Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/525901f8-4722-3436-b1d8-76f8f92fee17.roa
File:                     525901f8-4722-3436-b1d8-76f8f92fee17.roa (raw, json)
Hash identifier:          t9QeQIbg3CCloEzY2+2uz7oMwoilhqhdRLPFu4yZvW0=
Subject key identifier:   17:94:BA:B5:1B:14:FB:02:B3:03:57:3D:89:AA:76:83:7D:4E:A3:2F
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F4328584F67881FDDD3CD673550E18500
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/525901f8-4722-3436-b1d8-76f8f92fee17.roa
Signing time:             Mon 05 Oct 2026 19:37:59 +0000
ROA not before:           Mon 05 Oct 2026 19:37:59 +0000
ROA not after:            Sun 03 Jan 2027 20:37:59 +0000
asID:                     14618
IP address blocks:        216.31.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:88:1f:dd:d3:cd:67:35:50:e1:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: Oct  5 19:37:59 2026 GMT
            Not After : Jan  3 20:37:59 2027 GMT
        Subject: CN=fa85530d-0b02-4ec7-9438-17e067acc31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:4d:7d:52:70:a9:7a:75:3a:5d:95:c9:e1:
                    01:92:a3:05:4f:b6:f2:42:98:88:1c:1c:62:bc:5f:
                    26:3b:cf:16:83:7c:b9:70:4f:e5:1c:7f:83:48:06:
                    44:8d:76:f9:65:5c:f1:fd:00:ae:47:69:3c:c3:ed:
                    f3:4d:f6:ba:52:24:a7:23:8a:72:c2:8d:5f:d6:0b:
                    07:ee:59:44:2d:65:28:4b:37:5c:d4:ef:22:60:dc:
                    64:8f:27:c7:f9:b2:71:bd:50:91:91:ad:73:3d:8d:
                    b5:80:8e:fa:44:b7:8a:3c:ef:d8:9f:a4:4f:21:f7:
                    48:6f:6c:19:ab:fe:34:e2:54:88:07:98:f8:19:d4:
                    87:f6:99:b4:66:c4:ee:34:63:12:5c:e8:17:fd:bb:
                    28:86:82:c6:79:5b:59:84:3f:91:7b:ff:dc:a0:7a:
                    92:e7:29:dc:8b:03:b2:d8:90:f7:31:bb:0c:6b:22:
                    b4:2b:93:91:8b:64:b6:4a:c9:8b:e1:e9:3b:11:2b:
                    2e:ff:d9:bb:a1:5e:ed:29:79:e6:e9:ec:b8:72:b3:
                    c2:0d:1d:67:29:02:02:ff:9e:7d:4b:f8:4f:f6:d6:
                    2e:be:f4:51:41:ba:8c:2d:a2:dc:76:47:b8:48:60:
                    9c:47:21:b8:20:a1:cf:cf:f3:1d:be:b9:d9:2c:42:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:94:BA:B5:1B:14:FB:02:B3:03:57:3D:89:AA:76:83:7D:4E:A3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/525901f8-4722-3436-b1d8-76f8f92fee17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:d4:e5:8b:9f:e0:a4:0c:0e:1a:8a:02:26:63:d7:77:34:
         4c:01:9d:85:e8:c4:af:55:4a:7e:77:81:1b:1b:b5:b2:25:36:
         d8:ca:21:91:f5:8b:a7:b5:81:16:35:ee:5a:f3:fa:14:5f:ba:
         c4:9f:c4:71:1f:52:ad:0f:f3:dc:9e:c0:aa:1d:8c:1d:f6:b9:
         88:16:be:7e:1a:10:26:ed:25:26:c4:64:4a:94:e7:a7:e0:a9:
         1d:31:7b:6f:dd:ba:24:52:4c:69:90:47:b6:f0:e2:79:19:f4:
         24:98:8c:09:7e:a5:d4:0e:ec:95:45:6c:9b:c1:c5:d4:9c:3e:
         82:5a:d1:8b:58:2a:4a:09:7b:fa:89:76:44:4e:48:f4:a0:4f:
         f1:e4:69:d5:e5:d1:85:2d:ac:87:49:c5:84:08:d7:b7:2c:26:
         f4:07:5a:0b:db:a5:5f:81:2d:25:ef:28:12:07:e3:5c:70:90:
         1b:b7:df:c5:68:16:62:c5:09:1a:16:de:45:87:10:02:64:15:
         51:6b:ee:0d:c9:19:1d:8c:57:ef:c2:b9:22:91:9c:fe:9a:21:
         d6:da:a3:ac:a5:bd:fe:fe:dc:37:e3:b1:57:f0:10:7c:14:7c:
         9e:72:57:2d:14:93:18:09:84:18:e9:46:58:23:68:7e:ed:47:
         48:02:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:37 2026 by rpki-client