Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a54a0b62-8546-3c48-909b-08b3bbc51577.roa
File:                     a54a0b62-8546-3c48-909b-08b3bbc51577.roa (raw, json)
Hash identifier:          V0GaxkuPngxwYY+gXVrkQgS5hPNrKICShazV8BDhx6k=
Subject key identifier:   F8:DB:6D:95:E5:D7:DE:70:9F:AD:8F:97:01:27:DA:46:29:06:17:D1
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584E94EA602FB4BEBE3B32574F40
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a54a0b62-8546-3c48-909b-08b3bbc51577.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     2152
IP address blocks:        137.164.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:60:2f:b4:be:be:3b:32:57:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=6095bdca-dcdd-4e59-a4d8-2ad7391d85e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:be:6c:0c:eb:9d:86:8a:7a:d4:b8:77:75:
                    42:ee:b4:84:ca:7d:08:93:d0:64:c5:c9:76:49:df:
                    be:47:43:ac:d3:ab:7f:07:37:3f:c7:a2:eb:1b:06:
                    b4:ba:81:c9:93:86:79:e2:37:1d:16:5e:30:39:72:
                    f0:b3:a7:32:32:71:7f:10:7d:0f:da:91:41:6c:47:
                    46:1e:bb:d4:5e:e9:5f:4c:2d:d9:82:d7:4e:13:9d:
                    aa:f2:aa:ab:cb:0b:d6:9f:a2:be:96:f1:3b:22:0d:
                    b4:bb:9c:bb:39:70:03:ee:28:d9:36:ff:47:a0:04:
                    61:f8:b6:95:0b:91:c1:f7:ea:ac:a8:4d:09:38:21:
                    a8:25:ae:06:92:06:83:7c:7a:81:83:c4:38:5e:c2:
                    81:e3:a3:e0:ec:38:d0:f0:f1:92:36:66:4b:8a:b2:
                    59:ef:ba:14:57:e6:7a:51:31:14:3c:99:77:d1:5d:
                    ee:1e:5e:e9:2f:dd:6c:a6:b7:e5:da:03:3d:90:a3:
                    f2:df:6a:8e:3d:78:7a:a0:d4:2f:90:32:e3:3d:24:
                    f9:58:72:3b:40:7b:0d:92:54:44:dd:46:28:51:f7:
                    37:0c:0f:f4:86:36:c5:2d:7e:f3:18:be:b4:ce:a4:
                    5b:13:84:b5:92:d5:21:3b:bf:14:1c:7b:fe:be:77:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DB:6D:95:E5:D7:DE:70:9F:AD:8F:97:01:27:DA:46:29:06:17:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a54a0b62-8546-3c48-909b-08b3bbc51577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8a:a1:16:9d:18:4f:9f:39:cf:b5:e0:74:4b:3d:84:cc:5f:
         20:ec:7b:14:e8:1a:81:83:ec:09:18:c3:93:51:65:05:76:e5:
         4d:a5:68:ca:a8:0b:b3:63:0c:27:28:a1:14:fb:59:ef:fb:49:
         7d:55:d6:c4:54:a2:c4:a8:22:88:b1:f9:15:ee:67:8e:a6:57:
         94:09:ac:d9:fc:92:a9:d2:56:f5:99:97:56:d3:f4:27:2a:7e:
         b9:49:b1:79:f6:ce:63:fd:ba:61:ad:3e:95:ec:72:d4:e9:81:
         4e:a2:de:fc:13:46:d1:8c:fa:58:dc:1f:07:b2:ce:59:a0:5f:
         a9:4e:1f:4b:7d:fb:b1:58:0c:ff:04:17:53:40:3c:49:10:96:
         e0:6e:e3:61:11:72:25:b8:ef:d5:6c:2a:f5:d4:35:48:ac:96:
         2b:cf:a7:aa:b9:40:14:34:2b:96:cb:b1:92:da:ef:84:ae:91:
         98:cd:b5:06:15:3d:87:04:7b:45:ad:87:53:28:a6:ce:fa:87:
         98:55:b7:4e:67:39:bd:d6:f1:01:ff:1c:3b:cc:5b:ee:ed:c6:
         f5:24:c3:fa:96:13:1f:4d:cf:83:f8:8b:f9:3c:d2:39:a6:32:
         36:36:a5:17:35:0a:24:e4:2f:81:4c:a0:b2:10:95:74:58:69:
         52:cc:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:25 2026 by rpki-client