Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/d14597bf-b375-35fa-a066-678f34e1f952.roa
File:                     d14597bf-b375-35fa-a066-678f34e1f952.roa (raw, json)
Hash identifier:          f2dDALOJOIa/ntMzKv/PGXaUmguvvUkKEY/pSt4OR7U=
Subject key identifier:   AF:78:04:89:73:A5:D6:BD:5B:ED:6D:FD:F5:3F:97:79:F1:9C:D9:09
Certificate issuer:       /CN=4fab6d93-73c4-48ff-add0-c3a94c2edb61
Certificate serial:       010D0C9F4328584EAFE6EB37C48C2FF2D4BBD300
Authority key identifier: 2D:94:1B:23:AD:A5:F5:E1:D8:DA:B3:1B:72:75:3B:08:F2:58:5E:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/d14597bf-b375-35fa-a066-678f34e1f952.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     60725
IP address blocks:        162.249.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/4fab6d93-73c4-48ff-add0-c3a94c2edb61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/4fab6d93-73c4-48ff-add0-c3a94c2edb61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:eb:37:c4:8c:2f:f2:d4:bb:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fab6d93-73c4-48ff-add0-c3a94c2edb61
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=b7995735-1354-4283-82c0-32401d70b250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:63:fb:c0:1e:a8:35:f6:09:6e:c5:e2:61:
                    69:76:dc:03:d7:fc:90:16:e8:df:cc:f2:12:0b:5f:
                    ca:ff:6c:c1:70:99:00:36:d3:fc:0f:de:b1:fb:a8:
                    2c:ba:bc:f1:69:88:69:10:84:2a:3a:5c:9a:69:da:
                    35:67:42:9e:07:14:2a:cc:5d:53:44:7e:2f:22:12:
                    e1:4a:49:0e:b2:4e:0a:f3:81:78:7e:a8:a7:b4:50:
                    8e:51:9a:7d:b1:5d:b0:14:aa:98:5c:e6:91:01:d4:
                    e4:02:18:4f:d4:e6:bb:6f:72:8b:cd:6d:20:1c:1d:
                    a5:99:35:55:b5:e8:47:67:e4:3d:dd:8f:1d:fb:42:
                    8e:c8:11:4c:4c:a4:07:ac:c1:e4:68:72:44:8c:77:
                    60:5d:db:f1:a3:cc:9a:56:fc:64:a0:40:87:cd:3c:
                    58:3f:3d:fa:23:dd:ea:4c:4f:c4:f8:6a:f4:97:33:
                    45:cc:80:c1:e0:bd:7b:99:e2:b8:2e:9e:00:32:a3:
                    92:cf:49:64:e8:7f:d6:40:f0:2f:fa:81:6f:c0:a2:
                    45:5d:a4:f6:91:5e:62:89:f5:ae:9e:37:5d:ae:1d:
                    49:ca:b6:80:88:5a:c5:fe:80:76:0d:f8:1c:26:19:
                    12:2d:09:1d:dd:ae:f6:18:2d:43:e8:48:1f:30:2a:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:78:04:89:73:A5:D6:BD:5B:ED:6D:FD:F5:3F:97:79:F1:9C:D9:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/d14597bf-b375-35fa-a066-678f34e1f952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61/4fab6d93-73c4-48ff-add0-c3a94c2edb61.crl

            X509v3 Authority Key Identifier:
                keyid:2D:94:1B:23:AD:A5:F5:E1:D8:DA:B3:1B:72:75:3B:08:F2:58:5E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4fab6d93-73c4-48ff-add0-c3a94c2edb61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:da:e7:1e:37:4c:b2:f4:5b:34:68:f5:83:68:31:85:78:79:
         19:14:26:f3:e1:f0:7f:5d:02:13:9f:26:01:c3:51:b9:2d:85:
         a8:06:fc:99:64:ff:13:6f:8d:f4:f3:51:60:fa:c3:57:3b:d9:
         c9:fb:66:c2:11:5f:19:61:60:42:15:b1:ec:b4:42:da:49:02:
         2d:4a:e8:48:65:1c:92:b8:21:9d:d8:d3:1e:96:cb:83:74:ba:
         c7:fc:22:cf:37:24:c5:bd:51:2f:25:ad:4c:bf:fd:2e:96:46:
         48:bb:60:59:76:8c:7d:2f:d1:ef:6a:fd:94:da:ba:68:4e:b7:
         26:53:6e:50:f4:5d:bf:dc:69:a7:e3:98:35:92:22:7b:e8:d1:
         c1:8e:ca:bb:89:19:d3:85:15:b7:7a:bd:f1:32:fb:d4:28:de:
         63:d7:bd:6f:4c:39:c5:1b:01:cd:16:52:d9:6e:e4:4b:8e:6d:
         f6:ad:06:8f:f3:b5:e5:28:2d:2d:c7:7e:5b:b3:f1:61:ff:e9:
         ba:fb:a4:ac:4d:ed:c4:36:90:3f:9a:c9:f3:36:3e:e7:7a:7f:
         0d:29:f3:f9:d3:ff:b6:f9:79:1b:74:e8:26:a8:ab:ba:b7:99:
         2a:97:9c:04:c8:c8:3a:23:c1:34:41:48:ca:a6:3a:17:db:38:
         e4:d7:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:57:08 2026 by rpki-client