Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
File:                     5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa (raw, json)
Hash identifier:          mUUQlNEesQKlbGRDJ+mMpbFILftWjfYn5i/6ojiI1d4=
Subject key identifier:   27:1F:4E:1E:0A:F3:AC:27:85:70:B4:A5:27:2A:AA:C1:64:76:39:79
Certificate issuer:       /CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Certificate serial:       010D0C9F4328584EC20C6AB11824E31668AA6180
Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     2552
IP address blocks:        128.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6a:b1:18:24:e3:16:68:aa:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=509260a2-dd79-4f05-86af-c50f563a3efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:0b:29:b5:b4:a9:81:d9:53:d9:e7:67:b2:
                    9e:b3:6d:09:02:75:9d:cf:a0:6e:ad:32:20:27:68:
                    bd:56:ab:5b:d7:73:b5:b5:35:2a:a0:0d:e4:26:ff:
                    df:68:34:d4:a5:2f:de:20:a3:bc:e1:80:83:cf:da:
                    ac:b2:81:89:a0:3d:9d:69:a6:c9:28:28:bb:02:5c:
                    f0:9e:25:b7:94:e4:f9:bb:91:2b:62:97:9c:c4:ed:
                    11:a5:15:8d:8e:b6:ac:0b:ef:ea:e4:85:c8:3c:41:
                    94:6e:10:8f:5e:83:24:5c:49:99:3e:b9:a0:94:72:
                    f2:22:9f:e2:f9:a0:ca:cd:4f:d0:e1:4b:fc:1c:c9:
                    05:9c:54:8a:9f:69:cf:23:64:14:6c:2d:fc:b3:41:
                    b4:30:76:06:2b:b9:49:3a:0f:02:68:25:e0:61:5f:
                    54:81:79:6a:69:00:e6:39:c6:b8:9f:bb:0c:af:d2:
                    4a:e4:74:6e:89:cc:9e:b8:db:8b:01:c6:c8:43:2e:
                    a4:0f:a6:45:18:9f:38:69:d3:f1:4b:63:3f:5e:21:
                    0e:f5:c2:e5:31:81:47:90:b8:39:cf:76:e4:56:c0:
                    fd:2a:d1:31:da:55:9a:28:4c:da:6b:f8:4a:0e:98:
                    22:c2:0e:f0:b1:37:b7:38:40:cd:bc:40:b5:5d:04:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:4E:1E:0A:F3:AC:27:85:70:B4:A5:27:2A:AA:C1:64:76:39:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl

            X509v3 Authority Key Identifier:
                keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:21:fd:ee:92:4d:d0:53:47:d0:31:37:2d:93:c0:3b:b7:50:
         55:6a:a6:87:37:d8:6a:0c:87:3e:c8:82:1a:8b:ba:ad:ec:36:
         d9:1d:86:46:6b:8e:55:af:fd:93:c0:f6:e9:03:06:1a:40:c8:
         5b:5c:66:4a:a9:8c:0f:31:25:c5:c3:20:24:03:14:b3:62:15:
         88:13:2c:6b:90:5e:8d:cf:42:b0:c8:5a:14:c5:2a:e4:59:5d:
         09:b5:17:db:28:dc:50:84:38:2c:03:59:98:74:d4:14:f4:88:
         0e:ea:4b:f6:9a:9b:2a:1d:2e:b7:96:1d:50:74:0e:ca:90:da:
         ee:65:db:c2:10:b7:73:a0:d6:7a:98:03:2f:19:52:c4:9b:34:
         59:38:cb:ba:48:15:c1:5a:eb:7a:6a:b6:47:de:5a:94:40:86:
         0e:a4:51:0e:b8:28:99:d6:7f:a0:09:1c:35:6d:72:2b:b5:47:
         23:68:8b:25:20:07:06:fd:bc:07:77:25:c7:6e:e8:4b:bc:21:
         17:10:73:de:60:a5:a9:cf:9f:d1:6f:35:94:31:85:c6:e0:73:
         33:89:53:df:a7:8d:a1:30:10:ad:50:f2:af:f7:1c:af:42:e5:
         78:43:cb:45:17:14:3d:73:30:b2:b7:2b:73:a9:9d:28:a4:1e:
         d2:c2:38:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:42:43 2026 by rpki-client