Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa
File:                     01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa (raw, json)
Hash identifier:          E33dq0T4UnZzpmH9RWCqPgKXIKjlR7RKJoKCbREu810=
Subject key identifier:   99:B8:34:A3:BF:3C:EE:04:2F:12:DE:0A:09:6F:E0:11:48:27:B9:61
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584F6C583867AFB36DD0FE558B00
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        144.81.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:38:67:af:b3:6d:d0:fe:55:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=fc378e72-e92a-485a-8ee6-66c3fb58269d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:14:51:c8:77:a8:72:dc:aa:23:5f:43:2d:
                    df:8f:aa:2f:af:51:6e:24:7a:3c:fd:70:11:87:71:
                    5f:67:17:50:59:a6:12:3c:07:e4:2c:ca:88:e3:20:
                    6b:26:19:77:9b:f4:3a:68:03:c9:38:59:98:b9:6f:
                    01:ae:26:8a:9c:83:1a:61:a0:54:a4:f1:ba:34:ff:
                    20:8b:74:bf:32:58:68:0b:0d:15:24:90:ec:d6:ba:
                    c3:fe:68:b5:7a:a9:ea:2b:30:fa:58:e5:6c:e3:c8:
                    11:82:4a:2e:0b:88:36:7a:35:c1:1d:06:a9:7e:11:
                    b4:69:ce:05:0b:7c:a2:30:fd:93:98:e2:ff:2c:bc:
                    f7:f3:73:09:98:46:15:de:6f:66:e7:40:aa:8c:4f:
                    ea:69:60:a0:92:80:c4:b0:a2:54:ac:e7:33:0a:37:
                    a2:2e:2e:ca:d8:79:25:9a:fa:6a:5c:5d:68:fc:5e:
                    89:90:8d:93:8b:c7:20:aa:fb:59:c2:b9:72:9a:4d:
                    50:94:54:0e:1d:86:43:d5:8f:86:25:59:48:b6:ba:
                    cb:89:ac:2a:9c:f5:06:3b:12:31:5a:39:03:99:a8:
                    c2:1a:61:ce:c1:57:81:1e:4b:6e:be:c1:6b:b8:66:
                    25:66:1e:8b:cc:a5:8a:2d:1e:5d:b7:81:e3:e1:fe:
                    4a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B8:34:A3:BF:3C:EE:04:2F:12:DE:0A:09:6F:E0:11:48:27:B9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:6e:f9:a9:76:c6:56:6e:bc:eb:a6:92:77:60:8e:a1:ed:
         0b:71:4d:f1:32:2a:18:3f:aa:5b:93:8f:44:37:9e:43:7c:87:
         f1:a0:6e:e5:bd:28:4d:f7:80:c8:14:0b:0d:ec:da:3d:15:02:
         7a:1b:1f:5e:aa:13:83:e9:55:a6:1a:91:e7:25:7d:a5:37:59:
         16:86:d0:27:15:66:31:00:8f:ad:46:d3:a2:d4:d8:1e:55:fe:
         24:07:51:d0:b3:d8:d8:a6:0e:ca:86:81:af:59:a3:12:a9:60:
         f2:d8:f4:64:4f:89:7b:1c:46:c3:85:08:97:d2:da:44:fe:82:
         da:0e:ab:f0:28:f4:13:3d:44:7f:d7:66:cc:48:72:e7:0f:5a:
         e2:b8:7e:1d:bd:44:e9:fd:f1:06:6a:50:eb:f2:cd:0d:49:e5:
         48:eb:d8:0b:97:88:a2:5c:33:df:2d:fa:cc:3f:40:22:ac:f4:
         d4:e2:99:4f:41:98:15:f0:81:0f:e2:28:49:96:9e:82:8c:0d:
         32:b6:1e:84:60:f7:0f:b1:b8:d6:f3:27:fb:e9:19:6b:38:a8:
         cc:56:92:1f:a8:d3:98:fa:ac:6e:75:a0:ce:c5:97:1e:39:7f:
         e2:0a:79:f6:95:cc:af:9f:0e:04:4c:b7:8e:36:79:f9:f3:20:
         ab:d9:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:23:38 2026 by rpki-client