Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa
File:                     28d5ed5a-717b-35dc-b627-203d741bc9dc.roa (raw, json)
Hash identifier:          2/Ust28qHI1h0vUQ01OSM3+IRr1uf+UTA/nTm9DLWPo=
Subject key identifier:   75:7C:5B:10:5D:F6:0F:23:03:9F:71:6F:BF:B1:4E:02:6B:AB:84:90
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584E94EA5AD76C1B775E93EB8180
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     5662
IP address blocks:        157.166.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5a:d7:6c:1b:77:5e:93:eb:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=99200e80-95f4-4ab4-817d-88fc94542ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:0b:58:b8:d6:40:18:b6:6e:3c:9a:ed:c0:
                    20:01:2d:62:59:50:26:12:a2:92:4b:10:4d:ed:ca:
                    92:a3:6b:2a:d8:9f:98:22:43:d2:bd:ec:05:27:96:
                    af:66:25:27:5b:e2:e4:ae:f3:b1:ea:ac:11:23:d1:
                    40:e7:2e:f7:70:0b:fd:26:4c:17:33:ab:89:45:2c:
                    e6:14:bc:21:d5:da:16:23:bf:56:2b:f1:ad:d2:a2:
                    ec:7d:37:b5:2e:a4:b6:fc:84:fa:14:ed:ca:6e:65:
                    8d:36:4d:23:89:b1:8a:40:1b:f8:50:69:d4:f9:5e:
                    52:b7:bc:84:07:9b:70:55:ef:1e:70:aa:fd:ef:a6:
                    fb:c7:c5:51:ba:6e:75:0f:c0:36:75:c9:a4:de:f7:
                    c6:3e:5f:55:64:60:ae:a8:0a:e6:7d:91:b5:d5:f4:
                    2c:bb:5e:6b:1b:f3:e2:da:e7:e7:51:ec:2a:b8:df:
                    05:1f:5a:4b:fa:f1:a0:7f:ab:2e:e5:72:89:e4:c3:
                    50:0e:bb:7d:a5:ad:bf:1e:15:49:1c:ec:d4:d2:fb:
                    52:40:50:ee:33:72:86:cf:a2:ce:39:28:96:ec:1e:
                    3c:37:a8:d1:74:68:f2:69:76:bd:cc:23:94:4c:33:
                    59:0e:08:83:e2:c9:22:56:96:2d:83:e4:a4:cf:2c:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:5B:10:5D:F6:0F:23:03:9F:71:6F:BF:B1:4E:02:6B:AB:84:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:4e:db:66:f6:3d:bf:82:1a:e9:60:2d:ee:91:25:b8:32:
         ee:df:aa:61:3f:0f:e9:db:dc:18:db:6c:0a:1d:e0:29:1e:36:
         1b:5b:27:14:04:81:ef:74:51:76:cd:4e:d5:cc:77:62:80:b3:
         0b:c5:47:40:6e:e4:71:fc:66:34:a7:5a:0b:8f:e9:f9:14:e6:
         11:a4:03:ad:63:bb:70:79:7a:19:de:3b:bd:01:2b:d3:d6:6d:
         a0:14:9c:3f:0a:31:d6:12:dc:b3:4a:26:74:df:b8:b6:11:81:
         e0:9f:14:9f:e5:5e:82:1c:e8:3c:7b:b0:e0:ee:64:2c:1a:03:
         a9:10:cc:8f:87:6f:74:08:31:cc:73:1d:aa:79:1c:3a:2c:eb:
         b2:b3:d7:60:82:5d:29:21:32:b1:d2:80:94:9e:5e:ca:df:cc:
         b8:c4:53:e0:e5:03:1b:b8:8c:5e:65:1c:fd:00:2c:c3:d1:b0:
         c2:de:65:bd:ee:93:32:31:67:d8:1b:2d:d8:20:dc:36:91:f9:
         d4:f5:e5:6a:2b:c9:cd:0d:e6:75:e5:7c:b9:1b:5b:ad:bb:ed:
         34:20:97:4e:4f:a9:67:c2:13:63:14:a2:f8:70:ab:d0:e6:82:
         71:43:2b:61:ee:4b:ba:ce:f2:06:88:9e:50:4a:6f:34:47:74:
         b4:d3:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:18 2026 by rpki-client