Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa
File:                     a04f4449-a649-3911-bf78-79e06327d3a8.roa (raw, json)
Hash identifier:          WgfgJbWUpaA6y+oNlFEq3ZsM7M6ls4lG0zFeHuJEIhM=
Subject key identifier:   17:46:D7:BD:6E:BE:1E:D6:7B:AE:53:2A:F8:30:C1:AC:0E:EC:02:BC
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584ED431E9CD24AA824546844880
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     11650
IP address blocks:        216.195.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e9:cd:24:aa:82:45:46:84:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=1799d5dd-3420-4a26-9251-4612a543bb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:1e:54:aa:45:d3:47:b9:07:9d:92:14:4f:
                    35:76:ef:87:bc:86:db:15:8f:50:af:65:a0:83:72:
                    3b:9f:34:c6:66:b8:cb:0d:3f:16:65:87:3c:61:89:
                    47:5d:40:f7:6f:03:d6:66:ca:6b:72:f1:ac:53:d3:
                    1b:b0:60:76:55:c3:12:e5:3b:5b:2d:29:8b:04:dc:
                    4d:dd:cf:3d:f9:b9:ee:af:bb:93:14:77:90:34:79:
                    96:d4:a0:e5:97:b0:03:93:fa:4d:ef:8b:4c:e6:c0:
                    7d:5b:46:73:d6:47:0e:6f:29:df:3c:9a:0b:94:9f:
                    59:7e:50:9f:d7:4e:84:3f:dd:8e:49:06:da:2d:90:
                    2f:bb:c8:03:54:94:bb:14:e9:a1:d2:b8:77:fd:0b:
                    83:8c:1a:12:62:a6:ec:21:ca:3b:f3:49:e3:1a:e3:
                    ae:94:d7:c1:19:14:a2:df:4a:23:ab:a0:7e:cd:20:
                    ab:5f:2d:19:05:1a:e2:09:58:f9:0d:59:25:3e:9f:
                    07:19:bb:0c:b9:55:55:23:34:24:bf:28:d6:3e:89:
                    80:84:5b:41:72:44:e1:63:f1:95:50:0c:fc:d4:49:
                    5a:47:67:0b:d7:71:f0:82:fa:98:2f:48:35:8f:81:
                    3f:6e:97:f3:31:78:cd:06:13:cc:c0:a9:14:b4:85:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:D7:BD:6E:BE:1E:D6:7B:AE:53:2A:F8:30:C1:AC:0E:EC:02:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.195.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:94:14:8d:1d:68:59:10:5f:97:f2:ca:e1:85:23:a1:a8:21:
         b8:4e:ab:6e:bc:58:e2:d7:36:5a:7c:35:b3:47:fa:cc:f7:a4:
         5e:99:e3:37:23:13:8a:2a:c7:bb:8e:e8:e7:ed:ad:70:1d:ee:
         d5:d0:7a:b6:c6:bd:44:4a:b6:be:d8:5e:9f:f7:be:67:2c:63:
         09:30:58:64:6c:bb:54:57:92:31:3d:88:c1:f7:ad:29:e6:09:
         a0:c8:b6:df:f6:3d:46:43:2c:ef:e6:d1:a3:93:a0:bf:05:2d:
         87:80:e4:89:91:a6:15:71:20:1a:6a:46:81:b5:c4:d0:48:98:
         78:6a:22:cb:f3:ef:97:59:7e:3a:8c:5b:a4:7c:46:dc:6f:c4:
         6e:78:a7:24:68:a6:49:63:37:2c:2a:35:8d:68:ab:76:3a:6c:
         a0:d5:d5:9e:16:29:e4:25:b6:4e:18:64:6e:a8:96:66:2a:87:
         64:9f:ac:b8:07:42:5f:8d:c7:45:27:73:e2:94:97:c5:95:22:
         1a:19:b2:5d:8e:73:e6:ae:99:22:01:e1:74:a3:99:c6:e0:49:
         2f:87:e1:73:29:b3:30:cb:e9:bf:d9:a0:27:25:27:cb:f5:2e:
         6d:24:b3:c7:70:fa:23:0f:d3:a9:55:67:bd:3c:bb:2e:e6:8a:
         a5:71:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:02 2026 by rpki-client