Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/aec6612d-ac29-348a-b441-f2fd1caa1da1.roa
File:                     aec6612d-ac29-348a-b441-f2fd1caa1da1.roa (raw, json)
Hash identifier:          +Hlb7HiI0DSiojA0UMwN6VpisAJ/SUnCcULd5CefetU=
Subject key identifier:   0A:A6:56:D5:2F:E6:96:07:29:D1:7F:75:D3:E9:45:6F:6A:39:63:DA
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584EBA916E257AC89086D0B4B340
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/aec6612d-ac29-348a-b441-f2fd1caa1da1.roa
Signing time:             Tue 04 Aug 2026 20:41:53 +0000
ROA not before:           Tue 04 Aug 2026 20:41:53 +0000
ROA not after:            Mon 02 Nov 2026 21:41:53 +0000
asID:                     40933
IP address blocks:        216.129.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:91:6e:25:7a:c8:90:86:d0:b4:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Aug  4 20:41:53 2026 GMT
            Not After : Nov  2 21:41:53 2026 GMT
        Subject: CN=dd2c0f2d-d43b-4b43-9d17-d97e931e598d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fd:c7:3a:18:70:9e:d2:8a:ba:27:73:9b:88:
                    2f:39:15:5e:37:28:2a:7c:3c:ed:0d:1a:46:fc:37:
                    c2:0e:f9:fd:5c:55:a2:bb:68:56:80:9c:30:97:4b:
                    13:09:cf:7c:86:2b:75:c9:fb:75:d7:0c:af:f1:bf:
                    89:22:fa:60:85:b9:b3:dd:ec:e2:45:d9:a2:39:7e:
                    2d:f4:39:cf:b1:14:33:13:28:f9:47:c5:60:c2:b8:
                    20:d3:8e:e7:d7:93:24:f7:80:92:67:ca:ab:e5:1e:
                    75:fd:42:ac:ba:6b:e3:00:b2:61:26:91:ae:91:48:
                    da:22:2a:08:a3:54:69:9e:7c:db:da:8b:a8:3f:df:
                    87:fc:43:8e:59:6b:5e:f9:89:14:21:6b:fd:76:76:
                    08:d2:67:a5:16:4f:9e:1d:a2:43:c9:65:bb:ba:7f:
                    67:1b:0c:4f:7c:34:a4:31:97:2d:94:69:52:6a:fe:
                    8c:43:fa:84:8c:ee:98:48:de:7e:7b:1a:aa:92:ed:
                    2b:21:ee:3c:26:8c:16:80:03:01:2b:0d:fd:f7:2f:
                    79:16:9e:fe:e8:a9:4d:f0:5d:69:b7:aa:17:c3:e4:
                    49:90:89:3a:42:df:e6:91:41:81:b2:d6:4d:59:92:
                    b0:51:1c:ef:8e:ca:3d:64:24:5b:1b:b7:47:68:e1:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A6:56:D5:2F:E6:96:07:29:D1:7F:75:D3:E9:45:6F:6A:39:63:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/aec6612d-ac29-348a-b441-f2fd1caa1da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:50:50:db:3e:0f:e2:63:3e:ca:c9:c3:89:76:23:63:dd:
         f5:87:e2:ab:f1:4a:6a:74:16:e2:a5:39:40:9e:ce:15:49:29:
         59:c9:d0:b7:3e:5a:f4:da:d7:c0:e3:cd:2b:ef:81:61:4d:08:
         91:a4:e7:3c:28:14:7a:da:82:8d:8a:dd:18:10:79:5f:ed:a6:
         e3:63:43:bc:55:25:10:38:a5:89:54:29:88:16:ff:d8:42:0d:
         df:f9:a3:89:aa:c9:e3:a4:13:6c:85:7c:38:af:c0:f6:bf:6a:
         10:93:9f:d9:2f:98:44:c1:ed:7f:6a:00:a9:d7:90:a1:e5:88:
         d0:64:29:13:a7:26:70:f2:57:ad:fc:36:62:e0:33:a6:6f:a1:
         05:03:c7:ae:0b:95:7d:a8:ba:a9:8c:bf:78:95:30:69:4a:cb:
         05:8a:a4:65:ac:0b:0f:d0:b7:6a:f9:89:90:1b:e3:f1:6e:8e:
         d6:48:c2:a6:b4:6e:9b:82:7b:12:0d:d7:15:ee:07:c9:22:24:
         54:ec:f9:7e:13:1c:dd:f0:50:37:18:ea:d6:17:02:2b:3f:f6:
         90:80:9b:02:d2:9e:d5:af:f8:10:c9:a1:b9:63:92:45:a6:04:
         ba:4d:2b:fc:27:42:f4:dc:9e:9f:fa:8b:b5:a6:3e:bd:77:68:
         53:22:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:54:48 2026 by rpki-client