Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/db031425-9d96-3a68-9673-7d7d3e54edcd.roa
File:                     db031425-9d96-3a68-9673-7d7d3e54edcd.roa (raw, json)
Hash identifier:          DQklOf6mcPKYKxIX0nWZcr2AkQN54Mi9f42i1NuBFsg=
Subject key identifier:   96:D7:3E:57:0F:8C:C8:72:65:63:A1:A1:62:87:80:A5:5C:C4:E0:47
Certificate issuer:       /CN=a2accc41-8d57-4ddb-9f27-d50fabfdaeeb
Certificate serial:       010D0C9F4328584B4BAC5BC34D2652E9F9F73500
Authority key identifier: E4:58:71:45:ED:A0:07:E2:0B:58:86:3D:15:71:B2:F4:92:F8:AB:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/db031425-9d96-3a68-9673-7d7d3e54edcd.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     16553
IP address blocks:        199.26.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5b:c3:4d:26:52:e9:f9:f7:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2accc41-8d57-4ddb-9f27-d50fabfdaeeb
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=97eb61ee-cd89-4ffa-9f7e-96413bb033ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e6:5b:66:6f:3c:67:22:4e:43:6b:4a:62:91:
                    9c:8a:87:de:09:cb:21:3e:05:8f:b6:ac:b0:46:21:
                    f0:81:48:fa:93:32:65:2c:f5:05:6e:77:a7:2f:f5:
                    46:e6:ce:13:90:5e:80:eb:90:79:57:d9:5c:80:5b:
                    1c:45:c7:47:67:2d:08:f6:86:71:bc:4b:9d:fa:7f:
                    8e:0d:d1:bc:0e:45:48:9f:ba:de:1c:df:1a:2d:95:
                    2a:68:b6:a0:b5:f3:69:1f:ac:03:b3:c1:54:55:3d:
                    24:e7:c5:27:da:30:d4:61:89:0b:20:e6:02:9e:cf:
                    82:4d:bf:71:82:9b:80:b9:28:8c:1b:88:c8:0f:68:
                    91:72:06:c4:4b:34:28:77:8a:2f:79:98:f1:87:d3:
                    f5:b3:50:c2:c5:b8:0d:ea:0f:76:4f:29:2f:40:42:
                    57:06:85:cd:47:17:d6:b7:0b:72:f4:69:f6:45:b1:
                    09:f4:83:2f:b9:54:e8:f8:7a:69:25:cc:2a:b0:00:
                    1d:21:f3:f3:3d:cb:c1:ab:6a:35:3f:be:a1:57:ea:
                    16:91:89:43:39:a9:57:eb:03:5a:8a:d0:20:4f:5f:
                    5a:45:45:7f:67:c0:dd:15:06:4d:6a:5e:53:8b:1f:
                    5b:4a:36:91:5d:9e:76:0a:61:a8:f4:fb:c5:f5:be:
                    42:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:3E:57:0F:8C:C8:72:65:63:A1:A1:62:87:80:A5:5C:C4:E0:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/db031425-9d96-3a68-9673-7d7d3e54edcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.crl

            X509v3 Authority Key Identifier:
                keyid:E4:58:71:45:ED:A0:07:E2:0B:58:86:3D:15:71:B2:F4:92:F8:AB:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2accc41-8d57-4ddb-9f27-d50fabfdaeeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.26.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:2e:0e:05:a6:8c:35:fa:24:2b:b6:1b:75:d2:3c:0e:d4:
         08:84:f1:6a:3b:28:b4:d9:22:74:04:f8:98:fc:01:8c:e1:84:
         26:80:e0:fa:3d:9e:80:00:31:20:f8:b5:50:8a:15:a0:ad:40:
         1a:bf:c1:06:1a:0d:f7:13:c9:61:45:85:84:e7:e0:5a:41:e0:
         7d:bc:54:0c:91:b0:e2:29:38:1f:a3:68:10:df:52:5b:e0:29:
         c8:13:28:35:3c:6e:98:f6:7d:81:35:bf:62:0f:e7:0c:a3:2c:
         83:cd:fa:03:84:3b:67:b6:0e:ea:5b:e1:60:22:1d:48:28:9c:
         25:54:30:f7:27:0e:ef:2a:74:15:09:b3:2e:2d:86:85:c3:17:
         7e:b0:43:b7:11:4e:22:d2:e8:60:d4:ed:bd:d3:df:9e:41:df:
         50:55:86:f0:d6:58:fa:94:2b:3d:6a:a2:c2:e7:f4:78:0a:ee:
         79:85:8d:da:14:b8:d5:63:68:88:80:6c:a5:5b:ae:21:7b:8c:
         38:2a:45:9b:fe:04:18:a7:c7:e2:b1:a5:ff:31:aa:29:15:3c:
         26:b0:b9:8c:b7:47:6a:c6:d4:27:bb:98:e7:7e:80:f4:50:a0:
         51:cc:2e:d6:92:8f:6f:69:a2:bd:f8:e7:c6:0c:21:01:2e:76:
         94:99:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:47 2025 by rpki-client