Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/039f97e0-47a2-358e-a3d1-951de84882de.roa
File:                     039f97e0-47a2-358e-a3d1-951de84882de.roa (raw, json)
Hash identifier:          52N/6D8PojdMeWEkDR7r3bcUR23j+WVMOBfuBJxPsX0=
Subject key identifier:   70:43:FE:70:2B:95:DD:96:9F:38:35:22:C3:4E:23:DF:8E:03:C3:CF
Certificate issuer:       /CN=4875c324-edea-4433-b1d5-4567eb78fa1f
Certificate serial:       010D0C9F4328584F6DBD68BEE94C06AC4E9A7C00
Authority key identifier: B7:BF:5C:E9:F6:DC:CA:D1:FF:D6:E6:D6:E9:94:84:82:7D:F5:98:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/039f97e0-47a2-358e-a3d1-951de84882de.roa
Signing time:             Thu 08 Oct 2026 01:00:11 +0000
ROA not before:           Thu 08 Oct 2026 01:00:11 +0000
ROA not after:            Wed 06 Jan 2027 02:00:11 +0000
asID:                     397449
IP address blocks:        167.150.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:bd:68:be:e9:4c:06:ac:4e:9a:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4875c324-edea-4433-b1d5-4567eb78fa1f
        Validity
            Not Before: Oct  8 01:00:11 2026 GMT
            Not After : Jan  6 02:00:11 2027 GMT
        Subject: CN=d7779548-2f90-4cca-b4c7-e231638c9663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:9a:56:b7:80:c5:fe:ef:9f:27:77:cd:f8:
                    90:10:8d:69:0c:ea:aa:7f:97:4b:9f:69:7e:43:93:
                    a3:7f:f3:8a:f8:da:b4:1d:6c:ba:98:92:93:6a:2e:
                    2b:65:90:92:1f:fd:12:7c:d3:c5:00:74:3b:b0:dc:
                    3a:4f:d2:22:c7:b7:61:b7:06:76:94:8b:da:87:40:
                    53:09:8e:64:05:d2:78:16:c0:0d:e3:7f:5b:46:b2:
                    f8:35:58:6b:62:93:f4:ef:58:82:38:82:b3:f5:e8:
                    84:75:d5:b9:a3:c0:60:50:91:cb:0f:29:97:bd:de:
                    87:2a:f0:bd:c8:85:98:f7:76:3a:4a:fd:7f:be:9c:
                    a2:1e:f5:4c:a7:50:25:16:17:e3:4e:4c:95:1d:47:
                    2d:dc:50:e2:f4:c7:3f:13:d0:4a:12:27:99:6b:b7:
                    85:88:5a:21:08:9d:15:a7:eb:19:bb:b3:b1:16:01:
                    7e:cf:b3:c9:9a:98:ea:61:be:27:f3:33:7d:ac:d6:
                    2c:5e:59:28:64:f7:e6:37:23:67:c7:a9:a0:c2:20:
                    24:23:d6:03:1f:25:4e:b0:b9:22:41:0d:47:6e:11:
                    d7:74:b7:cd:a4:62:51:86:d9:54:3c:05:42:04:56:
                    9d:30:4a:5c:9d:a9:1c:c6:34:fd:78:bb:a8:16:a5:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:FE:70:2B:95:DD:96:9F:38:35:22:C3:4E:23:DF:8E:03:C3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/039f97e0-47a2-358e-a3d1-951de84882de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BF:5C:E9:F6:DC:CA:D1:FF:D6:E6:D6:E9:94:84:82:7D:F5:98:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:00:8b:c4:5f:7b:18:e4:49:94:21:ce:88:38:bd:c7:62:f1:
         31:45:a7:3f:5d:07:3d:b4:76:31:cc:68:c1:68:4d:ce:9f:75:
         11:1d:17:43:0f:b6:81:05:99:fb:8a:e3:2b:43:ef:4c:e6:91:
         4b:c1:07:06:57:d6:5c:f2:f4:8d:3c:f3:5d:16:cc:57:21:79:
         e8:47:80:ba:d5:f6:48:9a:cd:5b:06:9a:17:8c:61:d3:f9:7e:
         f7:b9:09:80:6d:ef:8b:9d:ab:8e:99:29:e9:92:92:d1:76:f5:
         1b:e1:af:8c:1c:69:3e:6d:78:d0:f7:3c:62:0a:73:92:9c:3f:
         65:46:20:05:94:47:31:75:9b:aa:5a:8c:38:a1:ac:8d:61:08:
         72:43:9a:fb:84:53:9b:cd:97:7b:bb:16:21:40:3e:38:83:30:
         81:9f:56:c7:9d:0f:73:fa:cd:50:b2:75:72:04:ec:90:68:8f:
         12:ee:eb:70:6b:d9:b6:34:16:e1:3b:92:2a:5b:01:f9:7e:39:
         cb:4e:79:88:ac:14:3c:5e:e5:95:ca:9a:2b:9c:4c:b9:ad:60:
         f9:74:72:04:eb:92:aa:41:23:5d:ef:8f:db:55:f4:37:d4:78:
         82:8a:f8:62:fb:49:e4:5c:1d:89:ec:eb:f9:67:d2:b9:0d:5a:
         ad:7b:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:57:08 2026 by rpki-client