Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/d0e6718e-9053-3b03-92bd-2559869e6b95.roa
File:                     d0e6718e-9053-3b03-92bd-2559869e6b95.roa (raw, json)
Hash identifier:          S5G7Nk9HJN6PDRQ6Q5Ny7A6a85tQzVQmmAlDNtnj5CU=
Subject key identifier:   9C:33:51:BA:EB:C1:87:C9:1C:AF:85:AA:9B:AF:B0:76:D0:E2:F3:E6
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584F5767F2A8A8BF8A7A866A0048
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/d0e6718e-9053-3b03-92bd-2559869e6b95.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     399759
IP address blocks:        167.88.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:f2:a8:a8:bf:8a:7a:86:6a:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=a8af9442-fe7a-49ac-a0cd-718eb1aada4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:c5:2c:4a:5b:ef:3c:09:2d:a8:53:62:89:
                    86:47:c0:8a:8b:9e:ca:ad:a6:19:ad:ee:73:5d:9e:
                    0d:fc:d4:28:cb:94:96:ef:31:fd:ae:88:c4:dd:c8:
                    fa:79:aa:fc:6f:67:cb:5e:54:38:7f:6b:81:7f:83:
                    7b:90:36:8d:3f:a1:5d:bb:b7:55:9c:16:30:f6:98:
                    42:2a:69:ff:d1:29:e8:dc:da:23:69:2b:9f:7b:15:
                    1b:4e:0a:5b:fc:f7:50:3c:b7:a6:c9:58:9b:a9:17:
                    3d:f4:b0:1e:d1:63:bf:8e:d2:80:e3:33:61:81:9f:
                    8b:ac:8c:aa:ef:4a:8f:3e:2d:43:08:4a:97:5b:c5:
                    b2:91:ed:e4:25:34:69:18:39:2c:8b:47:f6:9c:f0:
                    1a:32:92:8c:2e:b2:ec:8c:0b:a4:5e:87:ba:8e:5e:
                    8f:3f:33:a1:49:e6:93:e6:b5:30:91:8d:e6:ea:e2:
                    1c:48:c5:0a:fb:9a:3a:46:fa:8c:f7:e3:86:36:aa:
                    5a:fe:ed:3c:a3:22:c5:fd:28:a9:4c:54:92:d6:02:
                    f5:8d:90:ea:11:82:f8:d9:7c:c9:b9:91:87:97:cf:
                    bf:cc:b7:09:38:1f:9b:a7:97:ef:f9:fb:46:a0:c2:
                    02:87:84:e4:71:93:8f:a8:5a:73:a0:a0:1e:75:36:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:33:51:BA:EB:C1:87:C9:1C:AF:85:AA:9B:AF:B0:76:D0:E2:F3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/d0e6718e-9053-3b03-92bd-2559869e6b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:46:a1:0e:14:89:8b:b6:e4:f0:02:32:2f:91:da:fd:8a:1c:
         c0:36:6a:9d:69:6f:14:c3:1f:de:99:f5:9b:f7:db:76:b5:ba:
         e2:5c:3b:f3:55:6d:bc:06:e4:ea:69:2b:ee:19:c6:b7:1c:2f:
         7f:08:bf:02:74:69:64:9a:f2:c8:5e:37:2d:8f:f6:16:d6:85:
         6f:63:ab:2d:38:4e:4d:26:de:23:22:35:2a:1d:de:6a:f3:40:
         bd:f8:f8:23:42:18:0f:28:48:c9:07:a7:4b:3c:f6:ba:ee:38:
         5e:9e:14:65:a0:3c:81:d9:96:08:4d:91:2c:df:f0:8a:9e:94:
         36:bf:13:63:d8:8e:df:6b:9c:24:d2:c1:24:41:bd:c6:fd:c2:
         9c:27:8c:5c:16:f3:3e:37:58:f7:32:78:1a:05:8e:df:dd:54:
         4f:3c:e5:f2:08:ee:5f:53:9c:2c:a7:de:6d:fe:2b:9b:68:ae:
         77:e4:be:73:06:8f:86:0e:34:9f:7d:39:f4:ae:36:0a:31:e0:
         90:7d:c0:14:d6:7d:c1:8b:6e:a3:e7:be:55:54:c5:f1:74:19:
         86:44:50:72:fd:67:88:6c:da:af:af:53:16:a7:94:ea:24:32:
         25:0a:60:2c:38:b6:55:9c:89:64:4e:21:5f:10:0b:1b:f4:15:
         b3:3b:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:41:46 2026 by rpki-client