Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa
File:                     210e7f2e-1d27-3808-9799-9128f2f742cc.roa (raw, json)
Hash identifier:          G3w/tjQwxYmuYrDgxPCAnF3Xzd32KP33j+KrpidZypI=
Subject key identifier:   9F:4A:D9:B9:25:B2:76:F0:40:13:DB:9E:14:C7:74:27:DB:DF:0D:DF
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F4328584EC4D70FA3C10EAEB79570AE80
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     11032
IP address blocks:        198.168.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0f:a3:c1:0e:ae:b7:95:70:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=58593504-6154-4073-99b2-5660b7ffc4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:5f:8b:d7:6d:fc:c6:06:cc:62:e5:0d:4a:
                    bf:b2:dd:ac:97:be:c1:07:ec:64:0c:24:11:04:b1:
                    0b:25:da:69:fe:53:93:20:b6:89:55:8f:43:bc:65:
                    0a:47:36:34:95:db:56:d0:c1:50:e8:da:04:be:99:
                    c5:5d:01:be:c6:c7:6a:25:6f:c6:c5:8f:bb:bc:5a:
                    7d:89:fe:60:0c:b4:d7:f9:19:5e:f3:0b:fc:c9:38:
                    0d:5d:cc:ba:2d:cd:74:4f:9f:0a:8e:c8:96:68:08:
                    e1:66:12:83:67:cd:4c:95:93:65:69:15:f5:7a:06:
                    1e:e8:ab:e7:b2:d1:f8:01:49:68:44:03:cc:d3:d2:
                    b5:5a:a7:f4:e2:f3:46:a2:1b:36:b8:d0:5c:32:75:
                    a1:14:df:2b:87:fd:20:4f:b2:12:21:2f:4d:aa:31:
                    50:36:23:13:1c:dc:f8:e4:3d:ec:a0:3c:0a:4d:2b:
                    67:20:00:c6:4d:e6:8d:85:fa:dc:87:14:95:36:23:
                    61:81:34:6d:bc:aa:c2:67:82:f6:e8:b3:2a:88:32:
                    84:bd:ad:44:99:fe:5a:e9:bb:e2:94:5a:73:4e:ac:
                    37:69:98:29:1e:22:1f:b3:cb:ec:9e:1d:88:ad:e0:
                    4d:72:cf:09:59:f8:55:50:87:1c:91:8f:31:cf:38:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4A:D9:B9:25:B2:76:F0:40:13:DB:9E:14:C7:74:27:DB:DF:0D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/210e7f2e-1d27-3808-9799-9128f2f742cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:d8:4c:b6:1e:23:f4:94:bd:6f:5e:64:20:5c:fd:af:be:
         a0:0b:b5:04:15:fc:cb:ce:f9:90:70:08:d3:1b:9b:8f:95:df:
         f9:c3:68:d3:be:fa:89:d6:7c:42:69:c5:f9:35:3e:34:1b:3a:
         0d:51:08:5a:35:a0:33:3f:51:82:6c:b0:d4:13:32:7f:80:ec:
         74:e1:df:fa:57:a0:a6:46:db:f7:52:0e:11:d5:80:3e:21:45:
         e1:dc:33:7b:f8:55:b2:78:e2:87:6a:43:92:87:f3:cd:f4:92:
         e1:6f:bc:7f:0b:2c:64:33:b4:c8:1c:be:38:1d:1a:a1:18:cd:
         38:c2:4d:40:20:b6:e3:cf:0e:c2:78:a0:52:83:18:05:4d:82:
         15:76:a2:1a:d6:02:8a:eb:7e:82:f9:e4:ae:a8:96:a6:79:14:
         54:43:26:d8:18:a6:6c:30:68:41:39:cb:ff:e6:0a:5f:4c:7b:
         0b:57:28:17:3b:97:b8:34:af:52:c8:5d:de:ac:da:b7:63:ab:
         31:94:21:18:38:e5:93:f8:d8:5a:34:21:de:51:4d:78:e1:b3:
         92:8d:ec:6d:06:c1:17:56:d6:65:a1:8e:b5:4c:c4:ea:7d:e7:
         26:60:72:80:3e:11:b8:1b:6a:20:a1:c0:56:14:16:de:f6:45:
         b2:07:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 23:29:09 2026 by rpki-client