Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/983f0220-fbf2-3e5f-b055-6c7b258b9590.roa
File:                     983f0220-fbf2-3e5f-b055-6c7b258b9590.roa (raw, json)
Hash identifier:          EmZmuMgatVxlGAmma81G//KCCv+wN8KU6W7Mr4V7Fqw=
Subject key identifier:   4F:09:12:8A:96:63:CC:F9:A3:23:AD:D5:85:30:5B:C1:0A:EE:13:A0
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584ECA6C89CD3EA19CDAF897FD80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/983f0220-fbf2-3e5f-b055-6c7b258b9590.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     12025
IP address blocks:        162.252.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:89:cd:3e:a1:9c:da:f8:97:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=3e1f4fa1-e587-4657-bf61-58eca2cf8383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:fb:b2:4b:87:d1:a1:7c:82:e2:53:15:75:
                    7d:f5:b2:01:3d:f5:d1:85:63:58:85:e4:85:69:05:
                    88:15:66:3b:64:a5:a9:7d:eb:9e:8e:c1:bb:ef:f5:
                    24:3d:58:8d:53:10:4e:a9:b8:aa:2e:21:13:6f:7b:
                    2d:98:fb:29:8c:29:a6:5d:8f:79:00:52:7c:50:ee:
                    c4:65:f2:5a:68:83:f5:39:a0:ce:48:f6:af:3c:1f:
                    84:b4:a8:8e:2b:fe:ac:19:a5:c5:4a:1d:89:1f:9b:
                    0f:fa:c5:4d:69:48:1e:62:47:86:9b:a1:68:44:85:
                    73:af:d3:64:18:36:22:1b:44:a4:e7:c5:58:68:24:
                    1b:29:0c:f1:38:d6:87:ba:0f:15:fd:54:35:83:65:
                    48:a6:a5:51:20:5f:cc:7b:7d:b5:98:7f:b1:0d:15:
                    36:9b:2c:36:db:fb:c5:6a:71:ce:bb:e7:f0:c4:db:
                    32:c9:6c:4b:e4:f4:48:1c:bc:f5:50:b4:35:5a:74:
                    e2:97:e9:06:72:71:06:40:9d:2f:1c:c8:0a:3a:2f:
                    51:00:30:b0:2e:49:4e:57:46:19:29:e3:92:b4:75:
                    14:38:6f:9f:7a:f5:33:2b:29:5c:94:63:69:d9:9a:
                    a7:f6:cc:52:69:c1:04:c4:8f:c7:64:63:23:08:86:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:09:12:8A:96:63:CC:F9:A3:23:AD:D5:85:30:5B:C1:0A:EE:13:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/983f0220-fbf2-3e5f-b055-6c7b258b9590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:17:9d:c5:f8:dc:86:10:83:ff:6f:8c:d2:5d:8c:57:9e:a4:
         64:4d:73:51:87:00:5b:70:26:13:f0:d6:0b:0e:94:bf:e7:ef:
         62:16:52:d3:51:2e:02:b3:eb:65:c9:29:68:47:3f:46:ac:bf:
         21:93:44:68:10:75:82:5e:31:0a:5c:4f:aa:e8:a7:60:3b:e2:
         2e:d4:5f:c6:1c:29:38:66:ce:95:d5:2e:ea:eb:d2:fa:a9:1a:
         f0:e7:69:b1:63:3d:83:75:0e:3c:90:18:50:06:13:a7:7e:ca:
         e4:a9:c3:1b:e2:92:cd:c4:e0:41:51:1a:f7:7a:aa:c2:60:5a:
         f7:16:64:f4:c4:e8:ba:ae:f5:87:2b:a1:c2:96:86:16:4d:62:
         8d:ba:8b:44:13:20:04:03:bf:e7:e4:e7:42:9a:e8:d0:62:d7:
         77:9b:7f:cd:ab:19:e8:c4:5e:72:50:1b:86:ca:2d:62:0e:66:
         3a:f4:e4:43:0a:03:3c:c1:e6:30:e3:c0:ea:f0:14:bf:cd:10:
         c8:55:d0:fc:53:46:3c:a6:4b:f9:32:38:61:7c:3c:c8:9a:11:
         c5:d9:63:b0:42:c9:de:a5:9e:f1:2b:9a:1f:50:9e:33:bc:64:
         50:55:4f:e7:db:a5:72:c4:58:8d:4d:80:cb:bf:bb:92:df:59:
         a3:3e:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 05:56:05 2026 by rpki-client