Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa
File:                     1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa (raw, json)
Hash identifier:          yijR0rlDHQBNuvW/1Capr87hVv8uWzQhc/QFCRguR9o=
Subject key identifier:   E2:28:F3:89:E6:9D:E8:DF:85:41:DE:9F:7C:85:26:72:58:19:73:BB
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584E5A49EFE059D90628EB1EF680
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     33164
IP address blocks:        172.97.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ef:e0:59:d9:06:28:eb:1e:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=482b9c4c-ed2b-4b6f-b90d-536005cd1dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:2f:ef:24:94:60:0a:e0:a6:7e:60:21:c8:
                    c3:fd:59:35:2a:17:06:e5:25:b0:92:7b:f3:ac:a0:
                    5e:b8:91:27:34:d2:15:98:de:5b:87:2a:17:42:b0:
                    2d:ac:a7:05:99:86:26:50:f1:13:48:1a:55:7d:3e:
                    92:15:07:32:df:35:6e:21:8a:54:c0:54:da:b8:e9:
                    4a:e5:6f:21:35:1a:1c:27:6f:0a:af:b7:ae:f9:c6:
                    6c:ed:ae:7d:08:a1:4b:9e:85:a2:41:58:8e:f1:f4:
                    d8:ce:82:6d:06:44:c7:03:e4:5e:f1:b4:46:15:2e:
                    74:92:69:04:3f:64:85:58:df:c3:0f:2a:10:cd:9d:
                    d3:7b:d5:37:6f:46:c9:4c:de:a0:f6:7e:be:47:79:
                    56:85:ee:3b:f5:6d:42:3c:c0:7c:46:31:6a:61:71:
                    5b:e4:5d:77:21:15:68:eb:90:f5:dd:0a:18:76:23:
                    10:0e:77:7d:0d:0a:2e:e2:cb:22:c4:93:bf:90:a8:
                    b5:1f:91:9a:1f:8a:06:b0:7a:ef:f8:78:fa:aa:ce:
                    2b:e5:50:67:49:02:ed:ff:b3:05:ca:79:78:ec:07:
                    dd:b1:06:ca:22:d9:7a:4a:d7:ad:32:19:91:b0:77:
                    57:1f:ff:9e:0b:bc:e1:f7:bd:45:ca:25:12:0a:1c:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:F3:89:E6:9D:E8:DF:85:41:DE:9F:7C:85:26:72:58:19:73:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.97.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:fa:d2:82:a4:30:3a:d6:5c:08:ae:c0:bb:18:d9:bc:da:
         cf:f8:02:f7:3b:6b:25:3f:56:ed:32:f3:49:39:c7:1c:2c:ed:
         b8:e6:62:6e:72:c6:30:6d:45:43:60:eb:50:e8:d5:06:e8:77:
         dd:f1:12:39:30:dd:8a:5b:a2:dd:9e:a0:fe:8f:cb:8d:99:e5:
         ba:61:25:1f:a7:15:0a:42:ce:af:df:df:f7:37:fa:10:a7:79:
         14:38:14:2c:53:93:28:77:cd:b6:c8:a2:4c:55:d1:d4:58:23:
         02:3a:ff:53:53:86:7b:c1:04:a2:71:6c:6e:e2:1b:fa:58:00:
         c0:e0:0e:0f:d2:00:07:b5:af:76:7a:7a:c2:56:5f:ae:59:49:
         11:b9:a6:37:1d:47:1c:ba:3c:c1:4c:92:55:a8:54:82:4c:84:
         07:f7:20:98:4c:43:a4:78:91:f3:d4:f5:49:60:1f:02:9c:42:
         38:ce:2d:42:4d:7f:3d:ed:7c:e2:97:84:02:fb:89:0c:6e:24:
         4c:9c:8c:43:f0:cd:5a:b4:e3:02:dd:67:d3:b3:c7:e0:fd:dc:
         53:4c:47:81:39:ca:0a:06:ab:04:2b:1d:d3:10:a0:76:2e:15:
         5f:63:c8:5e:de:a2:54:54:44:7b:ae:00:d0:41:1e:e2:27:24:
         8a:ab:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:13 2026 by rpki-client