Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
File:                     2ca4807f-f8f6-3640-8ef3-356b0a165378.roa (raw, json)
Hash identifier:          k+3PQQyVbReiEhT9FGVI/eNsUCjC3VR2zKtiK5ouGDo=
Subject key identifier:   CA:51:2B:B5:83:E6:1F:C3:17:FE:4E:27:7F:28:73:55:4E:CB:CF:DA
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584EE7BC9B21BE259007FE9B1480
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.198.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9b:21:be:25:90:07:fe:9b:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=d6aecddd-e934-4d2e-acef-ccbeeed3e08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:d0:4b:c1:da:5b:1d:c5:cc:c1:bc:c1:bf:
                    13:7a:07:77:1e:4a:8e:da:32:38:63:d2:59:bd:88:
                    6c:1b:66:2f:72:81:1c:5f:f3:32:66:5d:c9:4c:53:
                    6f:51:2a:e6:15:78:3f:cc:23:74:e3:7b:ed:f4:f8:
                    0e:1d:07:f3:c5:d0:48:e0:d4:5b:1a:35:bb:5d:50:
                    38:b0:df:e8:f9:37:0e:69:b2:d5:78:10:ff:1d:ed:
                    de:e5:b0:d4:61:d4:2d:43:02:51:4d:b3:5d:fc:51:
                    ad:2c:39:8b:ba:c3:20:88:62:27:f0:e8:22:fe:0a:
                    9c:1e:d4:bf:fc:59:03:b6:0c:3e:4d:78:84:5a:c9:
                    f0:a5:59:38:71:10:b4:c4:d6:df:5b:58:2d:e5:9c:
                    8a:44:52:1c:9a:86:f8:5c:f7:53:c5:08:ed:ae:9e:
                    8c:19:e3:ef:c9:41:37:76:59:c9:b1:72:e7:24:7a:
                    59:7d:22:52:ad:8b:42:97:a3:1f:dc:f2:e4:0d:c4:
                    0c:29:bf:97:98:0b:c6:42:b6:46:be:1e:63:6b:32:
                    97:62:19:33:c6:ad:88:14:55:22:2e:9a:d3:27:45:
                    86:a0:92:1c:30:35:37:0d:60:5d:aa:2b:17:74:aa:
                    e0:33:71:c5:f4:73:ba:a9:51:e6:23:11:93:1e:61:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:51:2B:B5:83:E6:1F:C3:17:FE:4E:27:7F:28:73:55:4E:CB:CF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:78:e4:b6:65:ed:c3:70:2b:bc:66:1f:fa:2d:93:ee:7c:
         e7:2b:36:09:1e:2d:fe:48:df:48:77:1b:26:f1:aa:f7:b3:a3:
         53:2c:21:85:e3:e6:d6:e1:b7:35:04:93:96:85:62:dc:d7:a4:
         da:c2:b0:c9:12:7f:2c:8d:9b:ff:a3:49:71:b6:b5:fe:a9:30:
         5c:6f:b8:db:c8:15:5a:9a:c6:6a:98:44:2d:44:2e:9b:64:38:
         b2:ca:77:83:de:f6:d4:cd:04:02:65:43:65:7b:f2:d8:4b:87:
         84:52:f1:f8:95:60:5c:30:78:6c:c9:62:d8:a5:d4:ce:ff:5d:
         2b:a6:f7:48:2a:d8:83:e2:07:48:75:f8:6c:4a:9c:c4:90:95:
         51:d6:87:7b:17:00:66:d5:ee:3c:bb:74:c6:34:69:fd:e0:92:
         a6:29:bd:14:d8:53:e0:3e:6a:f8:6a:70:3d:01:9d:ec:54:6c:
         27:f2:9b:dd:f5:40:d9:29:d7:3a:57:0c:c9:a5:2d:08:7a:24:
         92:df:1f:e5:7e:12:3e:df:f5:7c:71:d0:92:84:5a:9c:ef:88:
         98:b4:2c:9e:e4:db:d1:94:73:c7:a9:ef:4c:8f:59:52:b5:63:
         3a:63:52:7c:de:be:5b:79:63:ed:f6:eb:74:ec:ea:f4:2a:18:
         04:d4:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:02:34 2026 by rpki-client