Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1a75b251-c2b2-3d8e-b044-5025ac345804.roa
File:                     1a75b251-c2b2-3d8e-b044-5025ac345804.roa (raw, json)
Hash identifier:          tVIOQyGEDdPdehIut009vxI22AkJWj8ynMVf05ldhPM=
Subject key identifier:   98:9E:BB:6B:CE:B2:61:D1:A0:34:A8:99:90:CC:28:30:FF:BB:E4:76
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EF9E222209613377CDB679D80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1a75b251-c2b2-3d8e-b044-5025ac345804.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     19886
IP address blocks:        171.162.208.0/23 maxlen: 23
                          171.162.208.0/24 maxlen: 24
                          171.162.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:22:20:96:13:37:7c:db:67:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=057fef57-5e72-4e7b-9c26-602e900cf115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:9e:97:d0:70:a9:97:03:47:7f:d8:93:b3:
                    64:04:c7:6a:7d:41:01:f0:d3:20:4a:6e:3b:d4:0b:
                    4a:71:6d:9c:ea:13:1d:bc:54:f5:b1:17:9f:26:13:
                    d0:0a:4f:6b:30:a7:4f:af:80:f7:ab:5f:c3:78:51:
                    c0:36:5d:1b:cb:34:46:f7:9d:f4:b5:d2:e5:4b:21:
                    c2:fb:de:cb:2f:cd:85:76:26:2c:94:08:f9:03:0d:
                    41:18:d9:c9:c6:03:1c:a4:47:64:a4:7a:11:28:60:
                    0c:65:6a:c3:38:54:e8:c4:fb:03:95:19:df:6a:aa:
                    f9:df:c3:a4:e5:a8:a4:65:06:41:cf:00:0d:95:1b:
                    2c:3b:c9:23:7d:e1:15:f3:c5:25:45:80:1d:f9:03:
                    54:a4:51:58:d5:eb:17:dc:78:7b:5f:c1:a5:82:83:
                    54:dd:0e:f2:b9:0e:51:d3:e8:29:22:13:d7:f5:7f:
                    af:76:fd:7d:3c:34:28:a0:1a:9f:d0:62:d7:22:4f:
                    22:55:27:ea:eb:f5:d1:5b:5c:d2:3f:64:f7:ac:f9:
                    2b:4f:9b:a1:d5:4b:f9:e6:74:16:c2:d5:fd:d3:81:
                    71:7f:1f:1c:ef:43:66:0b:9b:a0:b2:30:2d:8b:3c:
                    74:33:97:65:ed:fc:de:61:bb:fa:01:95:99:5d:fd:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9E:BB:6B:CE:B2:61:D1:A0:34:A8:99:90:CC:28:30:FF:BB:E4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1a75b251-c2b2-3d8e-b044-5025ac345804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:0b:f6:4e:92:54:58:2a:66:3c:ef:e7:56:39:04:ea:f2:
         f7:90:63:09:c0:5d:61:46:c4:30:83:bc:36:c2:a6:c1:0e:f6:
         c3:89:8a:cd:24:1e:32:19:51:e1:fd:79:ef:ee:fb:df:af:b3:
         58:10:f7:99:cc:27:ad:48:b5:8e:bf:12:29:12:5e:c0:a3:51:
         d7:81:e0:58:80:86:b9:73:11:61:bb:4d:27:e7:59:eb:3b:a1:
         92:c9:52:0d:ee:2a:5f:b1:51:72:7f:fb:f7:d2:e5:54:8d:32:
         5e:70:65:5d:ca:4a:06:e9:1e:9c:e7:5c:80:d5:58:d1:ea:72:
         90:31:b6:07:57:31:7b:13:e9:55:22:7f:c2:f1:ae:12:38:d3:
         4b:79:50:23:45:61:0f:6d:6c:69:9d:16:3d:43:58:6f:8a:6c:
         91:43:47:e7:9b:e1:e0:58:c7:83:af:73:1c:af:47:4e:19:eb:
         2c:1a:1b:9c:0a:54:82:ae:aa:cf:24:08:8e:c9:a5:a7:fc:d1:
         90:a5:50:f7:ae:46:ca:55:88:67:21:cc:c5:7e:7b:25:66:b2:
         9f:1e:36:2a:41:43:01:0e:5d:89:81:e8:c1:73:84:b7:fd:52:
         e8:0d:76:97:89:62:31:6a:10:dd:45:77:8d:a0:99:ba:61:ee:
         b1:8d:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:30 2026 by rpki-client