Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa
File:                     c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa (raw, json)
Hash identifier:          ri/2vCF9dIDlcslXhk4NEQLVtuC6gV6OsKCI34jGaCw=
Subject key identifier:   72:21:18:2D:42:AE:0F:9F:3B:49:FD:80:D3:45:5C:11:35:EE:4C:9B
Certificate issuer:       /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial:       010D0C9F4328584ED59726DE6025730AEF87FF80
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa
Signing time:             Fri 14 Aug 2026 13:00:12 +0000
ROA not before:           Fri 14 Aug 2026 13:00:12 +0000
ROA not after:            Thu 12 Nov 2026 14:00:12 +0000
asID:                     14927
IP address blocks:        131.143.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:97:26:de:60:25:73:0a:ef:87:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
        Validity
            Not Before: Aug 14 13:00:12 2026 GMT
            Not After : Nov 12 14:00:12 2026 GMT
        Subject: CN=b66fa70a-6903-41a1-af87-49cd3a4b8028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:88:75:d8:12:ef:f0:5b:df:12:ec:bb:fb:
                    cf:3e:a7:5a:40:95:1e:f6:58:94:3e:0b:fd:aa:42:
                    2e:f1:c8:f9:d8:78:d9:5b:a9:b0:91:41:92:95:1d:
                    3d:1f:d8:79:d6:e9:be:16:e1:97:a6:e9:bf:00:16:
                    64:fc:ae:10:96:cc:de:ce:55:b9:cf:9c:dc:a8:b1:
                    87:31:3b:09:84:41:f2:66:c3:56:cd:cd:16:03:49:
                    89:ac:d0:a1:21:ae:a6:cb:8d:60:82:0f:e5:30:a3:
                    97:1d:0d:5a:32:ca:6f:49:23:d7:21:e3:3b:4d:c4:
                    11:90:cc:0c:da:7c:1b:81:67:58:8a:87:15:7c:10:
                    04:03:c7:73:ff:1d:4f:fc:df:d9:26:75:1a:7e:c0:
                    6b:aa:0f:96:55:e6:ec:da:24:62:9e:6b:c9:c9:8c:
                    7e:c8:8d:9c:53:a5:91:ff:72:da:d5:f2:06:d4:b8:
                    05:66:9d:2e:5d:d7:93:ee:fd:aa:5f:28:d1:1e:b7:
                    aa:99:d2:52:6b:07:f3:82:34:b9:d6:73:35:bc:04:
                    bf:0c:99:45:82:54:8c:32:18:c4:11:c4:63:a1:bd:
                    33:9a:71:ba:d1:e6:26:4e:0b:6e:c5:58:40:7f:4c:
                    31:93:f4:f6:7a:cb:f8:ea:6e:23:7d:a8:45:1b:73:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:18:2D:42:AE:0F:9F:3B:49:FD:80:D3:45:5C:11:35:EE:4C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/c5ba6f1c-18f5-377c-99f7-8c1428395f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:56:f3:e0:3f:23:21:5a:79:4a:80:a0:a6:87:d2:63:c0:d4:
         b0:35:a4:0e:0b:9e:4b:d8:19:78:52:f1:ca:3f:da:c5:d2:0d:
         f2:23:e4:39:04:6c:66:c0:80:4e:a8:bc:90:56:f4:c8:8c:a2:
         28:f8:fd:0d:59:39:d4:2d:55:55:f6:9f:64:41:9f:93:a6:38:
         bc:bc:c3:d4:20:be:be:f8:c9:5b:a3:33:78:1f:69:4d:74:12:
         0c:5e:00:1f:12:a8:bd:78:8d:06:c1:b6:62:1a:2c:5e:0c:4a:
         b3:c6:a6:7b:30:ac:9f:f6:d4:5d:c3:32:8b:db:fa:1d:b7:bf:
         ff:39:af:c9:75:0b:9a:5f:6a:44:18:c8:f8:e8:99:ba:36:af:
         67:b9:bf:ce:88:92:fe:86:a7:50:04:64:75:a4:0f:32:d1:8b:
         5f:b0:1d:86:25:a4:b7:04:2a:10:24:05:7b:db:f2:ef:8e:a1:
         e8:b0:a8:f9:e6:49:9c:30:97:89:8c:b1:11:70:a8:36:d8:d8:
         0e:93:6a:51:7c:30:e7:70:fa:8b:1b:35:85:ab:32:9b:8a:8b:
         b0:ec:cc:95:52:3a:45:fd:07:aa:a3:d4:1d:ab:7a:9e:59:13:
         39:0d:67:d7:9f:60:8c:d0:7b:60:80:24:de:33:20:f4:83:55:
         62:8e:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:21 2026 by rpki-client