:ad:
                    06:88:a7:37:65:a7:8d:a4:15:cb:35:f6:8c:ca:dc:
                    41:9b:5a:49:4f:2a:2d:44:1f:09:e6:d0:d4:94:a5:
                    5b:94:1a:61:fb:fd:ec:c2:1f:12:e6:cc:04:00:a3:
                    20:c0:66:9e:e4:ee:fc:82:d3:1d:22:32:12:2b:73:
                    e1:f3:02:48:3b:eb:dd:e7:b9:c6:8b:4c:57:1e:d0:
                    e9:e1:e6:5d:ea:0a:94:24:cf:8e:6a:4a:da:30:bd:
                    68:6e:97:6e:68:37:fb:f4:59:9b:e7:56:dd:06:51:
                    8e:2b:fd:ac:b1:ef:f3:3e:0f:79:aa:a3:45:16:6e:
                    5a:67:5a:c8:cf:44:93:2f:1e:db:1e:19:99:14:b4:
                    c6:43:d8:6f:3e:63:eb:7f:64:2c:fc:3a:0f:20:95:
                    ce:00:fb:15:46:2b:69:be:22:08:26:cc:3e:e3:40:
                    67:e2:bd:76:c5:8e:97:2c:09:da:a4:6a:b1:9d:1a:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0F:E7:DA:A8:A4:75:2B:E2:31:C8:7B:4C:24:B1:F9:FD:82:ED:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/b487cf0b-a6f9-3022-8ee8-0340f8957ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.crl

            X509v3 Authority Key Identifier:
                keyid:7B:5C:D2:6F:07:D1:24:31:AF:CF:CE:8F:F0:9A:EB:8A:04:A2:06:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:7e:c5:be:45:dd:4f:26:72:58:48:46:3a:13:8b:cd:21:
         21:43:5f:d6:8f:e4:b8:b5:11:21:46:77:79:1b:8c:e8:26:fe:
         dd:1a:6e:2c:5f:8b:2a:46:e8:26:fe:01:73:d3:9f:0e:3c:26:
         6d:e3:b1:a8:f4:23:f8:bc:db:29:76:be:a4:54:aa:43:34:7f:
         d6:b6:9c:9b:dc:24:c2:f2:7c:dc:8a:87:c7:d8:cf:42:92:b6:
         85:25:cf:3b:4a:e8:e6:ca:6e:5a:10:42:c4:31:ab:0b:29:f2:
         2f:8e:df:f7:cf:95:99:47:d1:c0:9e:1d:ef:6b:6a:24:e8:72:
         5c:6a:8a:14:f7:5f:78:a0:b4:5f:d4:23:6d:19:79:b2:1a:80:
         6a:c1:89:e0:d7:fd:8a:d3:02:49:84:da:7f:34:a4:c7:28:27:
         07:9d:b0:58:ae:ee:26:02:5a:2c:31:0f:f1:20:0f:a2:a6:bc:
         b2:d5:4a:a0:8f:3a:9f:8a:87:0d:1a:f6:15:78:ec:00:66:1b:
         c6:ba:f1:09:36:cd:43:82:55:f6:d5:b6:76:41:d5:f6:33:88:
         cd:78:2c:b3:fa:01:b3:b9:67:92:83:a0:8c:8d:ca:a2:d1:c9:
         fc:92:eb:41:63:04:67:fe:41:7d:25:85:06:9b:40:4e:aa:0b:
         b5:3a:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:01 2026 by rpki-client