Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/94c20a17-9fe6-355d-abbf-9c0e8b22c164.roa
File:                     94c20a17-9fe6-355d-abbf-9c0e8b22c164.roa (raw, json)
Hash identifier:          JOxUavLe5qrQ+7fh1jMK/txaDLBr3tl91bLag9Pf+Eo=
Subject key identifier:   A2:5C:4A:81:48:FD:AE:D0:88:D5:6E:F6:A7:22:2B:D2:03:0C:7C:C8
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F70706B64712C2C6D0BB370D0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/94c20a17-9fe6-355d-abbf-9c0e8b22c164.roa
Signing time:             Fri 09 Oct 2026 00:12:30 +0000
ROA not before:           Fri 09 Oct 2026 00:12:30 +0000
ROA not after:            Thu 07 Jan 2027 01:12:30 +0000
asID:                     14618
IP address blocks:        216.157.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:70:6b:64:71:2c:2c:6d:0b:b3:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Oct  9 00:12:30 2026 GMT
            Not After : Jan  7 01:12:30 2027 GMT
        Subject: CN=985deaeb-417e-4d93-82f6-e8ac94f0628d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:29:aa:5d:6a:d7:cc:2c:8b:52:48:03:0c:
                    0b:8e:09:d6:9a:66:26:74:82:81:60:11:8f:e7:7a:
                    14:42:cf:1a:92:38:2d:ca:8d:2b:e8:bf:64:50:d0:
                    78:54:07:69:a8:f2:4f:d6:84:57:c9:3a:b1:de:a3:
                    c6:49:a3:cf:00:f3:07:34:f2:06:9a:74:e7:0b:bd:
                    7d:85:43:f3:e6:52:c6:bb:77:77:d0:d8:6f:1a:9d:
                    b3:ad:16:76:ae:b0:6d:ce:2d:2e:2f:5c:3d:9f:40:
                    17:92:70:e1:98:f0:18:fa:03:6d:61:51:57:0a:0d:
                    b7:ce:12:47:ef:53:f2:af:e4:24:e0:0c:d1:c4:18:
                    3c:47:49:16:c1:9d:8f:f9:68:c2:85:2e:00:f9:7c:
                    b3:16:e4:c6:71:d6:44:55:b2:f0:be:35:f7:c8:35:
                    ae:7d:c8:53:86:f7:45:51:b0:eb:c6:d7:14:8c:4d:
                    fa:ae:55:e5:63:f2:04:d0:04:58:dd:b7:04:50:3a:
                    6b:ad:88:85:bc:da:96:01:8e:d5:8f:29:f1:63:66:
                    8d:bf:ff:0d:89:3a:ce:d8:1e:28:10:65:2b:90:dc:
                    ee:6d:14:3b:2b:82:03:b5:c2:9b:4f:20:48:cc:ce:
                    0d:36:e4:3b:74:51:a4:ed:eb:b9:58:99:5a:77:3a:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5C:4A:81:48:FD:AE:D0:88:D5:6E:F6:A7:22:2B:D2:03:0C:7C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/94c20a17-9fe6-355d-abbf-9c0e8b22c164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:db:3e:e4:bb:20:e6:24:f9:f2:49:b0:df:fb:85:19:10:
         b0:91:f2:05:12:3c:a1:28:18:7c:cf:b0:f2:ca:2f:32:99:d4:
         5c:d3:7c:97:b6:74:fd:82:61:70:da:4a:7c:8d:f9:0c:ea:2d:
         87:f6:4c:19:3d:1d:8b:26:f7:ed:cc:c3:ed:1d:61:3c:3e:74:
         2a:78:03:24:16:e2:23:3a:5f:0b:20:86:65:19:1d:ab:ab:dc:
         c7:1c:55:ed:64:1d:3d:6a:2a:be:df:c9:5c:e6:41:fb:84:15:
         23:78:4b:ca:cc:67:20:fe:e0:48:1d:d9:f0:48:09:4a:cd:f4:
         4f:8c:8b:9f:b4:0f:42:a4:33:70:82:1c:7c:e2:de:ba:69:02:
         e9:86:9d:c1:f2:6f:2a:c7:2d:bf:3b:91:3a:52:1b:80:7f:23:
         02:a0:59:98:c1:64:5e:c2:f0:40:05:4d:d8:6a:da:06:1d:88:
         87:36:7e:05:d8:75:42:9f:5d:d7:bb:27:20:aa:51:92:5d:40:
         b2:41:d9:a1:58:d1:67:f6:64:83:1f:3c:4d:1a:1a:92:83:42:
         44:69:19:72:6b:25:86:7f:4a:a6:bf:ae:9e:a4:fa:42:44:b1:
         4c:e3:af:cd:d1:e3:db:4b:83:4f:6c:64:50:5f:d4:c7:53:1d:
         e5:96:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:48:15 2026 by rpki-client