Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5830bc57-b894-3fd4-9ae7-6345bb3026b2.roa
File:                     5830bc57-b894-3fd4-9ae7-6345bb3026b2.roa (raw, json)
Hash identifier:          OM75NAAWcVThPen3zAk7zkCVdxMxcy29Kx9oqXz+gPo=
Subject key identifier:   93:CE:47:C5:C6:E7:56:B9:45:64:FF:5B:6F:13:29:9E:1D:D6:5A:C8
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584FA85DE358EB9A2B53240BEA00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5830bc57-b894-3fd4-9ae7-6345bb3026b2.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     210873
IP address blocks:        16.10.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5d:e3:58:eb:9a:2b:53:24:0b:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=83fc2fb8-265e-4b4d-b60e-22aa3739ad90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:f9:31:66:ac:f6:7a:75:26:47:9d:86:06:
                    2b:4f:ce:38:35:f2:cb:e4:28:37:f3:98:58:65:23:
                    0f:22:41:31:45:03:25:e7:f4:97:28:32:2e:1b:15:
                    71:9f:6c:eb:ef:7f:8b:eb:7c:69:4d:10:18:73:71:
                    4d:e3:7e:03:91:a4:7e:5d:3e:0b:2b:b5:a6:f2:9c:
                    84:84:0e:d3:4e:df:68:38:f3:b9:eb:f4:4b:1a:0a:
                    e3:c4:ec:fe:07:01:6c:40:ca:0c:b6:a8:0c:1a:cc:
                    d4:46:cf:ec:97:71:d0:1d:bd:cc:e6:ab:43:50:fd:
                    b5:db:4f:99:90:59:18:e2:31:59:77:77:88:f7:b9:
                    65:e4:df:24:97:86:6a:28:23:d7:ff:83:d2:fa:80:
                    7a:db:23:de:57:6f:cd:23:71:0c:b3:ec:f7:14:c8:
                    ec:b2:26:b1:f6:c6:3b:4d:d0:58:e0:1c:99:2c:0b:
                    fa:65:76:95:66:17:29:29:f6:06:92:c1:ec:30:91:
                    61:ad:7e:67:a0:46:a3:78:0b:00:a4:2d:b4:30:c6:
                    04:8d:27:2c:ad:59:08:bf:cb:67:1a:c8:bd:3d:a8:
                    28:87:8d:9b:11:e9:52:3e:dd:be:20:09:da:3f:32:
                    86:33:71:b8:51:4e:92:7a:91:6b:0a:5c:5a:bf:f3:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CE:47:C5:C6:E7:56:B9:45:64:FF:5B:6F:13:29:9E:1D:D6:5A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5830bc57-b894-3fd4-9ae7-6345bb3026b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.10.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:65:a9:20:e1:aa:a9:cf:eb:72:06:37:53:91:d3:4e:e0:1f:
         c0:60:13:ea:54:3a:ae:58:59:ec:e5:38:fd:70:68:55:e2:78:
         6f:4a:62:ce:1b:fe:1c:90:72:59:7c:6f:90:d2:13:65:81:42:
         8b:8d:61:c2:a7:8b:64:bf:63:26:f9:39:1b:b4:a0:49:e7:f4:
         30:92:70:f0:18:9b:6a:a0:84:df:7f:03:65:ff:13:ca:94:08:
         37:4c:dd:78:5e:ab:ed:87:7f:1e:89:84:ae:02:81:a3:19:d5:
         b4:ba:9f:1b:ee:40:b0:d7:3e:fa:52:d2:e8:93:9e:fb:f5:e6:
         f1:fe:bd:3c:64:27:5b:c0:1b:e4:f1:20:48:60:2c:a8:f0:d3:
         ac:f3:5c:c4:9a:95:4d:1a:f4:d2:e8:39:8b:67:73:4d:ef:34:
         b3:72:26:d2:ed:1e:e4:b1:a4:c7:ab:66:75:00:7a:5f:7d:63:
         ea:88:fc:e4:3f:45:e2:75:95:fc:c6:a3:9b:4e:ed:74:de:c9:
         c1:ec:60:64:c4:21:7c:7a:83:89:72:a8:44:8c:50:c1:73:2b:
         11:36:b9:e2:9b:27:26:c8:a9:e2:37:19:01:5e:68:17:f1:ae:
         3b:5f:61:f2:d0:93:b4:68:60:a5:23:2b:32:70:87:d3:f5:cd:
         83:4d:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 11:33:47 2026 by rpki-client