Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa
File:                     58cd867b-ae53-310e-947f-54ef858e3f7a.roa (raw, json)
Hash identifier:          7dwuh8WsZ82ygWeIn5hwqaRi9+VAAd+OG9c7xEux3A4=
Subject key identifier:   80:19:8F:59:45:A1:67:14:D5:DC:85:71:3F:2F:0A:58:65:44:59:45
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EAFE70449B3BC199B0C9B7D70
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     396589
IP address blocks:        216.168.228.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e7:04:49:b3:bc:19:9b:0c:9b:7d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=5d968121-c3a5-4ea1-91c6-0c193e6f97ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:67:cb:d6:f4:22:3b:5b:31:53:a1:ae:24:
                    d2:b7:bd:50:69:aa:47:cf:04:e0:d4:06:36:ff:8f:
                    58:a4:1a:6c:a6:03:65:fc:46:ff:5c:9f:91:c0:bc:
                    38:9c:d1:4e:08:3f:d1:45:88:85:83:c1:5c:16:a0:
                    e5:ac:65:7e:45:25:a4:30:4e:b8:c2:68:4d:ca:25:
                    f4:24:9c:74:09:24:3e:94:78:55:22:7b:15:39:c1:
                    f1:a0:0c:e4:c4:92:fd:67:47:85:e3:c9:93:69:36:
                    b1:c5:6b:c5:1a:cc:f3:23:e5:38:27:ed:5c:42:ea:
                    50:d5:90:83:67:77:f1:3b:56:09:ba:d5:4c:b9:94:
                    ac:88:a5:c3:b9:2b:2a:4e:ce:f7:80:85:b4:6f:b0:
                    e9:a5:3d:b7:60:e9:80:e1:51:90:d0:d1:05:87:bc:
                    a2:7a:8c:b5:8d:42:70:f8:46:96:e8:04:e9:58:34:
                    f2:9a:a8:14:91:57:ee:01:3d:f8:f4:9a:59:76:7e:
                    e4:13:9c:76:df:c2:fe:39:58:4f:24:d9:6d:4d:ea:
                    e7:f7:22:cc:e2:c5:60:24:3e:fd:ea:52:ae:cf:e3:
                    e5:49:35:37:78:0b:e2:6f:7c:81:c5:6c:5a:97:32:
                    8a:5a:2f:38:8e:12:3f:54:cf:bb:82:5b:09:c1:2f:
                    3e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:19:8F:59:45:A1:67:14:D5:DC:85:71:3F:2F:0A:58:65:44:59:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58cd867b-ae53-310e-947f-54ef858e3f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:0d:f5:56:0a:d2:15:ed:8c:4e:58:11:20:f3:1f:d4:8c:
         70:0b:73:be:e1:be:b1:eb:1a:cb:8f:12:40:63:56:ea:09:d5:
         2f:32:d3:51:d3:7d:c2:62:39:78:98:50:f6:44:44:e1:24:79:
         e6:c6:33:e5:86:8e:28:7b:76:ca:3b:28:58:ce:92:78:17:d6:
         32:2f:b8:ef:c0:a3:ee:5d:87:f4:e2:61:06:dd:e6:f7:56:32:
         43:1c:66:5e:2b:93:e7:05:b8:7b:8f:f9:4a:82:b1:5c:8a:7d:
         cd:bf:b0:de:d0:4a:6f:96:10:c1:79:c0:a1:35:4e:89:36:28:
         ab:7a:e8:b7:c7:f4:6b:08:89:49:1c:40:e1:4c:f4:a3:32:53:
         da:f0:ff:ef:c8:01:d2:3e:d1:a4:8e:29:b1:d6:da:c0:f6:2f:
         ea:76:11:1f:91:98:25:f7:f2:38:4c:5e:ca:9a:2b:96:fe:37:
         b5:39:d2:fc:5e:c6:a2:6e:81:79:37:c4:07:45:ac:b9:d3:bd:
         a3:9a:34:0d:d4:9e:83:68:3b:9c:51:bf:a5:3b:32:28:88:1c:
         f9:fe:3c:e1:64:dc:5e:c8:e4:60:db:45:c3:a4:32:3f:ea:d2:
         9c:2c:e2:bf:01:42:af:fe:08:06:08:dc:ad:87:51:17:96:56:
         d5:e4:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:14 2026 by rpki-client