Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
File:                     a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa (raw, json)
Hash identifier:          +zjs7Sfx57rlzbrdWva66rwj/0J3ziUCoPGOdou/wzU=
Subject key identifier:   B0:7C:BC:F6:A8:B1:AE:85:3C:2D:9F:18:8D:5C:52:9E:18:12:13:8B
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F4328584F093CF3E2E028B9906EAEB670
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     17024
IP address blocks:        169.128.188.0/23 maxlen: 24
                          198.135.185.0/24 maxlen: 24
                          2602:2d1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f3:e2:e0:28:b9:90:6e:ae:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=6485a4de-5b1d-40f4-b564-2f3e6e5f7d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:92:98:07:f5:31:47:c5:94:c8:87:82:89:
                    56:7b:c3:30:a0:a0:7b:e9:37:36:22:8a:d8:81:8b:
                    ea:12:6e:22:f8:29:03:43:5a:b4:0b:a5:df:32:fb:
                    c3:4c:19:95:e8:5e:af:83:1e:b3:78:7d:b9:10:c8:
                    c7:66:d1:6e:c7:42:c2:05:ff:79:15:a8:ff:8c:86:
                    d6:d2:92:d5:e2:ef:8b:0f:9d:f5:17:c0:ff:cf:25:
                    08:f7:e9:13:74:4a:88:f3:ec:cb:70:56:89:30:de:
                    22:8b:ac:8d:8b:b6:0b:b9:16:9c:e0:d6:b4:27:e5:
                    57:74:4b:10:96:96:bf:fd:12:83:f2:c0:56:85:d2:
                    2e:57:7e:12:37:7d:40:2e:a7:a5:e9:63:e3:62:29:
                    b8:1e:03:d8:de:cb:45:2d:0f:c3:ac:0a:c9:c5:9a:
                    a1:c7:40:5c:0b:d7:ac:4a:ff:8f:cd:14:f9:ba:c1:
                    2b:b3:c1:a9:46:4f:93:21:68:60:77:27:45:78:da:
                    45:fc:96:87:c6:e9:38:3a:0c:01:0a:7c:e9:48:ad:
                    f5:1b:d9:9b:d1:66:41:c2:f0:03:eb:4a:a3:dd:05:
                    98:86:3a:26:99:1f:bc:a7:e1:26:b5:a6:e0:c1:ab:
                    3f:29:0f:b4:16:24:c0:65:4e:6e:ea:dd:64:d4:f7:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:BC:F6:A8:B1:AE:85:3C:2D:9F:18:8D:5C:52:9E:18:12:13:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.188.0/23
                  198.135.185.0/24
                IPv6:
                  2602:2d1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:54:ee:59:97:d9:5b:f6:23:52:68:fe:94:95:19:b7:bf:5a:
         b5:de:55:f2:fc:87:f5:bf:d2:42:06:85:6d:bb:f4:69:25:48:
         c7:db:44:dc:05:44:f9:4c:4a:bc:a2:85:72:e1:7a:4c:68:c4:
         bc:ff:ee:dd:7d:65:04:3a:73:2d:b9:df:35:5d:87:3a:63:55:
         62:76:45:c5:a3:47:45:e8:03:cb:04:1e:7c:2c:35:8a:cb:c7:
         ba:68:df:86:9e:4e:27:50:f7:4b:8d:42:af:53:81:fa:81:7f:
         86:97:6c:ee:7d:92:33:e4:db:9b:28:7d:bf:07:c0:99:7b:76:
         a4:a2:99:40:bb:be:45:c5:4a:37:85:93:3a:27:cd:d4:5a:49:
         10:88:a5:9d:98:94:d6:f5:08:23:3d:75:a4:e2:8b:b1:1e:f3:
         f2:7c:c1:ac:88:c6:be:c7:df:c9:03:9b:d9:91:40:d8:fe:3e:
         3b:a3:bd:16:d0:80:42:ca:34:a6:be:11:4a:48:69:96:db:bf:
         e3:8a:7d:1d:b6:2a:af:77:41:c5:eb:f9:6d:c2:2c:14:d1:ed:
         99:a2:c3:50:1e:23:64:a7:4f:5b:1e:6a:5d:76:73:cb:f0:2e:
         79:e2:41:3f:85:2c:b2:b0:3e:3c:40:62:2f:da:76:0e:e0:49:
         d3:10:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:36:05 2026 by rpki-client