Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/96fb5810-7631-30b3-a30f-aa96ab0241c2.roa
File:                     96fb5810-7631-30b3-a30f-aa96ab0241c2.roa (raw, json)
Hash identifier:          34mBvzq4IxQNQbIa7G/ixBavg/2KjbKkOYG59rEjri0=
Subject key identifier:   0E:9C:7D:58:82:99:DD:C9:BD:4E:FB:CB:2E:41:33:63:EC:1B:29:80
Certificate issuer:       /CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608
Certificate serial:       010D0C9F4328584F318446FCD042AD805981E100
Authority key identifier: 9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/96fb5810-7631-30b3-a30f-aa96ab0241c2.roa
Signing time:             Wed 16 Sep 2026 11:16:35 +0000
ROA not before:           Wed 16 Sep 2026 11:16:35 +0000
ROA not after:            Tue 15 Dec 2026 12:16:35 +0000
asID:                     4546
IP address blocks:        162.52.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:84:46:fc:d0:42:ad:80:59:81:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608
        Validity
            Not Before: Sep 16 11:16:35 2026 GMT
            Not After : Dec 15 12:16:35 2026 GMT
        Subject: CN=cb454577-589e-4d87-b47d-fec29791b253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:db:6a:57:2f:f9:b9:10:40:f0:6e:3a:10:
                    ca:0b:86:3d:9d:01:59:b6:c3:52:28:6d:16:76:0f:
                    5f:cb:fa:3b:9c:59:d1:24:57:0b:65:d9:42:dd:06:
                    a3:74:e9:cf:d9:66:9a:fb:eb:fb:96:d6:db:4d:19:
                    3c:75:67:9d:ba:21:9a:7c:32:f8:53:66:21:af:ef:
                    b4:3a:dd:1b:b1:82:7b:a6:83:62:80:5a:a3:f7:1e:
                    46:36:a1:33:e5:cc:da:1f:f4:73:6c:93:4f:e0:12:
                    7d:b3:92:57:0f:2a:7b:0a:7f:7e:71:e0:91:5e:ba:
                    9e:d3:a2:28:82:88:af:cb:2d:88:fc:4a:dd:b3:83:
                    c8:4b:cc:b8:ae:4f:ce:a2:c2:51:40:57:35:64:bd:
                    0a:8d:27:53:72:a0:61:0a:9f:34:43:1e:98:35:81:
                    60:99:90:68:04:c2:5b:fa:3b:bc:11:a1:8b:93:7e:
                    f0:29:ee:9f:0c:29:db:24:24:d8:de:56:26:45:41:
                    1b:23:c3:5d:df:80:ad:d0:c2:2b:c7:b0:95:4c:6c:
                    0a:4a:29:b9:41:39:1d:c6:06:15:7c:d5:40:8c:6b:
                    53:bc:7a:4d:78:43:7f:46:4f:46:47:1c:48:bb:09:
                    cb:28:d1:55:34:6f:f2:77:9d:eb:7a:d0:1e:64:03:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:7D:58:82:99:DD:C9:BD:4E:FB:CB:2E:41:33:63:EC:1B:29:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/96fb5810-7631-30b3-a30f-aa96ab0241c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl

            X509v3 Authority Key Identifier:
                keyid:9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.52.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:63:18:ad:95:62:6a:a8:c8:2a:b6:75:06:25:60:c3:58:
         2c:0f:14:94:ea:b7:e7:87:79:ba:2f:bf:5f:40:f1:e2:61:66:
         0a:d0:b1:a8:58:12:f0:3f:77:ea:63:d8:67:a4:69:64:01:20:
         ed:1a:5c:8c:01:95:37:87:35:9e:7d:d8:69:bd:d7:76:61:97:
         1e:95:27:8e:6d:d1:8f:aa:0d:a2:22:56:17:5d:c6:ea:f5:f5:
         51:a8:54:09:b5:f8:9c:15:e4:93:9c:4d:e8:d3:eb:0f:6e:b4:
         c0:27:8d:79:c0:83:f1:1c:e9:f5:45:23:7d:b6:ee:f7:37:f7:
         37:48:fb:36:45:b5:02:f2:17:a1:15:96:9d:56:ec:39:86:bf:
         0c:a7:b0:d0:5f:7f:c9:7f:f9:c6:4f:8c:c0:a1:88:f1:a7:c0:
         1f:60:e8:91:d9:5d:89:65:37:86:c5:ea:0c:e0:2f:e5:31:c4:
         a9:05:8f:81:66:6f:6c:bd:37:ff:19:c5:5c:0a:24:64:b6:ab:
         eb:66:33:d8:af:a5:a5:a5:ea:83:96:78:ab:6c:d7:8e:ca:19:
         29:41:8f:f6:2a:98:03:d0:f0:68:21:8e:26:f8:cd:05:c4:de:
         4e:12:d9:ef:d7:cd:03:9c:ba:6e:cc:ee:aa:22:00:5c:10:b0:
         9b:a7:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:03:57 2026 by rpki-client