Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/0542afe5-57db-3a2a-bed9-df34a11aec43.roa
File:                     0542afe5-57db-3a2a-bed9-df34a11aec43.roa (raw, json)
Hash identifier:          aw9Uc8jwrDfDyCdobRCsPtyKeQ5pod45/YElV1okC2Q=
Subject key identifier:   36:86:C4:83:09:D9:2F:39:DB:88:A4:1D:E7:22:7B:3F:BD:31:99:11
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584F024227BA9B22575111F2C300
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/0542afe5-57db-3a2a-bed9-df34a11aec43.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     11052
IP address blocks:        199.190.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:27:ba:9b:22:57:51:11:f2:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=4893a47e-09cf-4263-b12c-bf30c0c303c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:fa:bf:a9:dc:e1:7a:0a:d4:b2:8f:4a:66:
                    f5:55:65:40:b9:04:f9:f5:d6:5e:4a:a7:5e:a2:c4:
                    72:4b:8a:df:ab:70:74:60:32:fb:6c:9d:3e:72:05:
                    a1:24:01:fa:0f:fa:00:14:c0:af:9c:0b:da:65:80:
                    bc:f9:3e:69:2f:b2:37:99:dd:09:dc:24:0b:32:e4:
                    6d:be:7a:37:8b:4b:7b:1a:47:4a:16:fd:cd:ff:33:
                    b6:45:f6:94:2a:bd:0d:b8:45:ca:1a:4a:aa:d0:d3:
                    29:f6:93:ae:d5:b2:95:69:4b:d1:6c:d0:7d:35:53:
                    30:95:6c:b7:41:c1:08:a7:a3:78:13:64:06:2e:73:
                    b7:0f:96:34:81:a8:8c:4b:ce:5d:1f:1d:82:92:50:
                    ab:44:b1:2e:8a:98:5d:2b:03:fd:d8:24:c1:c2:cd:
                    06:8f:97:03:7a:46:82:d9:a3:36:60:75:1a:9f:51:
                    fe:5c:6b:57:0e:b1:97:77:8a:71:e9:38:07:80:d7:
                    e5:d5:5b:ac:8e:bf:40:c9:59:66:94:0e:20:ba:08:
                    e3:67:e1:8a:4b:f3:28:92:cf:0a:28:58:aa:80:bc:
                    76:b0:8b:bb:74:8b:03:8e:b3:4c:3d:c2:ee:72:78:
                    d5:0a:d4:d6:22:6d:b1:e1:cf:2f:02:be:17:94:3b:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:86:C4:83:09:D9:2F:39:DB:88:A4:1D:E7:22:7B:3F:BD:31:99:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/0542afe5-57db-3a2a-bed9-df34a11aec43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:9e:3f:31:ef:5a:f2:96:69:29:88:17:43:47:12:00:a2:
         ca:aa:f1:8e:f5:4e:ae:40:0a:fc:88:2a:46:c2:69:37:50:1b:
         5b:7a:74:99:11:f0:50:1f:82:c3:4d:15:2a:1a:d0:46:64:a3:
         ad:a4:09:79:5f:97:79:ab:6e:99:64:b5:f6:6c:b0:29:83:82:
         28:9c:95:e5:be:6b:8a:a0:2e:0f:74:9b:b0:01:5b:f5:52:24:
         79:2e:3e:a8:4a:55:58:03:7e:09:fc:33:50:9e:56:c5:27:b0:
         39:0d:a3:7e:49:32:f9:83:98:33:a5:8e:bc:44:c9:b8:87:72:
         54:1c:05:c9:97:8c:72:18:8e:51:4a:07:9b:4b:26:8c:d7:d9:
         a2:5d:23:bd:fe:60:28:63:4b:fc:97:6c:15:7f:95:64:41:29:
         2b:55:71:02:f1:a3:ae:ab:95:3a:ca:f0:8e:59:bc:2c:00:f0:
         20:bb:50:df:de:ab:6c:1a:0c:19:d9:c1:f7:f5:e0:ea:91:a7:
         68:ac:7e:9c:ba:2b:86:65:24:e3:e3:e4:d2:25:5a:27:69:24:
         40:19:35:9e:f9:91:3c:d9:58:07:33:a3:4b:f7:ff:7f:44:0d:
         b6:c8:64:ad:cd:50:6f:92:dc:06:8c:d0:2e:e1:fd:0b:74:d9:
         41:66:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:20:34 2026 by rpki-client