Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa
File:                     cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa (raw, json)
Hash identifier:          7iwxYo9AGzHhx0oY8Cf4OE8IaWPd6EvvaVla2MMW9lk=
Subject key identifier:   E6:92:0E:A1:E1:EE:76:A0:CF:B3:33:9E:51:27:1E:F7:F8:B3:61:92
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584EC371B49549CA0EA09055C500
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     202
IP address blocks:        170.188.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b4:95:49:ca:0e:a0:90:55:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=74051b58-6e25-4245-9011-a62dd298fe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:34:7d:b5:fa:9a:02:fd:7f:60:ae:a6:bc:
                    12:8d:fb:b5:8d:7a:b4:df:f3:cc:64:c5:b4:23:d1:
                    ec:85:d5:f9:ac:93:bf:1d:f5:4d:db:c5:97:3f:38:
                    44:6d:9b:b7:0c:7e:f2:95:64:59:72:8f:61:7f:29:
                    f5:19:bb:be:c4:00:57:79:8b:a3:48:e9:c8:ae:56:
                    39:0c:c8:f5:2c:8c:7c:4b:c7:b8:dc:6f:58:e3:28:
                    86:c4:7e:05:85:50:af:4c:15:ca:32:c7:ca:a0:79:
                    8d:84:27:b2:dc:44:a1:68:5e:3a:24:78:90:fe:3d:
                    84:1e:e0:71:01:e8:34:f1:66:de:b1:b3:c2:92:7e:
                    d6:6b:58:1f:f9:89:ca:98:9b:d0:76:1d:fb:17:1f:
                    a1:8f:ec:ee:6b:9c:01:ee:2a:f1:0f:bb:fb:a7:22:
                    3e:23:5c:28:4f:9b:f6:e9:71:11:43:e1:58:69:c9:
                    a6:8a:9f:15:aa:e7:34:c2:c3:03:e6:19:d4:26:69:
                    bc:6a:39:c8:6d:85:ac:b4:a3:b5:4e:0e:18:67:23:
                    75:68:83:73:e2:22:86:f7:32:64:4e:bd:18:27:fb:
                    57:52:21:1f:23:32:8e:ee:ed:fb:80:84:28:ce:c6:
                    ec:63:d0:11:75:b1:8f:cc:4b:5c:c0:b1:9f:30:d6:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:92:0E:A1:E1:EE:76:A0:CF:B3:33:9E:51:27:1E:F7:F8:B3:61:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/cb45d63c-d1bd-38a2-ad3f-6adfb6620306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:11:20:cd:21:6b:75:73:6a:54:21:df:f2:ba:2b:2b:98:58:
         bb:c2:28:86:ad:1b:2f:16:a8:46:19:57:ef:29:40:38:c7:49:
         9d:d2:e8:15:84:3c:4d:d5:67:93:a8:3f:c7:09:e9:e4:c1:92:
         36:57:9c:5a:20:ad:f4:be:15:b3:c7:5c:f0:2f:73:45:59:82:
         33:ea:16:dc:46:b1:09:70:4a:a2:dc:ab:95:11:4f:16:9e:a2:
         a5:4d:02:7b:25:51:24:07:68:c4:05:7b:90:c8:00:ee:50:d7:
         28:76:bc:f3:3d:5e:d6:a4:80:b9:3b:6a:8d:02:60:d7:73:37:
         be:16:c6:66:11:0b:93:2d:11:8d:b0:c3:1a:11:86:6b:12:8d:
         b6:76:11:71:2a:7a:02:47:0a:f1:4b:6a:d1:b9:13:35:b1:05:
         15:da:1f:14:3b:0b:95:09:da:07:07:2f:29:b9:da:67:e4:af:
         2e:7d:5a:1a:b9:e3:00:a4:09:d3:77:4e:e5:24:e5:7f:93:b6:
         fc:e9:24:ec:aa:d8:7b:2b:50:0f:c4:ad:d6:89:d7:ed:28:5a:
         27:79:d0:3c:7b:fa:da:f5:27:40:3c:32:02:95:b8:04:37:f1:
         a9:90:fe:f4:01:1d:86:28:07:4a:fd:44:a8:08:83:41:9e:2e:
         4a:10:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:20:46 2026 by rpki-client