Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/55f888f7-386d-35fd-b749-88fc4b5bd876.roa
File:                     55f888f7-386d-35fd-b749-88fc4b5bd876.roa (raw, json)
Hash identifier:          A6r7fEzoi1JVQQcGO0slnP0hI1KM2DyswEQM5QLMmjI=
Subject key identifier:   11:BD:F0:9B:91:51:B6:D6:FE:C2:5E:CF:BC:65:DC:5E:30:7E:F4:AD
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F509BFE8BD1E3A0C672E678C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/55f888f7-386d-35fd-b749-88fc4b5bd876.roa
Signing time:             Sun 27 Sep 2026 14:34:26 +0000
ROA not before:           Sun 27 Sep 2026 14:34:26 +0000
ROA not after:            Sat 26 Dec 2026 15:34:26 +0000
asID:                     62904
IP address blocks:        173.44.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:9b:fe:8b:d1:e3:a0:c6:72:e6:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 27 14:34:26 2026 GMT
            Not After : Dec 26 15:34:26 2026 GMT
        Subject: CN=77a7973a-8953-4f10-aa94-b7cfa4829779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:b8:bd:ad:ff:df:6d:e8:1f:db:86:f6:d8:
                    b7:0a:97:28:a5:01:cd:b8:fc:d8:ed:06:09:70:2f:
                    f3:f9:f8:83:7f:09:d9:d6:f7:b4:89:34:e0:bf:10:
                    95:f6:27:4e:92:c9:cb:34:3b:68:3a:96:d0:f4:7a:
                    32:0a:ae:a0:05:b5:f5:9a:6c:d8:f5:5d:36:ea:6d:
                    8c:c4:db:da:57:be:4d:b1:fa:83:fc:c1:4b:98:6f:
                    6e:96:53:2b:bf:b8:84:42:cd:84:83:b3:ef:8a:45:
                    2c:fa:a4:0b:c8:03:b3:6c:39:5a:6c:b7:b4:eb:c4:
                    0a:75:0b:a4:7a:8c:1b:d7:0f:cd:69:2a:7e:54:ba:
                    e0:b9:0b:87:a7:5f:ec:3a:bc:2f:76:d4:6d:f5:e0:
                    ab:99:9b:77:0e:18:76:bc:ce:3e:1e:59:cf:a7:91:
                    c0:d7:d3:0b:51:9a:aa:59:51:44:3e:68:14:ea:68:
                    50:4d:6f:65:6f:c4:dc:e5:59:48:1e:2d:7e:63:14:
                    85:ce:d6:86:51:bd:40:ab:24:83:ca:d8:ca:e8:12:
                    d8:99:bb:d0:43:83:0a:1d:0a:76:3e:00:c2:01:ae:
                    1e:51:0f:3f:ec:97:49:60:3b:d3:81:ac:4c:70:1d:
                    b0:6f:c6:cc:4b:a9:69:3e:a6:23:1f:ef:db:1d:67:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:F0:9B:91:51:B6:D6:FE:C2:5E:CF:BC:65:DC:5E:30:7E:F4:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/55f888f7-386d-35fd-b749-88fc4b5bd876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:43:cd:69:13:0f:5c:e5:13:cb:73:90:22:26:81:ec:de:38:
         b7:39:2a:5d:37:7b:88:15:6e:98:ab:cf:8b:3e:f9:b6:aa:b5:
         86:13:b3:9b:05:5c:54:ce:25:fa:8b:79:6a:96:5e:bb:7c:aa:
         c5:8a:7e:ab:45:be:a5:0f:d6:ea:d1:bf:2a:26:b3:28:71:cf:
         0d:95:1e:a6:96:7f:8e:29:33:13:55:df:2c:c2:dd:d5:2e:58:
         fc:e2:12:de:16:27:0e:bf:18:70:be:a1:9b:22:0a:db:36:c1:
         af:15:d9:4c:50:ae:73:c8:31:3b:ca:4c:31:3b:1a:10:e6:7c:
         55:c8:10:44:b9:72:fb:da:30:a1:9e:66:d8:9a:1e:7a:3d:44:
         c6:14:ed:f2:e7:a3:39:02:f2:17:e1:f0:5b:ce:01:47:60:67:
         71:cc:8f:9f:2e:cc:54:40:f1:7c:43:a9:03:f5:2c:03:80:2d:
         e1:f5:ea:36:f6:3f:5a:1c:bd:b9:5a:30:eb:c6:4d:1a:0b:93:
         be:a1:ed:37:bc:16:f5:fd:7b:5c:24:85:53:88:f0:de:11:e8:
         e1:d4:c1:b7:db:74:11:ea:b2:21:2f:24:13:64:eb:ca:15:fb:
         d5:8b:42:7f:bc:3b:69:32:18:15:1d:15:c7:ce:b5:49:ce:72:
         7d:b3:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:43:41 2026 by rpki-client