Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa
File:                     f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa (raw, json)
Hash identifier:          DCAuU7udfq9pgWLW3CoD5UXjUFE3RgrTkUvdhD2yMH8=
Subject key identifier:   55:DD:5E:25:00:FE:E9:C5:23:33:F3:73:C8:BF:0B:98:DB:81:05:E1
Certificate issuer:       /CN=053b9d11-14bb-4f24-8ea4-1d2cac24a2dd
Certificate serial:       010D0C9F4328584F1467A5AC7C2FA96B4A828500
Authority key identifier: A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     557
IP address blocks:        130.111.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a5:ac:7c:2f:a9:6b:4a:82:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053b9d11-14bb-4f24-8ea4-1d2cac24a2dd
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=1d00a834-f69a-4ed0-88c4-3fd103717cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:e8:e3:dd:c8:14:14:84:86:a3:b3:96:fe:
                    45:5c:91:d5:b8:03:82:84:89:81:d3:e5:59:91:58:
                    24:72:ad:a1:33:01:14:36:49:9a:e2:5b:75:5b:49:
                    89:31:04:7d:cd:fd:c1:31:26:03:e8:c5:6a:e5:88:
                    ea:f4:f4:4b:14:d2:50:7f:7e:17:d0:48:70:19:9b:
                    c2:4e:01:26:38:83:f2:45:88:f1:d8:9e:52:65:2d:
                    a9:99:22:43:40:ee:1a:4d:b1:fa:25:62:23:bb:a8:
                    b3:3c:9a:00:5a:64:34:a6:93:cd:b5:02:67:fd:0a:
                    1a:2a:d1:29:bd:b0:e4:9a:a0:e3:06:05:ba:1d:60:
                    3e:63:4a:49:39:7b:6a:43:03:0c:a5:b1:79:c7:b8:
                    2f:2a:ff:85:ec:39:1f:e0:33:4d:db:24:8f:44:ea:
                    36:b5:17:63:3e:0f:7b:f6:80:83:aa:9e:ed:bb:47:
                    b5:14:0e:02:81:21:6e:bd:1e:63:02:71:c0:ea:b3:
                    71:dc:71:e8:c4:c6:60:57:41:6e:1d:92:d3:ed:61:
                    e0:be:c5:bd:ba:1a:36:38:d0:c5:67:69:9d:21:9c:
                    6d:30:75:b6:da:30:03:f2:0d:11:47:8d:d2:29:6c:
                    18:ee:99:38:73:04:bf:5f:de:c5:4f:e2:99:39:ff:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:5E:25:00:FE:E9:C5:23:33:F3:73:C8:BF:0B:98:DB:81:05:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.crl

            X509v3 Authority Key Identifier:
                keyid:A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ce:94:16:df:ae:51:03:be:c3:50:c2:1d:68:0e:f3:0d:e4:
         91:8a:bf:e2:10:26:9d:ab:eb:3b:ec:30:24:b0:c8:db:70:93:
         bc:2f:4f:39:28:e2:51:07:dc:79:79:17:03:89:52:5a:2e:79:
         8c:a3:ba:bd:12:a2:8e:57:91:0b:cd:22:8c:db:b8:5a:41:0e:
         38:1e:77:92:fe:f7:87:c7:35:90:36:c1:f1:6e:03:dd:97:fd:
         5d:9e:ed:fa:9f:42:dd:30:80:5d:d2:43:56:06:f6:17:8e:e3:
         72:73:26:3c:c4:27:cd:1c:b5:b9:91:5d:81:94:2f:0c:a8:16:
         61:a7:3f:8e:7c:3f:07:ab:9f:90:da:59:6e:89:be:2c:ac:bd:
         12:b0:1e:fa:7d:a2:1c:58:27:6f:8e:cb:fa:8d:e9:f9:8d:52:
         ff:2a:72:fe:35:dc:a0:d0:81:d2:a1:b1:53:a8:c9:c1:55:1c:
         36:09:c7:11:45:ba:0b:c2:57:64:6b:f4:35:52:c1:6d:6d:2e:
         b0:13:e9:af:1b:8b:4b:9b:00:27:8b:aa:23:82:12:83:60:80:
         44:65:24:8f:a5:1a:bd:60:76:f7:22:9d:21:85:eb:34:db:da:
         33:1c:e4:11:0c:1c:93:13:f6:37:7a:4f:b7:0e:00:e6:b0:23:
         25:13:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:11:30 2026 by rpki-client