Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa
File:                     5aae1681-a715-398d-93e4-ba01ef68fe79.roa (raw, json)
Hash identifier:          kM916OZ5zixZdJVghdeTfDXuiasjlGzrohjWJ1AbgnE=
Subject key identifier:   E4:18:C2:7F:F1:BA:A1:90:BC:34:94:70:7E:00:FE:48:98:F4:C3:93
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EAFE704607AE3168018282000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     36616
IP address blocks:        216.168.228.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e7:04:60:7a:e3:16:80:18:28:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=d65928e6-0af7-4dff-89ba-b651ac1bb0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:1b:f3:96:7c:ab:6d:ff:8f:00:72:9a:bb:
                    dc:7c:1b:9b:8b:39:eb:d4:a0:e8:1a:13:09:f0:b3:
                    81:79:97:51:f4:9e:e2:38:19:8d:f3:aa:76:73:2f:
                    3a:6a:e7:f3:71:14:b8:e9:8b:93:c2:62:01:1c:76:
                    0f:5a:69:e0:3c:11:ed:4c:7e:c1:5a:f7:c1:b3:a8:
                    98:d5:55:a9:9d:04:f6:e9:0d:9a:2e:e6:63:37:b9:
                    5e:49:a4:22:dc:4d:b7:78:fd:09:f2:c5:cb:91:16:
                    81:32:4e:5e:83:2f:d0:b5:2b:32:aa:8e:ff:dc:81:
                    6d:da:2c:2f:93:7a:34:0d:18:f9:e0:fd:38:59:c7:
                    f0:3b:22:03:2d:d4:7a:48:dd:5b:69:a9:85:de:89:
                    b9:66:76:28:81:e6:ec:d4:77:d6:a2:ba:b6:87:bd:
                    df:2d:09:db:82:d0:4d:77:d9:a0:a0:88:7a:70:b5:
                    7f:73:65:9b:16:b2:57:96:f5:89:5e:cc:61:69:26:
                    21:88:8c:9c:fd:8b:a6:ec:49:9a:ff:b5:3a:ed:d1:
                    2a:3d:79:85:c9:61:8e:01:e0:34:5f:a8:83:36:b4:
                    13:e1:60:a9:8d:75:a1:90:4d:0e:84:30:da:92:1f:
                    f7:b6:91:aa:7e:65:5e:aa:90:d5:bc:52:d4:74:ba:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:C2:7F:F1:BA:A1:90:BC:34:94:70:7E:00:FE:48:98:F4:C3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:67:00:a1:2d:51:98:2b:88:e6:42:18:10:f8:1e:30:12:
         a7:d6:87:5b:c0:64:b8:05:75:36:d5:b3:e6:41:bd:a6:50:c6:
         fd:42:b1:46:d3:49:15:bc:47:1d:b0:1b:35:63:ca:d7:a4:06:
         05:f7:1b:f0:c6:f2:2b:eb:aa:56:86:71:88:2b:23:f8:ac:c2:
         97:ca:92:0c:6c:6c:2b:ee:62:f5:3d:20:92:f6:f7:ab:d0:30:
         77:c7:01:f7:57:b4:f8:b0:79:28:52:9d:62:df:e1:24:86:b4:
         b3:10:7d:fe:44:54:f4:39:54:36:cb:19:4f:85:47:69:cb:d2:
         06:d7:f4:35:32:e8:e6:5f:41:32:ce:1a:62:84:d4:86:d7:38:
         a1:89:f5:fa:d3:80:fb:bd:af:14:96:fd:f5:db:92:2d:03:2f:
         3d:88:37:d4:69:16:66:58:0e:ae:58:7d:46:0c:bd:29:82:1a:
         2e:48:c6:7a:8c:6f:0e:b6:dc:e5:c0:34:42:9f:3c:40:70:84:
         91:f6:0c:10:fa:26:9e:9a:eb:2e:c3:a5:3f:9c:15:09:dc:b2:
         fb:06:06:6c:25:b2:ef:f5:ee:0d:6f:88:5e:3a:38:2f:17:19:
         d9:47:a8:32:7d:c9:70:94:9c:be:f8:7a:74:ac:9f:c7:91:04:
         76:e1:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:51 2026 by rpki-client