Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
File:                     79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa (raw, json)
Hash identifier:          xp0lCGPyN1+wLWAqSShNqMoquv977EOg3WqCcE4LxtU=
Subject key identifier:   E6:9C:6B:21:99:FB:C3:92:7B:3C:0B:F1:A8:D0:15:82:40:54:2B:92
Certificate issuer:       /CN=52356d5e-3580-4025-a264-1c6d347bc052
Certificate serial:       010D0C9F4328584F225D20FBEB7D75FF6789B860
Authority key identifier: 8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     18214
IP address blocks:        198.59.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:20:fb:eb:7d:75:ff:67:89:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52356d5e-3580-4025-a264-1c6d347bc052
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=c5a3b024-1b75-4ab3-9e03-7d05fa55ab7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:04:a3:17:54:4d:69:4e:42:b7:ad:85:b3:
                    55:db:5b:e5:0d:d5:fa:3a:ab:e0:95:12:a8:2c:86:
                    9f:7f:38:e1:a6:99:be:7a:93:1f:cf:7e:b7:97:a1:
                    f3:bf:d2:88:7b:2d:04:9d:c0:29:a3:e5:b5:87:ba:
                    de:26:31:30:f8:92:2b:d3:15:96:e2:11:8d:8f:72:
                    ee:78:b3:68:a6:5d:37:99:dc:56:4a:71:c8:70:c6:
                    1c:c5:0f:06:8a:7b:0d:b2:13:71:2d:47:58:c8:c3:
                    75:d6:00:10:83:c1:f2:b7:78:01:ae:d3:4f:fd:d0:
                    6c:23:9e:2a:83:3a:37:88:72:cb:7a:1d:d7:5b:dd:
                    a4:0b:66:13:8b:4a:5e:45:07:0a:76:2b:04:49:0e:
                    f2:a2:a7:24:12:79:c9:69:bf:f4:92:d4:27:c2:a6:
                    ff:94:79:ae:d4:6e:e9:e4:ba:5a:64:f5:9d:9b:f2:
                    1a:d8:a4:b7:66:79:9e:ee:f8:f2:73:d7:5e:88:e7:
                    67:26:7f:25:55:a6:16:53:f3:90:14:f4:77:1d:76:
                    db:53:00:7f:db:b8:55:0e:be:2d:77:d1:89:0b:20:
                    f8:28:3e:38:6c:81:6e:7a:9a:d2:fe:f6:65:90:2c:
                    2f:53:78:75:86:5f:5e:22:51:20:08:af:e4:1d:eb:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9C:6B:21:99:FB:C3:92:7B:3C:0B:F1:A8:D0:15:82:40:54:2B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl

            X509v3 Authority Key Identifier:
                keyid:8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fb:94:ce:cb:b9:15:b5:61:af:a8:ca:40:d2:84:c8:7c:58:
         98:55:c9:81:e0:f6:fa:8c:d8:8d:94:9c:2d:f0:fe:ca:ae:6c:
         b0:02:c7:e3:fb:93:67:23:83:98:7b:cc:e5:7f:00:41:8c:b3:
         2c:d5:28:81:7a:54:2d:20:60:a8:3c:78:55:e1:c9:b2:42:ea:
         0c:85:7b:58:4b:2b:48:7e:7f:46:b7:cf:0e:a1:7b:3f:f6:6c:
         2b:7e:0d:44:a7:af:73:2d:bd:c9:5a:48:c0:21:75:fd:b9:96:
         51:7f:e5:38:78:47:7e:8c:a8:3b:72:c8:91:4e:f5:1a:c6:f3:
         d9:aa:45:33:8e:4a:59:23:8f:24:a8:b9:ea:a8:f7:ba:8b:28:
         80:50:a7:a9:05:07:7f:3c:14:74:e5:6d:11:dc:7b:7d:fd:f5:
         9a:e6:77:fa:42:d4:2e:7e:2d:19:28:0a:25:9a:3b:a9:72:69:
         cb:6e:64:47:74:30:90:69:fd:62:d2:fd:90:e3:25:45:b4:52:
         ab:8b:53:86:47:0a:1b:26:b0:04:b4:31:f4:67:9e:32:b7:8b:
         56:46:4a:08:03:4e:dc:cd:ce:fa:a1:e7:fb:b3:75:05:b7:fb:
         05:e5:1e:73:9a:f8:0b:6e:3c:37:8b:01:ce:68:44:73:83:f0:
         ce:1c:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:23:53 2026 by rpki-client