Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2/c2d20cbf-8035-3a9c-87d4-ca700cf4ea61.roa
File:                     c2d20cbf-8035-3a9c-87d4-ca700cf4ea61.roa (raw, json)
Hash identifier:          yZExX3zDGkBeowKYbkJuETwab2Apc5W5aH2Vm9cweOs=
Subject key identifier:   49:18:7E:CB:27:50:25:B8:3F:38:5E:F0:A1:B0:04:88:21:EC:13:79
Certificate issuer:       /CN=01c4fba6-5be4-4745-98da-7e5289f2b5e2
Certificate serial:       010D0C9F4328584F7352DD7B884F582D49BB2600
Authority key identifier: 85:A3:D1:29:0A:0C:95:64:27:D2:EB:80:EC:E4:3A:1B:22:2F:B2:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2/c2d20cbf-8035-3a9c-87d4-ca700cf4ea61.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     11314
IP address blocks:        162.213.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2/01c4fba6-5be4-4745-98da-7e5289f2b5e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2/01c4fba6-5be4-4745-98da-7e5289f2b5e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:dd:7b:88:4f:58:2d:49:bb:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c4fba6-5be4-4745-98da-7e5289f2b5e2
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=7bf4c421-e698-4519-af8a-c833b9c94df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:0d:17:06:1e:cb:8e:f9:e9:55:e8:a7:0d:
                    d1:4e:e7:77:79:8c:1b:59:a4:cc:d1:91:06:99:fa:
                    e0:e8:78:e1:2c:66:7b:84:dc:c8:75:a6:43:f1:46:
                    02:b0:a1:e1:22:fe:4f:1a:ef:a6:53:2c:ce:f0:a5:
                    9e:0b:6f:96:aa:1b:93:26:81:fe:d4:42:39:85:24:
                    1b:54:82:ff:52:f9:ec:72:c6:41:11:96:a9:de:38:
                    e1:a5:c5:df:f2:f0:cc:61:a3:91:02:4b:25:e9:b2:
                    dc:1a:19:92:69:e7:0f:c2:1f:b6:a9:75:63:be:fe:
                    43:a6:0a:47:35:52:f2:a0:be:64:7a:ad:26:6c:81:
                    d8:e4:19:83:87:4a:77:8b:e9:21:07:86:8a:d5:e7:
                    46:f5:ae:c4:2e:53:71:4e:d4:f9:94:82:24:f1:e5:
                    12:52:4e:e4:14:e8:81:2f:a5:0c:31:59:63:0e:96:
                    08:9e:52:cc:f2:07:71:fd:86:5a:2b:7c:04:39:e8:
                    c9:5a:91:02:5a:07:bb:b5:0c:ac:cd:d6:e3:e4:48:
                    ea:21:c4:c3:09:0e:18:89:dd:71:fb:9e:8d:b6:a1:
                    98:3c:2e:8c:24:6d:2d:7c:b4:dc:33:2c:bb:66:8f:
                    03:f1:2b:59:1c:b7:c1:65:7a:63:97:e1:3d:d7:95:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:18:7E:CB:27:50:25:B8:3F:38:5E:F0:A1:B0:04:88:21:EC:13:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2/c2d20cbf-8035-3a9c-87d4-ca700cf4ea61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2/01c4fba6-5be4-4745-98da-7e5289f2b5e2.crl

            X509v3 Authority Key Identifier:
                keyid:85:A3:D1:29:0A:0C:95:64:27:D2:EB:80:EC:E4:3A:1B:22:2F:B2:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/01c4fba6-5be4-4745-98da-7e5289f2b5e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:ca:af:84:0d:30:6d:fa:3d:29:86:e8:5a:a5:08:2a:ea:
         d9:5b:39:c8:90:7c:da:34:c0:b5:b7:68:79:b1:4a:d7:1f:48:
         dd:44:e2:5d:3e:4e:72:f1:a1:e8:43:b8:fb:7c:cc:cc:f3:ff:
         38:80:56:85:6e:d4:d6:57:1e:eb:68:e7:bb:72:ec:2c:1e:3c:
         ba:bf:2c:95:91:b4:ae:62:aa:d8:b9:7f:ab:e2:c1:aa:fc:b3:
         74:8b:54:ec:99:a4:62:72:f4:f8:ee:e8:b1:39:24:37:3b:86:
         76:d0:48:81:36:e2:99:54:90:25:72:c5:6b:40:2f:0c:b3:b5:
         dd:54:8f:28:d8:c2:92:85:d6:54:86:3c:39:d0:0d:af:3f:eb:
         29:7a:54:84:c7:6c:ac:24:18:57:0c:10:bb:98:bc:61:8b:0f:
         40:1b:d6:80:34:f5:5e:b7:1c:14:ad:42:4e:1f:72:53:ae:0f:
         3b:b2:e2:36:44:bd:c0:b2:8f:2b:86:7f:9f:cb:7c:df:49:54:
         00:ad:a0:89:a7:38:2a:28:20:94:fc:96:d8:17:01:13:10:3d:
         41:70:c6:ee:43:3d:6f:3a:52:dd:c7:6d:4e:1e:a7:2d:2a:5c:
         47:bd:6c:c0:26:a9:b8:ca:86:e1:5f:a2:4d:2d:18:53:5c:72:
         16:60:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:24:50 2026 by rpki-client