Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa
File:                     2005afc5-6398-3704-ae6d-145db2a4d7af.roa (raw, json)
Hash identifier:          SLyNOQfJuC9wzBoaF/FbP01T4YaiwXVMSz3M5QTXg6Y=
Subject key identifier:   D1:9E:3C:11:22:B4:FD:DF:7C:A0:89:7C:52:FA:61:19:05:1A:F8:3A
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584F35E7CC338A63803B241F7700
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     16504
IP address blocks:        143.170.0.0/16 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:cc:33:8a:63:80:3b:24:1f:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=b9978aa5-3283-429a-a18f-1367db3fd7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:bb:b4:88:87:d7:50:96:48:c8:03:1f:75:
                    de:35:00:4e:2a:ef:41:f2:36:24:e3:d2:4d:24:48:
                    43:90:f4:05:19:6f:13:13:66:cb:19:3b:d8:20:6e:
                    c6:ec:43:38:89:60:91:6a:6e:92:f9:b4:02:d2:79:
                    31:4b:b0:2b:74:8a:64:9d:16:c9:74:59:82:80:d1:
                    8b:7e:05:a7:f8:55:45:33:9d:41:9c:3f:24:49:8f:
                    54:ae:ac:13:7c:2e:65:9f:be:b5:3a:5b:c5:44:9e:
                    44:a8:36:a3:4e:19:b3:81:4b:67:13:b9:3d:be:53:
                    0b:04:09:12:fc:00:1f:ec:cb:e7:67:0e:21:2d:a8:
                    c1:57:c6:68:69:8f:f0:1e:70:f4:3e:e1:cd:08:cf:
                    fe:93:ee:72:a0:83:fa:b4:f5:4d:63:20:9c:d4:42:
                    be:30:27:35:f6:ad:b1:31:9a:37:63:92:56:a7:24:
                    ba:c4:be:3a:6e:bb:53:f6:1b:8e:3a:c0:cb:65:1f:
                    98:30:07:7e:dd:13:42:45:20:8f:b1:20:c2:55:73:
                    10:7e:36:ee:69:0e:7d:fc:8c:db:99:c8:64:4e:99:
                    7a:69:b5:30:25:4c:b4:62:db:b1:d7:a7:d5:ef:a2:
                    44:90:5d:ab:0e:2e:df:6a:4a:c1:41:7c:98:8d:7c:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:3C:11:22:B4:FD:DF:7C:A0:89:7C:52:FA:61:19:05:1A:F8:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:22:ed:9b:31:ba:d7:b0:ce:e3:3a:a6:64:d8:2f:93:fd:
         d2:18:3f:f9:04:bb:48:e6:a1:93:e7:44:5e:b6:02:79:9a:00:
         a3:56:25:82:d9:a8:c8:f6:94:b9:99:ba:b3:d7:d9:60:b9:25:
         6f:1e:7e:65:e4:f2:b6:20:76:38:84:65:9b:d0:05:1e:69:2f:
         6b:11:35:e9:36:2d:97:10:b8:04:50:73:f7:8a:94:c3:be:3f:
         fc:f6:ff:f2:2f:6e:76:47:dd:f2:a9:28:9e:1f:4b:d7:e2:c5:
         b6:30:f3:5e:ab:bb:8d:39:4b:8d:eb:88:0e:b2:d9:64:2f:52:
         69:49:66:54:c1:26:31:3c:b8:d8:d9:66:03:51:74:4e:a7:ac:
         6e:ea:c7:a9:3d:ca:f2:24:41:64:85:51:05:cf:1b:25:c9:49:
         54:1b:48:35:50:0c:1e:dc:5f:9c:dc:82:04:85:9a:1e:1f:a7:
         40:8d:69:3f:28:79:16:49:76:84:b5:e6:43:56:33:df:69:b6:
         69:49:c2:ac:74:d9:f6:0c:e4:21:d9:15:6e:0d:50:36:f3:d4:
         53:a4:52:90:96:49:f1:2a:29:7e:1d:e1:b3:cd:3f:04:b9:55:
         69:dd:e0:97:b7:af:e1:1a:eb:6f:7e:97:1f:9a:e6:80:14:32:
         fe:fa:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:19:23 2026 by rpki-client