Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/f55591e7-2367-38f2-9ddf-f4d577d74c3b.roa
File:                     f55591e7-2367-38f2-9ddf-f4d577d74c3b.roa (raw, json)
Hash identifier:          5myrBOPFtQqRRf6ZPmKf702CSkzemLxnmYo5FQqQ4fc=
Subject key identifier:   5A:5A:71:7C:3E:51:02:7C:7F:5D:57:35:77:71:5C:8E:6A:B7:F1:C0
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584F49767B95499AABE6640D6F00
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/f55591e7-2367-38f2-9ddf-f4d577d74c3b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16532
IP address blocks:        205.151.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:7b:95:49:9a:ab:e6:64:0d:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7efd34c8-2dba-43b4-9f37-31b97d03ffc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1d:c8:58:25:82:b5:b3:cd:f5:23:9d:fa:34:
                    8b:07:e9:cb:4d:0b:12:55:ed:cd:a8:51:92:0c:5e:
                    e9:d6:c7:1a:1b:09:46:8e:d7:46:0e:d6:f9:42:d5:
                    31:cb:7b:72:fe:55:bf:e6:c6:a4:77:2d:4c:05:da:
                    04:4e:b3:b0:f0:42:fd:bb:4b:2c:5e:b0:dc:6b:24:
                    e5:03:7a:db:6e:61:ce:a2:36:71:6f:95:a7:24:33:
                    44:2b:15:cb:28:95:61:4d:54:cb:8b:ab:b6:8e:d6:
                    9b:b9:80:be:bf:7d:bc:1a:31:8e:71:5b:f5:cf:41:
                    16:ec:61:8e:75:8a:15:35:7a:47:4b:99:e5:51:9e:
                    99:e2:5f:cb:cf:5a:46:08:9d:4b:9b:bf:22:d1:a1:
                    91:f1:e7:11:39:7f:67:a8:21:d1:43:84:5e:ff:27:
                    d4:dc:6b:6b:ec:a3:88:5a:18:ab:d5:91:ef:9e:43:
                    77:ef:47:7a:48:17:e3:94:36:c5:db:91:5b:ad:a0:
                    2a:4f:c8:6a:f4:65:18:d3:d0:e0:70:87:85:d5:d0:
                    2e:f0:b8:4c:03:db:ea:aa:f7:dc:7e:20:99:4d:bc:
                    32:24:90:58:e2:9c:24:9c:a1:f0:54:9a:a1:e2:e0:
                    06:23:0d:05:ef:c0:02:67:f0:f8:d2:2c:6e:f1:a5:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5A:71:7C:3E:51:02:7C:7F:5D:57:35:77:71:5C:8E:6A:B7:F1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/f55591e7-2367-38f2-9ddf-f4d577d74c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:3b:eb:5a:c0:18:b1:e0:a6:e7:e3:a2:4f:41:3e:32:e2:
         3c:c4:c7:19:08:0b:39:96:a8:e6:c8:ee:1b:3e:6a:2b:a0:b4:
         9a:13:0f:75:ab:04:a7:34:80:c5:9f:47:fe:7b:fa:13:ae:95:
         8c:d6:13:e0:a7:ae:67:e8:07:c0:57:11:a3:d0:85:d1:22:8c:
         04:d0:25:98:dc:0c:93:db:e4:55:56:25:7d:1c:f5:86:8b:78:
         10:4d:9e:75:28:01:a9:a6:17:1b:bd:7a:95:14:18:27:99:b9:
         e2:2e:8e:3c:4a:7f:40:20:84:7a:3d:db:1f:66:ea:d1:96:5e:
         5e:ec:18:f8:16:9e:2d:b0:34:a4:02:ff:8b:00:2d:39:6a:70:
         6e:60:8d:84:5b:4a:a0:08:d9:6e:96:81:0c:2e:5b:0f:c6:1a:
         d4:fc:32:ba:21:46:44:d3:11:85:a6:4c:eb:f2:8a:2b:7f:80:
         01:53:6f:16:52:5d:79:86:31:46:75:c3:25:6d:fe:1e:07:c9:
         03:cf:e7:6a:a0:8d:39:26:8a:99:f1:91:fd:2d:07:24:03:55:
         4a:06:2d:73:02:ca:de:62:6d:04:79:e7:3d:fe:ac:c6:21:79:
         0a:28:64:07:dd:f4:1b:4a:42:6e:36:98:97:65:0d:46:7c:79:
         6c:a2:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:14:16 2026 by rpki-client