Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
File:                     01949cb6-dbef-38e7-b253-ca7fee6dea68.roa (raw, json)
Hash identifier:          zvYWWuu/AAkcQhAq1oEBunaW4ho9IDW2eIFSchgn4Po=
Subject key identifier:   08:54:B9:64:BB:72:68:A9:00:62:4E:AA:AE:E2:A1:62:CB:C5:B6:D5
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F4975F0BE6C1638851A9F7800
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11233
IP address blocks:        162.255.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f0:be:6c:16:38:85:1a:9f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=356a6952-f774-44d6-81f1-3e45c5a226e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:91:11:21:0c:01:12:18:7d:45:d3:25:a6:
                    f6:99:cc:42:5c:84:b5:24:40:7f:e8:2f:2d:b7:df:
                    f7:60:40:4b:17:d8:3b:b3:a8:20:c0:2b:ef:b1:a9:
                    c6:d7:c6:9c:46:0b:de:65:55:3c:19:0e:d4:f8:64:
                    d2:7f:25:83:6e:ba:5f:71:cd:57:a4:0a:e9:bf:52:
                    32:73:84:3e:2d:3f:32:d8:82:ad:bf:df:65:3e:40:
                    86:45:28:6d:fd:ab:59:33:fb:d7:ca:1e:ce:f9:64:
                    d2:5f:24:b8:c5:20:67:a0:c0:00:fb:24:8f:c1:70:
                    93:33:35:7b:f8:46:fa:0c:4c:87:4d:f9:71:a3:0f:
                    2d:ff:16:99:a2:04:a4:4a:87:3f:d5:2e:9b:04:d3:
                    e1:40:be:31:68:21:d5:aa:da:fc:56:13:ef:4f:6d:
                    0e:77:bb:cf:63:e7:77:ad:60:ec:c0:cc:70:88:cb:
                    b4:3e:2b:0c:86:b2:c1:9e:ae:be:3c:af:b0:1b:e4:
                    cf:2a:69:32:4c:0e:d6:fa:8e:7b:f7:a4:ae:a4:1b:
                    53:cf:6f:38:b3:1f:2e:da:58:f8:6b:6b:60:6e:48:
                    85:ac:4b:84:74:31:c6:b9:71:78:4d:63:8f:0d:36:
                    29:e0:c5:9d:f5:64:a2:28:ef:ce:8e:b6:ca:5d:01:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:B9:64:BB:72:68:A9:00:62:4E:AA:AE:E2:A1:62:CB:C5:B6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ae:4e:71:a6:e8:94:24:fa:b4:c5:21:fc:be:e1:c6:93:30:
         8d:ac:0b:7e:7c:de:e4:df:07:41:e7:18:4d:b2:c7:68:c7:80:
         86:7d:12:2f:6b:b3:19:3a:8f:70:9b:08:0d:f7:9a:42:69:d9:
         f0:e6:2e:b9:02:2c:62:7c:ba:51:12:98:1e:ee:c4:16:2b:5f:
         ce:e8:e2:26:90:00:ec:d5:fb:37:4e:fe:b7:ce:a1:61:ba:30:
         40:f0:9d:cf:6d:43:42:8a:34:9d:7a:48:92:7f:9e:5d:60:8d:
         72:8c:3f:07:eb:f4:ec:30:b4:5c:9a:1d:79:be:f5:ba:c5:74:
         a7:53:b3:10:ed:77:c6:d9:ed:8b:54:d6:59:3b:20:d3:c5:ed:
         51:b5:7b:bb:1a:69:60:d2:4d:1f:bd:c4:6c:fd:17:13:0d:19:
         d7:ae:13:40:a9:f0:b6:f9:26:56:85:eb:52:eb:5d:b1:34:99:
         74:4b:4e:b2:5a:91:94:fd:19:64:fa:49:2c:0d:09:5e:a0:88:
         4f:5f:61:18:41:23:26:26:69:20:d6:72:41:f1:b6:ce:8f:16:
         f3:33:35:6c:49:83:b5:d5:6a:d6:e1:f3:29:77:4b:11:59:36:
         95:5a:fb:97:d9:1d:ac:fd:61:70:b3:ac:4d:ff:4b:d5:a0:c9:
         9f:4d:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:01 2026 by rpki-client