Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/caf0b8e4-c9cd-3e77-821c-49fd4eb522ec.roa
File:                     caf0b8e4-c9cd-3e77-821c-49fd4eb522ec.roa (raw, json)
Hash identifier:          xZ5HumtmPcwcosKKxgzPXHuH2f3znRv7hs5Gjba9VMg=
Subject key identifier:   BB:84:2D:BE:C1:8C:EE:A2:AE:25:6E:0C:90:BE:C2:37:F9:CB:15:F2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EBB11AE9CF4396D315E219F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/caf0b8e4-c9cd-3e77-821c-49fd4eb522ec.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     62844
IP address blocks:        216.119.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ae:9c:f4:39:6d:31:5e:21:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=bb6d1814-8487-4a69-9d41-4846ebffa1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:00:60:a1:11:e1:ea:c4:22:84:b2:2f:cd:
                    2c:04:d7:15:07:e9:6f:e5:e8:79:9d:90:fa:72:d2:
                    09:50:f6:b0:df:56:9c:48:b2:1b:a3:44:7d:34:03:
                    93:c8:2b:04:a6:7d:2b:6e:04:28:d3:37:57:61:09:
                    16:cb:8f:23:33:00:c6:f7:a4:eb:3e:1a:98:a1:0f:
                    e1:0c:16:92:55:67:de:b7:c2:ec:f0:39:14:e7:d6:
                    1c:a1:0c:a6:79:5f:b5:ab:06:01:d0:36:4f:6d:42:
                    6b:00:60:4d:8a:c7:cd:f4:9d:e4:ff:92:03:a9:0e:
                    bd:94:f9:bb:44:2c:49:3b:68:0b:b6:d3:b9:a7:ba:
                    b5:b7:c7:16:e4:4e:e1:83:02:d7:e1:a2:df:48:13:
                    be:50:eb:5c:a7:de:a6:6b:be:26:72:b8:81:2f:c3:
                    fd:51:03:4e:58:56:49:67:f0:48:6d:6e:71:ce:8a:
                    2f:5a:ad:ab:34:75:46:b7:fb:77:52:ee:66:44:79:
                    10:06:8a:02:20:9a:90:07:29:84:23:94:a1:7c:4e:
                    a7:2a:fd:e5:68:a6:a6:34:a4:03:7a:83:f7:83:d0:
                    64:7a:ba:c3:31:87:58:e9:83:e7:41:83:aa:31:ff:
                    e0:c2:cf:09:52:96:0d:ef:79:3f:2d:72:a4:b8:25:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:84:2D:BE:C1:8C:EE:A2:AE:25:6E:0C:90:BE:C2:37:F9:CB:15:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/caf0b8e4-c9cd-3e77-821c-49fd4eb522ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0d:d6:21:c9:a4:57:c2:63:c7:69:90:b0:ae:c4:df:b7:8b:
         be:fd:11:0b:2d:8a:b7:bf:8a:7c:70:40:f7:d7:d6:ee:b6:ce:
         af:be:4f:c3:b5:b4:18:1f:60:25:75:8f:29:04:bc:87:fb:28:
         07:8d:60:7a:0b:15:b7:7f:23:ca:88:b2:40:16:7d:58:38:1d:
         d8:99:55:a7:ea:20:08:9d:cb:42:73:2f:b5:a9:f3:71:5c:ce:
         54:aa:a7:f9:53:89:00:30:ed:15:d4:88:85:f6:13:2a:65:db:
         5a:c4:f3:ce:b3:20:2b:79:e0:db:b0:7d:14:86:40:dd:4e:98:
         ec:dd:46:21:4f:81:b2:c2:3d:93:5b:f0:ac:6b:8e:ea:41:c8:
         42:bc:26:7c:91:bc:9d:8d:53:c1:f0:32:3f:72:a6:c2:8c:b1:
         78:d6:a2:99:40:80:48:fb:98:15:82:ea:73:9e:9e:6a:11:e8:
         59:68:3c:c4:38:07:43:64:17:4a:5e:8d:dd:67:79:cd:54:37:
         14:1d:1b:0c:cc:6a:64:52:3c:6b:ea:9c:43:93:e8:3c:0e:86:
         f5:9c:2c:2e:a9:ef:98:54:7a:a1:4c:22:7e:75:c9:e0:dc:66:
         da:96:bb:a7:c7:ae:dc:38:9f:fd:b7:ea:d8:68:66:28:17:32:
         89:26:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:41:40 2026 by rpki-client