Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c8298ee6-0379-39f8-8713-fadb808d3779.roa
File:                     c8298ee6-0379-39f8-8713-fadb808d3779.roa (raw, json)
Hash identifier:          8MiujUxkKM5mgd02j0FuqAjD7oimXzDqqvHMya9zjsE=
Subject key identifier:   A2:7A:19:53:33:50:D8:99:AE:17:A7:5A:12:D5:1C:11:1D:3E:E7:91
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584EE0C1E34D1616F93EF25ECA40
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c8298ee6-0379-39f8-8713-fadb808d3779.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16527
IP address blocks:        162.211.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e3:4d:16:16:f9:3e:f2:5e:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=ddb2b52c-d282-4f96-8951-82fc9ce97481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:9b:7b:02:51:87:e6:7f:30:b9:61:f5:34:
                    c4:ce:b2:6c:48:2e:f9:60:2f:b8:17:5e:eb:50:c3:
                    1b:70:2a:6f:c4:3c:e8:3c:94:d7:b4:98:4f:54:6f:
                    7e:3b:2d:f2:54:38:84:7a:ce:33:28:7e:28:e7:76:
                    f9:74:a7:63:6c:09:23:80:2a:b4:a4:91:92:23:9d:
                    73:41:77:e8:62:a3:f6:3e:61:aa:a0:85:3c:1d:0d:
                    c8:d8:be:5e:6a:44:26:aa:43:2d:4a:98:cb:3c:e4:
                    04:a1:65:b4:42:6a:9b:9d:fb:09:b5:fe:8f:05:73:
                    10:ac:92:18:56:bc:91:42:de:46:0d:b4:cf:2f:ae:
                    6b:b2:8c:10:55:82:5c:fd:e8:5e:4a:fa:44:89:28:
                    a7:49:8f:a9:15:6f:dd:d6:8e:49:58:3e:e1:e4:e7:
                    2e:bc:d9:aa:9b:a0:60:89:f7:48:44:d4:e8:82:16:
                    bb:a1:db:b1:0d:4c:16:fa:ed:a5:af:3a:3f:79:99:
                    ad:c7:ca:27:57:6d:f7:d1:e6:2b:6d:e9:a3:9c:09:
                    78:9d:c8:cb:45:85:9d:8b:65:aa:1a:b1:d1:28:18:
                    06:89:95:92:be:00:b8:d5:28:d5:b1:49:78:5a:d5:
                    67:ba:6f:34:44:2a:2d:33:c6:8a:81:49:88:52:62:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7A:19:53:33:50:D8:99:AE:17:A7:5A:12:D5:1C:11:1D:3E:E7:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c8298ee6-0379-39f8-8713-fadb808d3779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:da:81:0d:68:9f:0f:60:45:f3:60:c6:78:95:e5:f6:78:2f:
         72:2b:8f:e4:06:6c:99:6d:17:60:c8:41:6f:59:54:1b:6a:5f:
         c1:cb:37:3e:43:a1:6b:37:4a:29:5f:a5:39:70:64:68:f4:41:
         33:25:d4:91:7b:5a:6c:d9:59:b1:eb:91:db:8a:a3:8e:22:e8:
         a1:e4:e1:14:4e:90:43:3c:16:0d:9b:33:a6:8c:4b:ab:7c:86:
         4d:9a:9d:1b:4a:e0:c9:6e:0d:d2:35:ba:d8:94:48:f9:8f:8e:
         a8:c2:d3:b6:b0:4a:1f:1a:07:c7:0b:94:d8:f7:bd:64:23:4d:
         df:ee:5b:ab:97:fd:9e:cb:2d:17:59:d7:fc:e8:1e:8d:4c:cc:
         0e:e1:18:0b:f8:44:b0:05:3f:be:ea:41:e9:4b:3a:ab:b1:79:
         e3:5c:1d:3e:83:6c:c5:7d:77:99:0c:68:43:64:30:d9:84:9a:
         ea:d2:2e:91:15:77:e1:a5:34:ba:e9:3b:93:74:ea:4f:25:29:
         ef:4a:d5:43:ad:71:a4:90:07:31:e1:c2:c0:00:14:4d:1c:f4:
         4a:cc:c4:cc:9d:52:16:ce:e8:fa:f2:2b:21:17:dd:d6:3e:96:
         96:03:a1:fa:d2:d1:ab:ee:3d:b3:53:11:6b:37:53:87:c6:34:
         e0:1c:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:51:15 2026 by rpki-client