Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa
File:                     51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa (raw, json)
Hash identifier:          XUqTEhe09ijHf0ppg1p2z+03oXqcsfcSYDt+PqrWJUc=
Subject key identifier:   95:41:4A:0A:0D:9F:A8:D9:22:80:3F:18:16:7C:DF:68:C3:AC:15:0A
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584ECBD1D3E34FE5114C2F173640
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     1207
IP address blocks:        147.73.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d3:e3:4f:e5:11:4c:2f:17:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=35be6fad-e61b-4494-879f-f917a9bef575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:ca:84:2e:d2:65:bd:3a:6c:b1:ca:d8:ac:
                    99:c8:c6:e1:bb:c3:52:c1:2b:28:1e:9f:d7:2d:c9:
                    de:0f:cd:e2:4a:df:f0:89:30:8a:83:65:e1:c9:9a:
                    35:c0:16:94:02:fd:41:da:0c:91:48:96:40:d8:6c:
                    23:07:68:03:98:fc:c7:81:7a:97:2c:c2:42:2a:97:
                    9e:ff:e1:f7:31:af:37:2c:c5:19:cb:18:9c:cb:a1:
                    86:7f:c9:ee:fb:2c:b0:45:0d:de:77:e9:f7:5e:56:
                    e7:74:3e:38:c6:c2:3b:d7:0d:2b:96:a6:11:5f:60:
                    18:aa:3a:39:1e:57:96:61:56:27:55:36:ff:04:5e:
                    da:30:ee:91:0b:d2:2b:9e:73:47:fc:38:f8:88:2d:
                    19:9f:33:8c:27:cd:6f:c8:1b:67:ea:54:cb:29:21:
                    8f:e9:e8:5b:c9:a8:89:39:82:5c:15:02:2e:98:5b:
                    5a:c1:fc:5f:12:f2:b1:97:50:c8:07:1e:c3:f4:49:
                    48:00:a7:bf:73:4d:3f:5a:5d:c5:7c:b0:e7:00:b1:
                    64:e1:93:4e:87:6e:25:51:23:6a:a7:56:05:eb:13:
                    01:85:f4:5f:2c:41:41:de:f8:0d:14:4b:b7:49:91:
                    ec:a0:03:38:da:79:31:de:71:29:3a:c9:5e:c6:ce:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:41:4A:0A:0D:9F:A8:D9:22:80:3F:18:16:7C:DF:68:C3:AC:15:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c7:13:8d:bb:ba:5d:98:13:91:10:33:79:12:14:5d:34:42:
         05:9b:41:16:92:8e:ad:9a:32:7c:5f:60:9e:b0:c2:11:b3:db:
         dd:9f:b5:f1:4e:7e:cc:e7:25:5c:49:c8:3d:9c:45:c4:88:0c:
         63:00:47:b8:aa:80:fb:94:f0:6d:87:7c:72:13:63:76:48:31:
         55:89:5e:f7:3f:d3:80:2d:ab:46:3b:62:54:75:5d:b6:c6:e5:
         c5:32:40:b0:fb:a5:99:89:6b:c7:27:34:a9:d5:c3:b0:60:b5:
         8a:28:5c:1b:e8:19:60:5d:99:95:91:a0:74:9b:ae:0c:a2:8c:
         80:a6:3e:24:dc:a6:ba:3c:b3:4c:2b:5e:55:f3:6f:2f:ef:b8:
         a3:f2:92:c8:0d:2b:31:28:9e:17:90:24:1a:8f:86:f2:74:43:
         23:43:f5:31:18:64:8c:f0:99:83:e4:2c:84:a6:0e:22:79:aa:
         a6:9a:e2:e2:cb:01:b5:d3:50:a8:99:7d:bd:c4:f1:04:97:f5:
         18:ae:90:fd:cb:d7:9b:06:89:2f:27:41:1c:ac:b4:b3:10:0c:
         26:2c:be:12:ed:78:95:ab:90:ae:6b:6f:37:06:e5:e4:a9:04:
         15:12:a2:2d:65:11:c9:8d:5c:5c:8b:71:b4:82:d5:36:87:75:
         95:76:83:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:56:52 2026 by rpki-client