Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa
File:                     4605a289-a470-365a-9c64-776d74fe8ae3.roa (raw, json)
Hash identifier:          0umavCA3YC7bTnp/ej4jxPE58uNEOlXsIt6E2Al8foA=
Subject key identifier:   EE:4C:FC:1E:A5:BE:1D:39:AB:43:EC:F5:FD:F9:3E:CF:74:0F:49:32
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EAFE704B02CB2EECFFDFDEE00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     36619
IP address blocks:        216.168.228.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e7:04:b0:2c:b2:ee:cf:fd:fd:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=970478bb-8a76-4ff3-b987-6cd6e9aa8643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:fa:5d:6d:91:cc:87:f6:05:60:39:67:b7:
                    a3:69:a5:76:52:f9:cf:dc:8e:6f:98:fd:0c:76:f5:
                    35:29:56:5f:a0:77:36:e8:5b:a0:a1:1c:88:a7:8e:
                    86:39:4f:d0:25:64:e4:ee:8f:0e:b2:30:4e:8f:6b:
                    da:36:e9:6b:1c:df:0b:bd:5f:2c:54:9a:5d:28:3c:
                    de:04:d6:4e:fb:6b:42:48:84:9c:f8:72:c5:dc:fc:
                    b9:47:2a:10:db:b3:e7:61:b5:f7:09:9a:7a:1d:40:
                    bd:4f:ec:6b:51:c7:85:58:e5:68:b0:9c:8f:cc:b1:
                    86:02:59:67:0e:b8:c3:25:06:34:c2:f7:67:8d:41:
                    4c:c4:8b:af:04:ea:63:39:43:fc:f4:80:ba:c8:d5:
                    fa:4c:c4:5c:cf:87:4f:ff:c6:92:3a:16:95:3b:2c:
                    a9:c2:1f:38:96:92:8a:f1:4d:10:75:21:2e:81:1d:
                    d1:aa:9e:01:c9:65:81:b2:67:39:77:43:26:74:72:
                    3d:80:8b:c9:cf:44:26:ce:fd:33:1f:d1:27:66:bc:
                    eb:3d:78:57:06:5b:50:1f:61:e3:37:ce:a1:f9:48:
                    22:2f:1b:8d:48:05:41:b5:e3:cf:e6:0b:a6:e3:54:
                    84:6a:28:0e:f2:6f:bd:5c:aa:4e:b2:ed:31:2b:71:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4C:FC:1E:A5:BE:1D:39:AB:43:EC:F5:FD:F9:3E:CF:74:0F:49:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4605a289-a470-365a-9c64-776d74fe8ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e3:e9:36:48:8a:d5:74:ac:81:07:15:4a:8f:ad:c9:2b:90:
         fb:a1:e8:24:b1:81:1d:f2:2d:3a:07:8c:c8:c7:7a:41:79:db:
         d4:90:8c:19:13:28:a7:28:05:c2:35:b7:6f:89:a9:2a:b8:8a:
         7d:2c:82:66:37:e7:f5:e5:4f:32:a7:eb:4b:6e:cf:b4:42:7c:
         42:4d:15:ce:26:19:41:dd:bd:a7:90:65:e8:2d:46:09:10:ff:
         23:b0:26:a8:91:ae:47:82:8e:92:9d:57:af:b1:a2:d2:2b:43:
         50:af:28:f9:94:ea:12:a8:df:58:cd:3b:cf:ab:e7:15:31:30:
         79:84:6b:7f:da:f6:c5:88:6c:67:38:a5:8c:47:1a:31:ac:e6:
         d9:2c:64:38:db:1b:6f:a9:4e:2f:e7:4b:92:72:89:9a:11:90:
         43:b7:31:f4:6a:de:91:9a:d9:13:b7:12:ba:08:96:43:b2:6b:
         20:e9:f2:fa:d7:ed:9c:4b:fa:94:a6:98:19:77:97:a4:5b:11:
         91:5a:9d:10:b6:ea:a2:86:52:16:1b:51:c4:4a:3f:b4:4d:65:
         61:86:dd:d8:c3:ef:4e:53:19:2f:ca:43:7f:b2:68:c0:c1:47:
         aa:c7:7d:49:26:ad:9f:78:40:53:d2:aa:c8:2a:6c:ca:13:bc:
         0f:1a:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:57:26 2026 by rpki-client