Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/3aabfa46-d4ed-3558-a6fb-f48ca8a62d81.roa
File:                     3aabfa46-d4ed-3558-a6fb-f48ca8a62d81.roa (raw, json)
Hash identifier:          7z9Df4YuCgejsQxLaASeaw6DvTr32yZsBD+W1719TkI=
Subject key identifier:   65:16:12:A7:F9:46:E6:08:3A:7D:54:BD:8B:2E:94:9A:34:1C:AB:BD
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584F4976A9CA75F2B8CCD8AD5C80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/3aabfa46-d4ed-3558-a6fb-f48ca8a62d81.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32592
IP address blocks:        72.20.176.0/20 maxlen: 20
                          72.20.177.0/24 maxlen: 24
                          72.20.178.0/23 maxlen: 23
                          72.20.180.0/24 maxlen: 24
                          72.20.182.0/23 maxlen: 23
                          72.20.184.0/24 maxlen: 24
                          72.20.185.0/24 maxlen: 24
                          72.20.188.0/23 maxlen: 23
                          72.20.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:a9:ca:75:f2:b8:cc:d8:ad:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7bd83d8f-47e0-4188-94d8-c87e43573533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:07:e4:68:df:1c:28:98:c3:6d:42:df:83:
                    50:b1:37:91:0f:4c:a1:24:a2:88:e0:92:9c:33:c2:
                    fd:ce:d2:80:50:e2:21:f6:75:4d:89:f4:c3:8a:0c:
                    13:74:dc:d9:86:13:87:e4:01:61:66:40:d5:44:55:
                    c8:df:5b:64:e9:58:63:38:6c:4d:7b:63:5c:01:49:
                    37:1f:aa:e9:05:8e:71:4f:4b:13:46:4f:eb:2f:19:
                    d4:45:81:24:2a:c3:72:9d:08:6d:b4:c0:8c:eb:6d:
                    53:bb:11:2a:bd:c9:3a:e5:8e:90:48:4f:44:75:e7:
                    07:28:bb:bb:aa:75:a6:2b:d4:df:55:94:e8:42:1c:
                    d4:38:32:51:07:62:4c:af:46:0f:43:86:1f:e3:a3:
                    a9:f1:8b:dd:de:b9:e9:45:5b:9a:62:38:15:7d:49:
                    c5:7a:04:64:8e:91:10:2b:8b:83:e7:cd:cc:54:0a:
                    20:a3:a0:89:af:f4:b2:17:36:04:73:0b:79:f3:dc:
                    19:cf:6a:9f:d6:ac:7d:4c:69:5f:7e:2a:14:9c:4a:
                    92:a1:ed:b8:18:ad:65:20:aa:7a:57:bc:bc:1e:8d:
                    50:6b:87:7b:20:23:fc:6d:c8:12:6c:15:01:72:b8:
                    b2:ff:41:94:54:c8:80:10:6f:c9:39:02:87:25:15:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:12:A7:F9:46:E6:08:3A:7D:54:BD:8B:2E:94:9A:34:1C:AB:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/3aabfa46-d4ed-3558-a6fb-f48ca8a62d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:f5:bc:da:85:bb:27:58:a0:a2:97:a6:56:9c:74:ec:1b:
         6d:90:b2:a9:b3:80:42:50:a2:32:36:2d:c4:19:ca:1c:f1:fa:
         5d:2a:ae:04:92:25:53:a0:a3:37:c6:60:3f:37:31:92:36:a1:
         62:6b:0d:ac:bb:0a:13:a1:f4:21:41:da:aa:4b:40:ee:24:fd:
         c2:37:d8:7b:15:fa:d4:c8:90:3e:d7:4f:dd:84:37:57:9a:ec:
         c7:4d:51:1e:6d:a9:be:57:2a:04:d0:b1:1d:51:7a:74:50:df:
         89:66:58:e3:2e:a0:e6:e2:95:3e:cd:1a:40:0f:a6:0b:2c:94:
         68:7d:aa:42:cb:be:51:2d:a9:9a:d4:6e:d2:66:9a:01:39:84:
         19:46:43:15:e5:24:bb:db:56:b1:21:8c:b7:15:a6:44:cf:c3:
         0f:cf:58:72:78:82:11:94:fb:c1:45:67:56:dc:a5:bd:5f:d6:
         2f:93:b6:7b:31:41:01:2a:48:3e:c0:56:f7:2d:b0:46:91:03:
         3f:ea:c8:9e:1f:bd:d1:30:b5:69:28:24:39:f1:5b:50:f5:cf:
         3c:36:9f:29:7e:85:94:1d:34:a6:3a:47:52:af:87:11:d2:c3:
         93:7c:0a:4a:64:2d:f0:89:fe:da:05:82:4b:21:c3:23:28:b4:
         a7:d2:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:44:28 2026 by rpki-client