Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/9ef8ca43-152e-329a-9ee0-83c94b85bd66.roa
File:                     9ef8ca43-152e-329a-9ee0-83c94b85bd66.roa (raw, json)
Hash identifier:          qw84XHiIdmstKt2fZ6wwBuF0Fh9i0oFDsNoYgz+lXcs=
Subject key identifier:   D4:C6:B2:38:67:F2:BC:47:EC:3B:D8:95:9F:21:C9:CF:5A:51:3E:4B
Certificate issuer:       /CN=83a5c70f-d53f-43e4-96c3-41cf2b9c0372
Certificate serial:       010D0C9F4328584F80C02266145893A6C62F3220
Authority key identifier: 15:59:8F:32:42:B3:6E:81:53:44:F9:84:B8:AD:7C:BD:21:96:4D:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/9ef8ca43-152e-329a-9ee0-83c94b85bd66.roa
Signing time:             Wed 14 Oct 2026 20:26:03 +0000
ROA not before:           Wed 14 Oct 2026 20:26:03 +0000
ROA not after:            Tue 12 Jan 2027 21:26:03 +0000
asID:                     8103
IP address blocks:        169.157.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:c0:22:66:14:58:93:a6:c6:2f:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a5c70f-d53f-43e4-96c3-41cf2b9c0372
        Validity
            Not Before: Oct 14 20:26:03 2026 GMT
            Not After : Jan 12 21:26:03 2027 GMT
        Subject: CN=e79eab7f-cdad-4650-bd17-38eb8accb409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:7f:7f:52:de:5b:48:58:60:f3:1c:db:30:
                    25:bd:02:55:cc:fd:99:91:78:ce:1a:f9:6b:41:90:
                    08:3f:95:90:d4:12:24:91:d2:15:4a:fb:46:81:2e:
                    dc:d3:be:98:84:43:ca:e4:e8:47:d5:36:1c:9f:64:
                    f6:4a:3e:70:2d:5b:09:e1:a2:a7:24:be:15:53:1e:
                    9e:9c:84:31:98:6b:76:b1:0d:99:e8:6c:ee:2a:6e:
                    cc:18:d4:c4:e0:3b:e3:44:d1:a0:05:00:8d:32:9b:
                    90:e1:a4:7b:22:3e:a9:87:9d:6c:15:69:4c:e8:3c:
                    02:e8:76:fa:a8:d1:bb:23:d6:40:84:cc:a9:cf:22:
                    a0:eb:78:a3:86:f0:87:14:70:99:ce:bf:09:17:20:
                    9c:a3:5d:5f:66:98:4e:e3:de:2b:33:e3:ad:71:b1:
                    15:86:64:42:0e:f4:28:e8:32:26:61:fb:63:c1:49:
                    d9:6a:25:cf:01:a5:35:90:90:72:d5:09:40:b7:3f:
                    2f:64:fb:90:a8:4e:82:3a:8a:4e:7e:20:d2:e4:79:
                    34:73:32:6e:c5:a2:42:bc:a1:af:bd:0f:84:d1:d5:
                    11:ba:3d:fb:49:4a:c3:54:06:25:96:19:4c:75:19:
                    12:0e:6c:ec:bd:03:aa:1b:75:f0:6d:b2:92:04:4c:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:B2:38:67:F2:BC:47:EC:3B:D8:95:9F:21:C9:CF:5A:51:3E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/9ef8ca43-152e-329a-9ee0-83c94b85bd66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.crl

            X509v3 Authority Key Identifier:
                keyid:15:59:8F:32:42:B3:6E:81:53:44:F9:84:B8:AD:7C:BD:21:96:4D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ca:3f:9f:d4:51:31:d0:00:99:c7:b7:9e:cc:78:3c:bf:13:
         82:2f:7a:67:c1:b7:a4:eb:14:33:21:8f:f6:6c:64:85:e9:9a:
         6e:19:ff:36:3a:88:84:30:21:28:da:08:60:e0:0b:8b:9c:7f:
         c7:a6:32:64:b6:03:ef:3f:ea:6e:e9:bf:75:4f:c0:65:6c:0d:
         10:bd:a4:25:a8:de:e5:c9:80:ed:39:e1:71:10:66:b3:73:4f:
         80:9e:8a:35:c9:6d:83:32:53:8a:70:bb:5e:6e:9e:bb:54:79:
         e3:af:9e:97:27:7d:6b:07:4e:87:b1:c5:ee:62:70:b9:25:10:
         24:25:fb:83:94:d6:cd:ef:bb:2b:5b:00:fc:11:ab:36:3c:10:
         c4:f2:65:ed:f0:09:aa:28:6f:b1:40:70:b1:36:28:47:e0:15:
         25:f7:72:c0:39:24:87:ff:4f:93:62:bb:5b:dd:38:6a:ad:cb:
         8c:4f:a8:92:a3:43:7b:f8:a1:4a:61:14:85:cf:41:70:ef:0d:
         d2:f2:3b:55:ed:77:e4:6b:5e:4f:dc:9d:d3:97:76:b5:6e:f0:
         de:3d:66:be:f3:55:1d:3d:59:d6:d7:c4:9e:48:f7:66:42:78:
         40:aa:51:3f:79:20:7e:18:ab:93:47:00:f8:23:f3:02:af:6c:
         f2:ca:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:09:35 2026 by rpki-client