Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/55345ae6-01d5-36ed-a163-49104fdaaad3.roa
File:                     55345ae6-01d5-36ed-a163-49104fdaaad3.roa (raw, json)
Hash identifier:          CaejEDyXvdJgZVJU8vv4TPSR7unTs2mfQBkZ7mZS7Yk=
Subject key identifier:   59:49:53:C6:5C:87:80:E6:4D:8D:EC:7F:B0:1A:0F:7D:EE:33:7A:E5
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584E90BA447216E207C6D3AA9CA0
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/55345ae6-01d5-36ed-a163-49104fdaaad3.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     55081
IP address blocks:        192.241.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:44:72:16:e2:07:c6:d3:aa:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=20b02268-c168-4f14-b70e-3dd631e6fa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:b3:e1:a2:8e:44:a4:09:76:90:05:7d:a1:
                    a5:32:0a:5b:e5:8f:a7:7f:78:48:2a:33:d2:ab:fa:
                    3c:c6:ca:30:05:c2:e3:b7:75:ae:60:2f:0f:ae:01:
                    2c:b8:30:22:f2:f1:7b:c3:7f:71:ba:d9:ba:34:df:
                    dd:99:f4:bf:98:9b:ac:e9:b0:d2:94:2c:3a:06:77:
                    83:2f:53:a6:cf:64:9f:1b:f6:c5:39:50:a3:74:f9:
                    20:0c:1a:c0:53:1f:15:5c:5a:52:4a:90:cc:2c:db:
                    42:60:a5:e7:2a:d4:38:be:4e:c6:81:1a:ce:35:61:
                    af:66:fb:d4:3a:61:91:69:02:7f:ad:92:65:43:5d:
                    ea:98:ed:94:e2:c6:58:a4:7c:e7:ac:49:f4:1d:c7:
                    7e:e6:01:ed:1e:0f:52:35:6e:d7:b8:07:ea:12:fe:
                    1f:40:1b:39:8c:32:a6:80:9e:a7:29:e7:c9:30:f9:
                    31:e9:8d:94:c7:20:76:3b:2c:e1:4d:d5:20:93:a1:
                    46:b7:5b:39:14:56:4a:4b:a5:9a:d7:3f:c3:fa:7d:
                    d6:9d:0d:36:d2:49:c1:c1:5d:39:bb:0d:11:3f:80:
                    af:32:b4:33:3d:30:24:23:45:91:bc:e8:47:92:3b:
                    a2:b1:19:18:11:c9:da:6f:02:56:76:47:e1:79:b7:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:53:C6:5C:87:80:E6:4D:8D:EC:7F:B0:1A:0F:7D:EE:33:7A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/55345ae6-01d5-36ed-a163-49104fdaaad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.241.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:60:eb:50:88:3b:88:e9:a6:5e:4b:99:93:d3:25:c1:44:
         21:58:39:c6:c5:42:68:de:bf:ad:73:27:1c:46:af:b1:f3:d0:
         66:d3:da:fc:d7:82:bb:22:5d:8f:8a:c3:20:48:b9:2f:7c:00:
         bc:fa:96:3d:b0:fd:4c:ed:20:38:1f:97:cc:06:e7:bc:f9:5d:
         e3:9d:84:43:d6:1b:e0:2d:31:4a:d9:aa:c7:62:df:1d:f3:a3:
         a3:e8:b1:da:cc:d2:b3:9e:fb:a4:8a:57:f2:78:26:03:66:5e:
         a6:0f:8e:bd:da:0e:35:ce:e0:cd:f3:7d:f4:22:9a:8d:5a:99:
         f1:1d:d1:54:a0:e2:53:b7:0b:58:e0:a8:c2:76:c4:6d:ea:e1:
         6f:30:b0:52:01:64:38:94:4b:f1:6f:68:c7:a3:da:b5:ea:51:
         b5:a8:cd:10:55:62:5b:18:19:b1:8b:51:95:c6:e8:4b:8a:b2:
         fa:ea:ee:f8:8d:c5:8b:d8:2d:ec:71:86:83:c0:86:08:7e:6c:
         b9:ad:f6:f8:04:26:8b:5d:3f:e5:d5:28:55:dc:35:c5:fa:ee:
         80:98:d7:1c:35:d7:42:6d:a5:71:37:70:37:c7:e7:dd:bb:0a:
         c9:95:7e:c9:ec:c9:7a:d1:63:4d:4a:d2:c4:5b:c2:de:fd:24:
         d4:5f:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:12:48 2026 by rpki-client