Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57dee1b6-1894-3c65-853f-69248e5f5b49.roa
File:                     57dee1b6-1894-3c65-853f-69248e5f5b49.roa (raw, json)
Hash identifier:          HWcYTv50LxnSoFwszAa5B7p61HhHLjeX5+v9Zvg/wv0=
Subject key identifier:   47:68:9D:F8:B3:9D:95:C2:2C:08:7D:99:A6:78:06:47:36:A7:8A:08
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584E9384F778259912E83ACBB500
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57dee1b6-1894-3c65-853f-69248e5f5b49.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     16504
IP address blocks:        172.85.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f7:78:25:99:12:e8:3a:cb:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=af430f5a-8221-481a-a9a7-72bf9c829c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:4e:30:75:25:81:c2:5c:36:f1:07:b9:46:
                    2e:af:91:5d:54:1c:45:a5:9b:ec:dc:cf:7f:c3:4e:
                    17:4b:99:ad:fa:c4:c2:02:fb:2c:12:0f:df:63:d3:
                    56:18:d2:3d:a6:f3:92:0e:87:b4:3d:b7:96:ad:e4:
                    75:96:fc:7d:00:3d:f3:22:05:31:9d:c2:5c:ee:3a:
                    5e:f9:fc:a7:eb:1a:a1:9b:ba:90:8f:f5:bf:a9:6d:
                    57:e6:51:74:ad:d6:84:9e:92:f1:d9:9d:6d:a1:f3:
                    28:0a:18:d6:84:f4:21:00:05:63:60:67:f9:fa:0d:
                    ae:57:02:ca:15:7c:3e:2e:a5:9a:86:9d:06:ef:11:
                    2e:23:6b:79:45:e8:06:d7:d4:a0:a5:99:48:2c:09:
                    dd:da:db:4e:44:b7:e4:f9:94:0d:23:77:64:c9:e6:
                    b3:49:a1:39:8a:eb:72:6f:4c:bc:ef:9c:9a:37:71:
                    0b:4d:08:73:0e:d5:2e:1e:e6:09:a8:07:f0:3c:ce:
                    97:9f:96:c4:12:5b:36:18:45:a5:f3:2f:88:89:c2:
                    72:01:b1:25:bf:f4:86:59:d5:87:02:ba:ed:9e:64:
                    e6:7c:40:c3:c6:d8:87:4e:7d:b2:c8:3a:22:5c:11:
                    e0:5d:c6:8d:8f:bc:a7:7e:da:ce:04:16:57:96:20:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:68:9D:F8:B3:9D:95:C2:2C:08:7D:99:A6:78:06:47:36:A7:8A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57dee1b6-1894-3c65-853f-69248e5f5b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:25:78:de:5b:78:53:4c:59:26:f6:d6:11:aa:05:f8:25:
         ad:6d:c4:2f:dd:18:1f:9b:d4:10:07:0d:b7:12:a9:67:7b:c0:
         d8:bf:65:c1:2a:12:70:87:88:21:78:2a:e1:46:61:5f:79:c7:
         5a:be:fc:22:7f:0e:45:bc:42:64:22:09:b1:da:a4:b9:cd:9c:
         fc:06:90:b8:18:5d:ed:f2:c1:8b:a6:a3:2d:0f:ba:ca:2c:7d:
         51:f4:df:5f:84:40:b0:0c:37:e6:d4:a5:26:8e:62:04:c9:f7:
         fd:ce:df:79:b4:3e:d1:8e:3a:42:d7:85:86:5f:c0:2e:da:48:
         89:45:ed:ab:b8:16:e4:a1:66:2d:2d:01:36:eb:06:99:26:00:
         42:fa:06:14:5c:12:d6:b7:8a:e5:90:d2:d7:1b:af:d9:19:84:
         33:71:1a:57:22:47:fd:6d:ba:e5:7d:2b:7b:f5:12:14:20:3c:
         ef:f1:40:83:ad:51:3d:a4:fb:72:ad:28:4e:22:92:af:ea:53:
         a7:fa:c1:f6:51:6a:f9:c3:60:57:db:42:c1:f4:cd:cd:56:42:
         60:81:9b:e0:55:77:2b:ab:16:09:66:bf:80:23:38:c9:7b:be:
         6a:ac:fd:73:a2:52:92:6d:ef:73:b7:fb:65:a9:a3:d2:35:be:
         da:ea:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:53 2026 by rpki-client