Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa
File:                     c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa (raw, json)
Hash identifier:          QwvvgEXZNp1mp1a3e9TBMl1KWLiAhHjnKNZSxz94mVk=
Subject key identifier:   18:77:13:A2:EF:A6:51:8E:E3:BE:E5:B9:CD:F3:DF:AC:C6:7B:86:B6
Certificate issuer:       /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial:       010D0C9F4328584ED001E9D1F25AF68943842C00
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     13325
IP address blocks:        162.108.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e9:d1:f2:5a:f6:89:43:84:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=7ee391f8-4f8c-48bd-9da3-28f44233dee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6d:9c:58:74:23:b1:52:82:87:e7:24:3a:78:
                    47:d6:42:fb:2d:61:dc:da:ee:93:7d:08:01:f5:13:
                    9f:66:e8:45:91:0b:e2:d1:3d:cc:27:d5:ad:8e:e4:
                    c2:3d:24:71:61:6f:1e:c3:8b:37:53:ce:e1:73:e9:
                    e6:dc:16:8c:22:26:84:3e:9a:84:54:9a:3d:b9:5d:
                    d6:80:5d:2a:7c:5e:0c:ab:52:5f:b1:7b:a4:95:6c:
                    c2:b4:2a:7c:1d:24:7e:bd:73:07:16:b7:36:03:cd:
                    fa:2f:2f:21:b4:f1:14:72:49:d3:2d:5d:1c:47:cd:
                    40:9b:1e:5e:65:c1:cc:62:95:92:00:9b:7d:7d:e9:
                    39:da:8c:dd:e1:34:1c:02:35:3f:f4:88:95:54:8c:
                    fb:19:77:11:13:a8:8a:79:15:e4:cd:65:3c:2e:a8:
                    6c:95:06:1a:8a:82:40:9b:e6:a4:9c:1d:1f:f1:5d:
                    6d:98:01:d3:74:41:cc:e2:83:7b:3e:27:7a:2a:a8:
                    29:39:3f:06:58:62:57:ed:05:df:b6:0a:7c:c7:58:
                    db:5e:a4:94:39:fd:95:63:13:a5:9e:7f:f1:94:e0:
                    1b:05:4f:f8:61:08:26:06:44:20:6a:e5:c4:a1:14:
                    87:0e:c5:61:13:5b:ab:a8:59:76:b2:a4:be:7a:9d:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:77:13:A2:EF:A6:51:8E:E3:BE:E5:B9:CD:F3:DF:AC:C6:7B:86:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl

            X509v3 Authority Key Identifier:
                keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.108.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:17:31:b8:e2:2f:c1:5e:c2:21:70:9c:a5:46:4b:ba:3b:47:
         5d:89:bc:8f:34:f4:79:3c:4a:98:09:9a:9d:f3:59:73:60:e6:
         01:2e:d7:b0:ac:63:40:12:98:95:38:aa:9b:c9:55:81:af:d3:
         d5:75:08:5c:7e:1b:76:87:be:ee:3b:38:ca:19:5b:59:7a:45:
         76:c9:55:8b:d6:e9:d8:91:7e:16:a2:67:80:13:fe:e8:15:05:
         c4:cd:0d:ee:3e:ea:f9:ec:5e:65:bf:c0:ce:27:39:7c:67:28:
         51:97:0c:08:43:1b:2e:ff:09:5b:c3:5f:c2:3d:a6:76:1f:67:
         d0:69:09:e4:a5:5b:6c:97:61:b0:8a:b4:85:fe:20:d9:c7:5c:
         2f:05:9b:dd:c5:b5:8a:c7:df:36:a7:a8:ce:03:d6:0a:d2:98:
         cf:89:d4:99:c7:05:c0:c1:fb:6d:fe:41:fc:82:51:ad:b6:e8:
         70:98:6d:85:c2:aa:95:ac:bd:3c:91:ee:17:96:da:82:78:c1:
         f5:4e:6f:25:1c:07:af:0d:6f:0c:60:02:9a:b1:e5:e8:f5:f9:
         c4:e7:99:84:f1:e3:2a:29:3b:f2:f2:98:4e:42:54:c6:55:96:
         35:0b:2e:13:4e:32:bf:0a:82:50:26:83:32:95:20:37:85:12:
         dc:1d:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:28 2026 by rpki-client