Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa
File:                     a470a0a7-32d7-3bb8-be68-42d66277d66d.roa (raw, json)
Hash identifier:          Sv47afScLECHg0RGV8RSf4P+qH3k87eUZTee6NS3Xv4=
Subject key identifier:   5D:7F:40:71:16:D7:64:28:7E:76:6A:E1:75:14:6B:1F:B2:19:47:AC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EAE81B5F88A3832DEDBECA580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     396611
IP address blocks:        216.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:b5:f8:8a:38:32:de:db:ec:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=f1ec2f13-5dd9-47a0-b277-6bbed93445a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:5b:1e:f0:3c:aa:2e:91:b4:53:55:2e:ea:
                    e8:8d:07:97:6c:1b:2d:df:0d:ef:f1:58:4f:9b:8a:
                    a9:2c:87:42:9c:7d:bc:fb:c2:a9:3a:a3:7f:de:90:
                    19:e6:ef:7a:a9:09:2b:d5:5f:bd:da:61:05:a1:5f:
                    30:9d:98:f5:7b:b3:cf:5c:80:c8:e5:45:dd:71:d3:
                    83:07:d0:61:e5:04:a2:dc:d8:81:25:33:20:e2:38:
                    0b:4b:7a:76:82:f4:ad:c2:9a:48:9e:97:a3:9b:70:
                    e6:76:f5:73:8e:b7:43:08:9c:42:97:17:fc:53:63:
                    3d:7a:79:07:9e:4d:0e:19:71:d3:92:ad:42:e3:87:
                    2d:8b:3a:25:08:09:db:1d:e3:85:24:7f:13:8d:47:
                    ef:91:55:05:42:2c:38:e2:ee:7f:14:94:fd:6a:50:
                    11:c9:c5:8b:e3:c3:93:58:0d:f1:ca:8e:ab:b1:6d:
                    04:e8:6a:df:fa:68:55:63:8a:4d:13:a2:c4:0a:24:
                    71:cd:4a:8b:fb:ac:34:e5:49:0d:53:5f:8d:58:8a:
                    01:a3:16:76:ec:a5:13:71:c3:95:cc:4e:5d:5f:30:
                    7c:37:0b:78:fb:2d:c0:a3:43:ec:e4:94:e1:2c:63:
                    69:01:03:a4:cf:43:c8:d5:df:12:3f:a5:34:19:8d:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7F:40:71:16:D7:64:28:7E:76:6A:E1:75:14:6B:1F:B2:19:47:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:34:9a:7f:c3:cb:22:cf:dc:90:a0:b8:d2:94:a6:c0:77:da:
         2d:b4:4d:39:cd:d2:d6:3f:91:c7:5f:a6:b8:6b:74:44:d5:71:
         79:f0:d6:74:d2:be:09:6c:49:86:3c:27:2e:cd:14:64:ad:13:
         75:c9:9b:d2:88:48:fb:7a:04:7a:8a:b6:cd:49:1f:84:7e:89:
         04:2f:7c:20:bc:d6:8e:5c:11:15:58:07:92:93:25:e5:ac:ee:
         80:f3:11:c2:45:36:86:96:10:5b:ff:54:af:72:57:81:ea:05:
         25:e9:0e:0f:4c:ae:55:eb:61:eb:c6:78:27:85:7f:5e:2b:03:
         37:2f:78:56:84:8f:b8:68:6f:a0:b9:d3:87:0c:84:fe:e9:88:
         01:46:44:6e:15:fe:fa:a9:a8:e4:4e:5d:ba:9e:12:49:f0:84:
         49:8c:6a:6e:31:f8:a8:1a:45:e5:ca:d0:d3:07:12:de:ba:80:
         43:89:94:bf:4e:9f:b6:9c:68:f9:82:d9:04:2a:db:71:41:67:
         a4:2b:15:d9:a9:3b:d3:6e:2a:6f:b9:09:b8:d2:f1:69:8d:5a:
         5d:3e:f7:38:ba:ec:58:54:79:11:6d:84:51:3a:26:31:de:05:
         bd:77:a6:89:14:bd:db:18:9a:82:ac:c3:6b:3b:42:87:fb:65:
         44:6b:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:56 2026 by rpki-client