Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa
File:                     c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa (raw, json)
Hash identifier:          D3UisXK2EYlSBAOHs0CLepZEtV6Den/OoZjz4YHQFR4=
Subject key identifier:   DA:BC:B6:7F:49:ED:2B:61:9D:EB:7E:3D:87:25:1C:47:10:38:AF:2C
Certificate issuer:       /CN=3e5c42ff-624e-4419-832c-8d3b65c73dad
Certificate serial:       010D0C9F4328584F498B13F00526DBDFCDC9C900
Authority key identifier: D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40581
IP address blocks:        72.35.208.0/20 maxlen: 24
                          192.231.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:13:f0:05:26:db:df:cd:c9:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5c42ff-624e-4419-832c-8d3b65c73dad
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=250b6414-9e4d-44f2-b0ad-61e12b234205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:db:b3:15:65:9e:58:5a:5d:40:19:35:94:
                    fc:e0:a4:47:48:e4:4b:0f:87:37:cd:56:c6:16:f1:
                    c3:e6:62:2c:ab:ec:0b:f6:83:c6:1a:48:d0:97:db:
                    d3:f1:19:4c:0a:61:37:f6:92:0e:0d:f1:2a:da:37:
                    7e:1b:e9:5a:75:29:ba:86:11:4d:0c:a8:6e:5b:e7:
                    1f:d8:2a:1f:6d:b7:08:9f:64:a5:1c:33:72:2a:51:
                    a3:5e:f6:9f:c0:e5:0b:3e:f8:7b:6b:85:7f:86:10:
                    bb:49:05:d7:f9:4d:40:05:b3:c9:d2:1a:46:8b:83:
                    c1:01:5d:e7:ae:54:41:15:e3:65:83:03:2e:15:3d:
                    e6:61:0d:c3:c4:b9:53:b2:76:f5:cb:e1:52:e7:c1:
                    9b:a5:57:ad:2f:0e:f6:bb:2c:9f:af:d9:cd:6a:b6:
                    42:f4:8d:6a:8b:7d:91:5e:e3:aa:e8:38:0c:18:a7:
                    20:18:2b:d3:be:65:7d:2f:74:cb:76:cb:26:d1:2b:
                    3a:4b:69:ed:98:c0:f2:ba:6f:c9:86:9e:48:34:1e:
                    06:6c:f5:65:a0:dd:0c:29:ca:8e:c8:95:88:2e:75:
                    d9:9e:9d:29:57:45:1d:11:f8:b3:bd:3e:b3:b3:c4:
                    3d:85:9a:44:cb:0e:3c:e5:3f:78:6a:0c:81:0b:51:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BC:B6:7F:49:ED:2B:61:9D:EB:7E:3D:87:25:1C:47:10:38:AF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/c55bc7b2-cc17-31d5-9458-0dcb06138ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.crl

            X509v3 Authority Key Identifier:
                keyid:D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.208.0/20
                  192.231.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:0e:84:1c:11:53:d6:3b:4a:6e:bb:e4:28:d7:59:75:c7:
         6a:0f:86:ea:63:15:53:98:12:02:be:0b:e9:de:e5:82:c2:cd:
         5e:38:7e:a8:ba:dd:15:05:fd:d5:b6:33:dc:02:4f:04:5c:cc:
         84:a0:0e:1b:5d:e1:6a:56:09:2a:91:1b:3e:87:a4:0f:e7:6f:
         ce:05:71:e7:3c:b2:ee:0f:2f:ea:40:ce:b3:54:49:3c:be:09:
         b2:7a:a5:9a:81:f6:54:29:45:a1:34:76:5e:a6:d7:ec:d9:1f:
         36:a5:f7:ef:ee:28:e3:8c:f8:bf:0a:b1:29:56:2c:98:db:86:
         6f:d4:9c:d1:23:e1:04:10:2b:b9:ed:38:a3:8e:fb:52:7a:85:
         bb:03:59:73:78:55:e8:40:1a:7f:2d:a6:88:40:34:d6:1a:f2:
         0f:06:db:c0:3a:be:25:47:78:17:fb:57:58:bc:13:a2:76:72:
         cd:af:1b:03:36:2d:76:ae:a1:d8:10:71:40:57:37:4c:04:c5:
         d7:75:dc:cd:55:a9:b6:ff:2c:0b:d5:e4:88:97:f3:35:69:a9:
         08:e7:56:43:41:43:11:16:99:36:d3:1b:08:e2:1a:91:88:6a:
         fb:42:2d:4a:93:21:2c:0a:75:3e:6b:30:a2:1a:43:e5:7a:ee:
         3a:ce:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:12:16 2026 by rpki-client