Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/843ef8f1-5e6e-35b0-8e6c-b89a047452a6.roa
File:                     843ef8f1-5e6e-35b0-8e6c-b89a047452a6.roa (raw, json)
Hash identifier:          eGyAdu617latIdeKHnKUdQDNcn9gjtp9XQ/PRf4nitE=
Subject key identifier:   9F:53:9F:14:1C:8E:CA:A6:72:63:50:7B:B4:3D:BE:E6:BA:B0:5D:C5
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584F6F22EB824E68A03B0459A020
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/843ef8f1-5e6e-35b0-8e6c-b89a047452a6.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     140952
IP address blocks:        216.151.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:eb:82:4e:68:a0:3b:04:59:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=388b6acc-5dd5-4ef4-a0e5-fcfded18c8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:22:6c:7b:1d:d9:86:ac:3a:4b:85:4c:f8:42:
                    e3:39:5b:8b:eb:5d:d9:4d:f8:bc:2d:a1:c3:93:38:
                    51:8a:cb:dd:83:0a:60:1d:af:93:cb:6f:27:57:10:
                    f2:2a:1e:cf:95:4c:00:ea:61:c9:b0:3d:25:45:6e:
                    df:2f:b1:22:9f:90:d8:e1:68:c7:69:98:e9:72:44:
                    e1:77:11:a5:cd:e1:19:41:b4:40:35:07:9b:94:17:
                    77:2b:74:8f:9a:00:23:72:2e:20:f1:60:ec:11:7a:
                    d0:4a:f4:94:b0:bd:7d:dd:4a:c7:e0:1f:58:fe:c3:
                    d0:10:8c:63:26:ca:54:b7:13:63:9a:39:e4:5d:13:
                    f0:4d:8a:da:20:61:33:4e:db:cd:cc:0e:b0:14:10:
                    3b:9d:48:3a:c6:01:0b:ab:0a:47:db:d0:78:6f:7c:
                    dd:09:6e:bd:bd:cc:a4:35:0e:65:1e:b2:b2:28:c5:
                    51:89:30:97:dc:0f:77:df:39:d6:24:fc:9c:dd:77:
                    3f:63:b4:b8:79:3a:ca:7b:ea:d3:2f:af:3e:5d:50:
                    8d:67:b8:56:c1:23:c2:79:35:cc:b0:46:f4:3b:f0:
                    7f:e0:14:88:5b:f5:c6:81:dd:7d:7f:e4:0e:1b:4b:
                    c5:9a:68:1b:1d:16:28:79:7a:e9:88:94:9c:fb:82:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:53:9F:14:1C:8E:CA:A6:72:63:50:7B:B4:3D:BE:E6:BA:B0:5D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/843ef8f1-5e6e-35b0-8e6c-b89a047452a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:02:78:ff:e0:54:6a:62:ff:da:97:64:15:48:4c:b5:b5:1d:
         46:eb:62:e6:8f:66:ca:dc:68:fe:65:f3:ed:58:ae:e2:b7:9b:
         33:2c:44:d9:6c:d2:fe:e6:be:ad:eb:11:66:49:f0:3b:40:16:
         68:9f:bd:a4:7a:51:6d:28:cc:d1:2f:85:73:38:57:7d:33:3c:
         7a:32:93:93:72:03:cd:0e:5a:3e:17:e2:16:85:01:6d:f1:be:
         c2:dd:a6:bf:01:a2:da:b1:c3:4b:03:23:3f:e9:f9:a1:fa:d9:
         b6:02:14:d2:e0:f5:ac:b2:0b:e3:39:53:50:e0:fe:5c:f1:66:
         35:1d:eb:83:89:98:f4:b0:75:75:51:fa:99:40:43:43:bd:62:
         cb:55:68:72:38:2e:ff:7f:68:64:b9:25:4e:82:c4:f8:30:06:
         71:77:05:77:0b:f4:48:22:7b:90:88:00:52:96:82:bd:74:e3:
         04:8d:ed:cf:e3:3e:3e:1d:b3:c7:c0:e0:c0:94:c2:32:11:d9:
         1a:e9:a2:6b:27:fd:c4:f1:a1:f2:d2:49:34:73:2a:ff:4f:77:
         fb:ea:0b:88:1b:a6:60:2c:6c:80:61:97:1e:40:8b:a0:e3:db:
         9b:90:0f:9d:46:b8:14:64:44:03:eb:a6:a6:e5:43:d7:dc:22:
         84:b0:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:30:59 2026 by rpki-client