Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/a97ed7cf-efcb-3a3d-aed2-98d519f495ce.roa
File:                     a97ed7cf-efcb-3a3d-aed2-98d519f495ce.roa (raw, json)
Hash identifier:          zPxhhbJljmaCcHsDgq3jsVHfofjJsLVnFw5aFFphVrc=
Subject key identifier:   D3:A1:9C:56:5D:F4:F9:91:7A:2F:E5:9D:76:FE:F9:CC:3B:20:1C:19
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584F96387CF07845EFF3BF2AF400
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/a97ed7cf-efcb-3a3d-aed2-98d519f495ce.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     136501
IP address blocks:        216.38.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:7c:f0:78:45:ef:f3:bf:2a:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=ae517f7e-16f8-4f1b-b484-ce6d26519ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:e2:02:e1:40:f3:ef:d7:98:29:27:0f:26:
                    eb:14:95:7a:9d:6a:09:d4:78:f7:fa:a3:41:a8:dc:
                    ec:3d:53:84:0c:fa:bf:5b:c3:ac:7d:c2:56:c3:d6:
                    84:47:ae:60:fb:a1:88:14:02:7a:c5:9f:77:c8:2f:
                    02:8e:42:de:6a:69:40:c4:92:ba:a5:48:5a:b1:9b:
                    fd:26:e3:13:7f:4d:73:70:1e:3d:c3:58:64:7e:c1:
                    5c:e6:f1:4d:0f:f0:5e:09:d2:2d:7e:df:2e:86:dd:
                    c2:63:65:d6:8b:bc:7e:58:55:37:e8:c3:21:8d:18:
                    3e:34:47:a8:c5:44:3f:1a:e6:c2:34:ae:28:f4:81:
                    9d:4f:c3:6f:96:58:c5:41:54:82:25:97:ab:e3:da:
                    ef:1d:24:74:b9:70:47:9f:33:0e:25:14:a9:0e:78:
                    07:20:5c:46:5c:7a:80:79:50:86:5b:58:82:35:9e:
                    aa:8e:e4:8f:1e:ec:29:f6:ca:c2:af:b5:26:00:d9:
                    cb:ef:9f:2d:5b:33:28:f8:4f:9c:ad:22:b8:6f:41:
                    d4:0a:99:ad:d8:96:0b:5f:6b:ec:d1:1e:a0:22:b4:
                    36:c6:42:1c:44:93:7b:d0:b5:fd:04:0b:51:8c:61:
                    7a:d1:18:87:ff:54:ab:d0:df:9c:71:0c:20:e3:84:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A1:9C:56:5D:F4:F9:91:7A:2F:E5:9D:76:FE:F9:CC:3B:20:1C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/a97ed7cf-efcb-3a3d-aed2-98d519f495ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:28:8f:c8:59:55:1c:a6:44:a3:97:78:10:49:9f:87:11:6d:
         12:b4:74:e0:db:92:b0:54:3b:ec:de:5b:3c:79:21:7c:85:26:
         ed:1d:86:4e:12:44:9e:48:58:1d:1f:da:3f:6f:c3:51:77:08:
         48:70:33:cc:89:04:4f:89:8e:8d:0f:1b:c7:22:94:02:82:94:
         54:f1:ca:55:6a:3c:a0:6d:12:70:c6:dc:69:46:42:b1:fe:5b:
         0f:57:d6:90:03:4b:13:c8:28:f3:23:40:b4:ac:d3:2a:95:0d:
         05:1f:20:d9:4f:35:89:9d:c9:84:de:c0:c6:c4:25:20:03:e9:
         f1:9a:de:49:03:9f:be:33:0a:7d:2a:16:81:66:09:1d:d7:55:
         84:55:bd:eb:d9:b2:ea:7a:22:27:e8:95:94:83:63:8d:58:b1:
         6a:b3:ee:79:34:1c:18:d4:8b:b9:f3:f1:c0:e6:94:18:11:a5:
         35:de:6a:ea:f7:78:f7:aa:5f:25:1f:9b:18:c0:03:74:1f:cd:
         6e:9f:a0:90:23:56:0e:de:18:76:34:5a:9d:e1:36:34:b5:82:
         6d:07:2e:e9:fe:4d:e5:08:b1:28:c6:37:0f:8a:44:22:57:3a:
         6e:34:4f:dd:0e:8a:e0:ee:74:a8:1d:3d:89:20:a2:d0:cb:5f:
         35:e2:0e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:31:59 2026 by rpki-client