Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c594b4da-1879-3901-b6a8-940d616a4090.roa
File:                     c594b4da-1879-3901-b6a8-940d616a4090.roa (raw, json)
Hash identifier:          cowp8sBKji8LhrqqdCuopVi6qxrC6+zflzpWT65xTQo=
Subject key identifier:   F1:C9:66:69:6A:4C:53:CE:0A:64:C0:C4:98:EE:BA:F7:5F:C9:88:FC
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF749B52213B0533A7DE2C8
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c594b4da-1879-3901-b6a8-940d616a4090.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        170.85.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:49:b5:22:13:b0:53:3a:7d:e2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=5f534064-f82c-4421-89df-418857e698c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:8d:28:d1:cc:20:1a:ae:50:5e:73:63:d7:
                    b9:2c:4b:00:be:fd:f5:b2:76:0c:f4:cd:5c:90:1c:
                    7f:1d:42:b8:09:94:6f:1a:76:0e:97:69:b7:1c:17:
                    28:f7:24:ce:81:86:2d:42:05:ca:7c:28:cd:5d:d5:
                    c4:f6:7f:43:37:23:df:18:cb:dd:e9:31:2f:3d:24:
                    51:2f:e6:81:bb:90:bc:0c:71:9d:2c:52:74:59:e1:
                    3a:dd:3c:c9:d1:6a:56:8c:84:4a:fb:f3:8f:c3:ce:
                    aa:96:43:e1:69:44:84:3d:7e:ba:cc:77:be:a5:da:
                    61:89:9d:b2:a6:d9:30:b6:84:11:8f:f4:5d:e2:b1:
                    7a:1f:29:e5:3f:39:7d:a8:8d:9b:83:59:b3:6e:8d:
                    02:97:c7:54:06:4d:c3:4a:73:fb:9f:c4:41:5e:e8:
                    00:b3:2c:c6:da:4a:da:27:a4:f5:a1:49:1f:02:ee:
                    e1:e7:f2:f5:6c:75:be:bd:b8:13:e0:d3:97:ff:6b:
                    1e:e4:5f:d9:1e:96:e7:e9:a0:ef:a7:72:2c:46:72:
                    55:1b:b7:6b:d4:d5:4e:cd:ca:06:95:cc:02:8c:91:
                    5c:2d:14:6b:00:33:a9:a3:36:a3:2b:8d:65:6d:c4:
                    2d:48:7b:14:2a:57:46:c8:9f:c5:72:65:13:32:75:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C9:66:69:6A:4C:53:CE:0A:64:C0:C4:98:EE:BA:F7:5F:C9:88:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c594b4da-1879-3901-b6a8-940d616a4090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:28:3e:d2:af:d8:6f:d1:9a:ad:bb:70:50:d0:2d:64:72:ff:
         41:65:63:c3:8e:d2:8a:e0:70:3f:b5:c1:6a:5c:d9:44:dc:78:
         d8:2f:59:45:2a:64:fd:7e:73:2b:32:15:e1:4d:bc:e2:bb:0c:
         0a:04:f5:36:ca:24:32:02:87:5c:a8:c6:88:06:17:2d:43:26:
         a4:b0:e1:44:74:d5:b1:85:c5:0a:d9:f2:ee:92:e7:a1:21:ef:
         2a:cb:5a:c6:b2:70:75:28:4a:92:9c:3a:c2:33:9e:dd:4f:d8:
         1e:4a:53:aa:82:10:47:88:97:06:2e:5c:a8:37:22:10:90:14:
         0f:19:36:21:e2:7c:f5:a6:e8:a0:2f:c8:1c:13:9c:06:cb:f6:
         53:9b:8a:76:34:69:42:f6:22:d5:55:5a:3c:de:11:45:ca:7b:
         fc:a6:5c:01:e5:00:6b:bc:18:e7:38:42:87:51:03:a5:78:e1:
         12:76:4a:f0:0f:91:8b:80:5a:bb:e2:11:50:4a:81:a4:cc:ba:
         f8:37:95:2d:7f:18:82:9d:4a:23:0e:fb:64:4c:ce:52:3e:84:
         a8:7e:e2:9d:d0:85:61:9e:64:1c:e3:a9:a3:aa:05:9e:9f:84:
         0f:a4:7f:40:71:83:99:d6:43:6b:1a:74:98:9f:cc:71:17:23:
         76:db:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:03:46 2026 by rpki-client