Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20a16cd0-6733-3817-8e11-703463029928.roa
File:                     20a16cd0-6733-3817-8e11-703463029928.roa (raw, json)
Hash identifier:          iYqN6mdWZ6J9xLFwad4sw2c3jY66p5kjPwbvX8utAD0=
Subject key identifier:   DF:CD:76:D6:FD:D5:83:AA:52:E1:86:A2:58:C1:F7:6D:EE:A6:9F:6C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E94EA492B99C8F394A99FB940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20a16cd0-6733-3817-8e11-703463029928.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     32787
IP address blocks:        72.52.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:49:2b:99:c8:f3:94:a9:9f:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=314b2cdd-5cbc-42ee-9cba-dae6bf207825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:f0:bf:95:92:78:e7:2b:6a:dd:bb:55:ef:
                    70:dd:ee:ce:8a:94:7d:89:ae:ce:48:0c:0b:8d:ca:
                    a1:8c:1f:4d:1f:2d:7b:9b:46:49:dd:d0:48:7d:e8:
                    92:ee:6b:fd:65:4f:6c:4f:8d:84:e7:8d:6f:1b:72:
                    58:15:f8:ae:56:cb:6a:1c:4f:14:62:d7:f5:9d:f2:
                    63:2d:8f:b8:e2:0c:74:e6:54:8b:cc:ee:c2:8b:9c:
                    0d:0f:51:df:a8:34:74:35:e9:ee:dc:21:98:fe:64:
                    c6:a0:bc:bb:1c:72:67:5d:2c:69:57:a9:79:2c:32:
                    fe:e9:5a:1d:da:97:88:4e:d8:3f:74:9c:e7:4e:98:
                    e9:48:cd:d1:91:6e:87:45:4d:d6:be:62:2b:4f:33:
                    2a:c2:18:8c:08:31:de:c4:32:78:da:0b:ca:76:f4:
                    e8:61:9c:e5:c4:7a:6f:6b:e2:53:02:40:7c:34:8a:
                    77:b7:2f:6f:78:17:03:c6:05:50:1c:32:55:82:9d:
                    f6:69:01:d8:b5:97:95:83:a8:82:c4:be:76:c9:bd:
                    9f:65:5b:6d:88:ac:c6:19:74:3b:a5:22:4c:62:65:
                    dd:7f:f8:2a:84:ae:6b:da:39:1d:dd:5f:1c:aa:47:
                    6c:83:10:d5:2d:97:73:34:5b:74:5b:90:94:d6:b3:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CD:76:D6:FD:D5:83:AA:52:E1:86:A2:58:C1:F7:6D:EE:A6:9F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20a16cd0-6733-3817-8e11-703463029928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:15:1d:b2:4c:b5:24:67:74:eb:ca:1f:bb:47:52:ec:88:74:
         7b:90:18:f2:c0:7d:b9:fe:2d:6d:f0:09:7b:4e:6a:f5:ce:0d:
         57:49:7b:0c:16:cb:8b:18:ba:31:8b:72:9c:84:32:ed:b7:9a:
         2d:7e:9e:e6:85:1e:d0:24:c0:ec:33:21:a9:8f:db:6c:a9:5b:
         26:6c:56:9e:a1:20:d1:24:58:83:9f:33:5f:ba:8e:7e:6e:0c:
         d7:32:7a:a8:20:42:f8:8f:c7:ed:52:34:65:74:2d:e2:83:02:
         f6:e1:c7:82:ff:3f:9b:b8:47:37:11:89:d4:49:31:e7:7b:23:
         2e:5a:c9:d2:90:46:6f:07:96:bf:db:ea:5e:81:f8:9a:eb:31:
         32:e8:d8:ae:39:0e:a8:5c:d7:61:1f:30:44:c2:b2:84:71:15:
         dc:b2:91:65:9e:0e:59:52:88:af:01:87:1c:9b:8a:c2:4d:58:
         56:74:61:e1:09:b1:37:f7:c9:e1:f7:72:f1:2b:a8:f2:7b:f8:
         eb:22:9f:1f:f3:8b:17:b8:80:fc:c7:7f:d8:b9:7b:58:1b:7e:
         31:87:e3:84:99:55:b7:8b:a3:2a:72:38:09:38:bf:b5:22:89:
         05:59:2d:53:31:45:ef:9a:e2:38:12:93:4f:7a:11:28:89:a0:
         df:fb:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:57 2026 by rpki-client