Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16525637-3725-30fb-a90f-4b7d0322cbbd.roa
File:                     16525637-3725-30fb-a90f-4b7d0322cbbd.roa (raw, json)
Hash identifier:          76mkyzfD6T2bwiPm44u2/j7S/RQIgkVJsTATswtsHRY=
Subject key identifier:   1D:4E:E2:1F:FD:BB:B1:2F:1B:97:5B:E6:41:31:2A:82:B0:51:61:C2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC20C75C4417D33C9A9A95180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16525637-3725-30fb-a90f-4b7d0322cbbd.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     397197
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:75:c4:41:7d:33:c9:a9:a9:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=f93f7def-eb92-400c-8b87-b96f92eb1887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:af:23:65:3a:1f:72:30:74:43:69:e7:48:
                    77:a2:b7:59:ec:50:8c:e3:a5:ea:c2:f8:fb:ef:20:
                    34:7e:80:8f:b8:00:59:a2:c8:c3:31:b7:59:0f:8e:
                    6f:58:90:5b:53:8e:08:94:96:54:98:7e:48:83:ee:
                    3e:fa:82:04:d3:7a:7b:2b:2d:b9:a3:9b:bf:02:7f:
                    00:77:20:48:51:21:25:6e:30:60:2e:56:a5:89:c9:
                    75:c8:a9:a9:0d:b0:6a:ad:5d:92:00:3a:22:49:58:
                    d4:0c:eb:19:67:93:79:ed:87:f0:63:f7:33:75:49:
                    7d:66:3c:70:eb:e8:31:db:79:93:d3:da:63:a4:81:
                    30:7d:d3:a1:16:1b:ca:7c:e7:42:60:46:a5:da:dd:
                    e3:7e:c7:bd:71:f9:e9:9f:ac:97:e3:1c:a3:4c:de:
                    f1:ac:69:ce:06:dc:9d:e3:a5:40:04:02:5e:87:60:
                    db:98:7d:d5:78:41:80:ae:ca:99:cb:95:9d:b7:ae:
                    b7:5b:37:cc:23:34:50:b4:df:a5:d3:21:21:6e:4d:
                    b6:ae:6e:a8:2f:17:e8:11:1c:51:fe:25:4c:28:f4:
                    fd:0c:97:d9:a0:b4:b4:fb:9c:28:11:8d:07:30:34:
                    a1:15:1b:97:75:23:f7:b7:b6:5b:99:27:88:74:c0:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4E:E2:1F:FD:BB:B1:2F:1B:97:5B:E6:41:31:2A:82:B0:51:61:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16525637-3725-30fb-a90f-4b7d0322cbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:54:33:d8:91:d7:8d:76:50:29:43:5a:d7:80:6c:b4:4e:9f:
         f9:1d:e1:15:60:ac:73:3b:5e:17:45:b5:a9:0c:02:16:c9:a9:
         c7:7f:ab:03:e4:15:6b:11:fa:ff:00:b1:36:bd:ce:b8:65:50:
         e8:c4:20:77:50:d3:3d:cf:64:2b:cd:ae:f3:ec:cf:9c:ca:71:
         3a:f8:cb:6d:c3:e2:fb:bb:53:77:a2:73:90:80:a9:13:46:e5:
         d1:ab:52:2c:30:d9:40:1c:8f:ea:2a:f8:68:d3:7f:90:5b:0e:
         7e:9f:ab:a9:f8:6b:b4:73:0c:9e:45:6b:16:4d:69:d2:68:40:
         29:5e:f5:29:6a:6f:62:60:03:bf:2a:57:34:be:4d:d3:7b:fc:
         22:8a:02:66:73:7b:c0:c2:8c:1e:88:22:8d:97:d3:72:28:ac:
         31:87:0d:9d:59:e0:a5:43:e1:af:f7:b9:8e:7f:83:12:bb:10:
         f0:5a:1a:32:de:0b:01:99:6e:7f:d6:ea:fd:64:0c:0e:f7:e4:
         d7:e4:d2:06:5b:c1:d1:52:f4:db:f1:6d:a2:10:44:3c:d4:b9:
         f2:9c:a3:ef:f5:f8:50:81:23:d1:96:0a:bc:73:3b:75:be:55:
         dd:8f:ab:0b:69:b9:4d:6b:88:7d:e2:a7:2e:29:3e:af:67:0e:
         5c:db:cf:61
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7CDHXEQX0zyampUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
ZjkzZjdkZWYtZWI5Mi00MDBjLThiODctYjk2ZjkyZWIxODg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgCvI2U6H3IwdENp50h3ordZ7FCM46Xqwvj7
7yA0foCPuABZosjDMbdZD45vWJBbU44IlJZUmH5Ig+4++oIE03p7Ky25o5u/An8A
dyBIUSElbjBgLlalicl1yKmpDbBqrV2SADoiSVjUDOsZZ5N57YfwY/czdUl9Zjxw
6+gx23mT09pjpIEwfdOhFhvKfOdCYEal2t3jfse9cfnpn6yX4xyjTN7xrGnOBtyd
46VABAJeh2DbmH3VeEGArsqZy5Wdt663WzfMIzRQtN+l0yEhbk22rm6oLxfoERxR
/iVMKPT9DJfZoLS0+5woEY0HMDShFRuXdSP3t7ZbmSeIdMBWPwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB1O4h/9u7EvG5db5kExKoKwUWHCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTY1MjU2MzctMzcyNS0z
MGZiLWE5MGYtNGI3ZDAzMjJjYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAiVDPYkdeNdlApQ1rXgGy0Tp/5HeEVYKxzO14XRbWpDAIWyanHf6sD
5BVrEfr/ALE2vc64ZVDoxCB3UNM9z2Qrza7z7M+cynE6+Mttw+L7u1N3onOQgKkT
RuXRq1IsMNlAHI/qKvho03+QWw5+n6up+Gu0cwyeRWsWTWnSaEApXvUpam9iYAO/
Klc0vk3Te/wiigJmc3vAwoweiCKNl9NyKKwxhw2dWeClQ+Gv97mOf4MSuxDwWhoy
3gsBmW5/1ur9ZAwO9+TX5NIGW8HRUvTb8W2iEEQ81LnynKPv9fhQgSPRlgq8czt1
vlXdj6sLablNa4h94qcuKT6vZw5c289h
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:38 2026 by rpki-client