Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/58b1318e-1949-3b5d-83b2-28f112026ecc.roa
File:                     58b1318e-1949-3b5d-83b2-28f112026ecc.roa (raw, json)
Hash identifier:          rpHI313Iu/YA6IpdyiRjE5bP0Q/P08PRXjrD7yy9+7I=
Subject key identifier:   28:6F:F6:C8:5E:5B:39:84:DB:53:E4:29:66:3B:33:B9:59:6F:96:2D
Certificate issuer:       /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial:       010D0C9F4328584EC0ECFB3E54ACC019C39DFD80
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/58b1318e-1949-3b5d-83b2-28f112026ecc.roa
Signing time:             Fri 07 Aug 2026 03:21:12 +0000
ROA not before:           Fri 07 Aug 2026 03:21:12 +0000
ROA not after:            Thu 05 Nov 2026 04:21:12 +0000
asID:                     12083
IP address blocks:        167.253.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:ec:fb:3e:54:ac:c0:19:c3:9d:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
        Validity
            Not Before: Aug  7 03:21:12 2026 GMT
            Not After : Nov  5 04:21:12 2026 GMT
        Subject: CN=404aa2fc-587d-47e7-b483-09bd7eb71ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:7c:b2:4f:eb:8b:8d:e3:c3:16:52:ce:4c:
                    3e:68:1f:78:9b:3e:fc:49:74:28:74:44:37:67:56:
                    98:cb:b6:3c:aa:39:c9:09:76:a3:05:5c:28:cd:e7:
                    89:3b:95:18:0d:58:bf:94:fa:5b:68:14:1f:86:93:
                    e1:8b:a5:18:a2:fd:c6:cd:ae:e5:05:c2:2d:65:70:
                    34:b3:ab:f8:a9:50:10:65:81:9e:40:2f:cc:de:3d:
                    6b:ac:c8:01:15:73:87:53:93:17:4b:cf:79:7d:24:
                    49:1c:2a:d6:2a:d0:f8:6e:d9:9e:bf:4a:8b:b8:b2:
                    4f:f4:88:a4:64:40:cb:d8:96:f9:f0:0b:50:d4:bc:
                    4b:9f:fa:61:a5:17:68:35:55:4a:83:a8:9b:d3:0b:
                    5e:7c:34:f7:83:38:df:34:52:52:6f:fd:4e:7f:c9:
                    16:7e:bb:7c:2a:7b:61:1b:4d:de:96:32:f6:a3:d9:
                    db:08:18:ac:39:ac:75:5f:ab:0b:68:25:b7:f1:85:
                    7f:2d:b0:75:80:42:d0:19:db:c0:01:54:52:70:3e:
                    94:dd:ce:83:fb:7a:86:53:b7:51:4d:c5:b4:eb:81:
                    96:a5:aa:0a:ab:97:9d:34:94:ba:01:15:05:ee:9e:
                    ee:22:4f:d8:47:ad:75:d2:5f:41:fb:ce:c4:5b:00:
                    dd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6F:F6:C8:5E:5B:39:84:DB:53:E4:29:66:3B:33:B9:59:6F:96:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/58b1318e-1949-3b5d-83b2-28f112026ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl

            X509v3 Authority Key Identifier:
                keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:c9:6a:06:63:20:22:f0:c1:b8:64:50:03:5a:41:21:68:
         2a:35:a1:1b:3b:c9:d3:ae:ac:2b:c3:bc:47:30:62:0e:80:80:
         04:78:9c:9c:60:77:2d:c2:bb:e4:29:a0:5d:43:9b:f0:ef:ae:
         02:c5:55:98:a2:b4:08:e3:d2:a1:4e:9f:84:5f:b5:73:ce:80:
         66:25:84:1e:4e:9d:ee:d2:1f:e0:e9:05:78:90:77:ec:a7:af:
         27:06:5f:7a:96:42:74:db:69:b7:f3:6c:c8:8d:4b:b0:a1:76:
         3e:25:f1:1e:f1:64:24:ab:21:5e:17:33:17:c4:16:dd:a6:17:
         5c:ef:9a:d0:68:c6:1f:d6:d5:c4:c4:b7:1a:32:b4:c8:63:68:
         a8:83:5c:d8:30:7b:a4:8c:9e:51:c3:03:1e:5f:24:18:40:3c:
         9a:99:74:73:2b:6c:18:5d:f2:f7:d7:64:14:0a:7e:3e:12:50:
         2b:e5:9d:9f:b2:5e:44:34:b6:e8:47:bf:4b:21:41:fc:05:cc:
         40:50:e9:eb:79:6b:23:3f:c7:4a:64:79:7b:91:1e:6f:47:d2:
         1e:35:f5:fa:be:d8:61:81:7f:07:cb:d0:d0:80:b0:31:9b:aa:
         47:32:f1:a3:44:9e:de:fd:ca:21:f7:10:21:68:57:cd:4c:13:
         37:12:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:05 2026 by rpki-client