Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c53f783b-0c79-3b10-8f8d-29f8f1876b55.roa
File:                     c53f783b-0c79-3b10-8f8d-29f8f1876b55.roa (raw, json)
Hash identifier:          V+yjn8iHbT6f11pFOCs5S5FCaV+HP9AR5uWht92T0ck=
Subject key identifier:   0C:BF:32:5F:F0:A0:5B:AA:AF:AF:8B:C9:51:47:B0:FF:9B:04:85:F3
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584F6F22E07F629C6ED7C004F6A0
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c53f783b-0c79-3b10-8f8d-29f8f1876b55.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     12200
IP address blocks:        142.0.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e0:7f:62:9c:6e:d7:c0:04:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=61ecf4fe-a313-44b9-a8a8-5b44c05bdf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:02:b1:4a:b1:88:ab:5a:95:49:85:0b:c4:c0:
                    92:83:5d:50:18:d1:27:af:81:28:07:2f:e0:0f:a0:
                    49:d6:64:64:da:aa:ec:72:82:a4:a7:61:a8:20:e2:
                    e1:a7:8b:a4:be:39:61:33:ae:80:5f:fe:c7:e2:21:
                    d5:c2:17:63:de:6c:82:b2:24:87:1b:ab:d0:c8:4e:
                    b5:a9:2c:02:9f:57:3e:f2:b7:b5:4f:85:86:63:41:
                    27:06:a7:33:f9:f7:8d:b4:0a:47:78:4f:97:4e:9d:
                    4c:3f:23:42:19:ef:33:9e:28:e0:db:83:42:f3:cd:
                    50:f4:10:f0:dd:00:25:5d:f8:c7:8d:6e:84:ba:0c:
                    6c:85:91:d1:6d:7b:5b:5e:c1:c4:dd:a6:8e:58:76:
                    29:06:85:cc:8a:fa:1f:2b:29:1a:ba:82:7c:22:9e:
                    c5:de:50:40:64:7a:60:2f:1f:bf:17:29:29:fd:df:
                    ea:c3:b5:47:3f:38:31:80:da:7f:c7:31:b9:a2:26:
                    7d:a5:a4:be:eb:db:42:4f:2d:8e:1b:f9:6e:a2:d6:
                    0e:c4:ed:ea:b0:1a:8b:98:02:73:67:2f:b1:98:28:
                    8c:b9:17:aa:02:49:22:46:63:6e:83:da:41:50:85:
                    74:27:5b:4d:a4:4a:22:06:9e:d6:c8:dd:73:6a:0a:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:32:5F:F0:A0:5B:AA:AF:AF:8B:C9:51:47:B0:FF:9B:04:85:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c53f783b-0c79-3b10-8f8d-29f8f1876b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:45:74:c1:25:d7:e1:f4:fe:6a:79:9d:7f:2c:d8:3e:cb:
         4c:e6:77:64:85:99:96:b3:ae:9f:c3:c0:0e:e4:f1:da:74:53:
         83:c4:a5:d6:3b:32:99:ad:75:8c:90:dd:0c:0e:c4:07:cb:0b:
         62:a4:a3:30:6a:25:1e:fe:cd:be:56:cb:1c:5d:cd:87:bf:ad:
         34:4f:66:63:10:16:22:d2:2a:64:3f:0c:bb:3a:64:48:38:25:
         e1:ec:15:24:6c:64:7a:6f:d2:70:53:15:eb:e9:53:68:35:5e:
         97:1f:65:87:78:a6:f6:8f:5b:9d:0a:45:07:93:53:41:cf:21:
         4e:5c:ea:e4:70:83:1f:43:f1:15:88:3a:26:d5:84:e9:77:e3:
         10:02:21:7a:27:54:88:5b:26:9b:b0:4c:b7:3f:50:0f:d7:43:
         a8:2f:05:dd:5a:ce:d8:79:f0:40:25:42:e0:3c:cf:a5:65:77:
         a9:68:62:e2:49:f8:7b:8a:7a:44:12:79:20:2f:0f:5e:07:8e:
         bf:3e:75:af:cf:fb:90:9a:ef:25:0e:b8:90:3e:d9:38:a5:71:
         23:6a:bc:02:2f:31:b7:78:85:2d:32:1b:7a:28:ee:6e:20:c3:
         91:d0:a2:2d:59:d0:d8:f3:b2:68:bb:5e:d4:3a:4a:b6:96:34:
         13:2d:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:29:46 2026 by rpki-client