Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa
File:                     f9a2facb-e73a-3151-8001-8276673133ae.roa (raw, json)
Hash identifier:          YS2w4JPI82nI+RtP8n2uCAVXuxrKu8ORghpHcWWIwNk=
Subject key identifier:   DB:6E:8F:E7:05:F6:43:B8:5C:78:B0:43:D1:08:44:4E:CF:CF:D7:53
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584EA798188D8FCC3879E14D4580
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11090
IP address blocks:        198.135.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:18:8d:8f:cc:38:79:e1:4d:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=81a9738c-a45c-486c-8955-e4f70ec23f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:31:04:68:d0:ba:a1:a4:69:ce:24:81:d9:
                    d2:26:0b:4d:7c:ad:5c:a5:0f:0c:de:9b:c1:3d:35:
                    d2:94:40:1b:7e:a8:6c:ac:49:aa:2b:5c:6c:b7:dc:
                    83:92:ef:74:1c:88:72:73:5d:bd:15:e8:38:7c:7c:
                    98:f1:ef:bf:82:e8:f6:82:4b:29:de:27:9f:e7:68:
                    f4:69:4d:c5:2f:1a:1c:50:51:c7:99:ca:d3:7a:30:
                    9d:7c:30:29:42:c5:a9:16:30:86:b9:06:cb:fc:c9:
                    0b:d8:64:62:19:44:cf:79:41:23:06:65:0a:86:82:
                    f7:7d:48:64:2e:d7:d6:06:2b:31:e4:60:b3:06:ad:
                    21:14:53:be:53:bd:6c:e4:d9:94:5c:51:12:82:82:
                    bf:7b:ba:37:6c:c8:7b:ff:a1:b2:fe:cb:eb:60:88:
                    7f:9f:d9:a7:48:44:f1:0f:d9:e4:af:b6:34:55:50:
                    ea:dd:4f:bd:54:7c:91:b3:63:37:61:46:0f:0e:78:
                    66:08:3b:12:de:09:7b:ab:47:d0:75:dd:df:bc:33:
                    dc:ca:e4:ff:f5:c4:d5:15:ab:c0:f8:77:30:dc:6d:
                    98:a0:26:51:d0:d8:c1:e8:11:fa:c0:08:2c:f1:ec:
                    99:c2:3f:9e:3f:9f:f4:f2:9b:c2:58:0e:2f:99:43:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6E:8F:E7:05:F6:43:B8:5C:78:B0:43:D1:08:44:4E:CF:CF:D7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5b:ea:b7:04:a7:58:82:41:30:3d:5e:fe:78:4c:cb:ba:28:
         85:c4:06:c9:a5:76:4f:f8:97:c6:99:8a:93:9a:81:fd:64:cc:
         50:28:32:42:41:4d:9d:7f:a7:ac:e1:13:94:86:34:80:d2:8b:
         48:15:1a:3a:8a:84:00:c2:50:15:63:93:9c:4b:75:19:96:d9:
         db:d2:31:20:86:c4:5a:6c:00:c6:26:1c:bb:92:71:d3:6d:9a:
         c8:2d:10:93:15:dc:2c:0f:3b:43:81:be:69:82:44:2c:5c:b6:
         47:fb:38:4b:60:2e:96:36:26:b3:ad:eb:03:61:1e:80:be:6f:
         03:e0:fe:83:cd:3b:c6:2e:60:09:13:d9:76:d0:d1:63:de:04:
         16:6d:47:d5:41:e6:0c:8c:4a:52:9d:88:69:7f:27:92:a4:ca:
         cb:a3:7e:2c:52:a3:58:97:77:b9:9a:4a:3b:13:24:1c:b6:6e:
         6d:a5:97:b2:94:4a:f1:23:68:f0:a5:f4:12:bb:51:54:49:0a:
         c8:df:f6:b1:56:09:4d:33:05:ce:ff:77:99:94:c3:e1:12:6c:
         e8:74:00:7b:b7:be:b8:2c:2c:3d:b9:2c:48:e6:39:98:30:5e:
         80:9f:97:24:1c:b4:85:20:75:db:32:2b:c9:86:10:63:6c:13:
         fd:ff:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:54:48 2026 by rpki-client