Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/8152f68d-35e5-3935-9948-5c4b7a43306c.roa
File:                     8152f68d-35e5-3935-9948-5c4b7a43306c.roa (raw, json)
Hash identifier:          5GVl0HZcwioERXZpBxRj5mox3LL3d71vD0SYaW9SXGA=
Subject key identifier:   B7:A9:2F:08:A0:69:14:3D:D6:C4:ED:F8:C1:64:0E:D1:78:9A:9F:0C
Certificate issuer:       /CN=919a4b9c-70ba-44da-8f00-056b3a87c761
Certificate serial:       010D0C9F4328584F4539DFCF240AA7E810B99D80
Authority key identifier: 91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/8152f68d-35e5-3935-9948-5c4b7a43306c.roa
Signing time:             Wed 23 Sep 2026 12:42:50 +0000
ROA not before:           Wed 23 Sep 2026 12:42:50 +0000
ROA not after:            Tue 22 Dec 2026 13:42:50 +0000
asID:                     30150
IP address blocks:        199.191.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:39:df:cf:24:0a:a7:e8:10:b9:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919a4b9c-70ba-44da-8f00-056b3a87c761
        Validity
            Not Before: Sep 23 12:42:50 2026 GMT
            Not After : Dec 22 13:42:50 2026 GMT
        Subject: CN=e341c926-fa24-45b4-818d-6eafead21299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:03:cf:7c:a2:74:c0:3f:af:82:68:3b:f6:
                    7f:67:f4:80:f8:d9:d0:56:7b:54:b2:83:21:7e:f2:
                    f7:86:05:ec:eb:2b:09:0a:09:a5:15:68:9c:c3:3b:
                    2b:58:57:7b:2e:46:3e:02:25:2f:15:af:be:a3:2d:
                    00:77:fb:29:e3:00:aa:8c:49:c8:ba:82:0d:20:3b:
                    f1:d3:8a:03:d9:69:a2:52:36:e5:fa:c8:80:c1:43:
                    51:85:81:66:b3:17:44:6b:1d:82:07:75:be:fe:4f:
                    8f:1b:de:97:c8:f6:b7:30:68:53:aa:72:ec:ff:79:
                    03:6f:09:1a:26:69:aa:7a:2c:f1:8c:be:a7:1c:3f:
                    38:b4:67:30:48:f4:4d:86:63:51:9d:47:4c:12:3a:
                    3c:18:72:d2:db:51:06:2c:d1:6b:8f:04:73:56:47:
                    cc:69:20:77:4d:a8:6b:01:64:2f:c2:8d:54:aa:f5:
                    5f:f4:35:ab:e8:bf:95:c5:cd:01:7d:59:57:ee:bf:
                    45:e5:cc:28:2a:68:99:8a:d1:c1:4c:ba:e8:b3:24:
                    88:96:e9:1b:12:5a:56:a3:b6:89:4f:a3:a2:bb:00:
                    64:4f:13:b2:64:3f:b2:a8:99:4e:d6:a1:29:80:14:
                    b6:03:62:ab:51:2d:89:d6:77:a3:e4:51:16:6a:65:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:2F:08:A0:69:14:3D:D6:C4:ED:F8:C1:64:0E:D1:78:9A:9F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/8152f68d-35e5-3935-9948-5c4b7a43306c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl

            X509v3 Authority Key Identifier:
                keyid:91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.191.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c5:71:c8:f1:7c:c2:02:67:4f:2e:36:ae:64:0c:51:e3:6f:
         e7:a8:7f:77:6d:47:34:d7:64:0f:e8:9f:3d:7d:39:6f:70:ff:
         5f:13:85:61:af:43:44:6f:e5:34:55:de:e6:62:05:54:d4:c7:
         4c:87:0e:c5:13:09:8d:76:fc:e6:2b:18:e7:79:f4:e3:2c:1c:
         b8:e0:f7:43:8f:ac:b9:b9:b8:da:a2:a3:aa:92:39:9f:12:33:
         8e:94:64:30:51:d0:fa:2d:4a:cf:eb:71:71:d3:68:ec:ce:d3:
         63:fa:20:7d:84:75:f5:13:f3:23:84:da:ac:07:40:fd:90:9c:
         04:84:26:8b:b3:0b:8a:02:30:65:50:92:84:02:a7:09:0b:63:
         bf:07:f7:c1:61:36:a4:ff:45:b1:e9:ae:a3:91:6a:97:f0:2b:
         27:66:af:3e:0d:01:ae:44:10:0f:37:16:b9:53:59:57:1d:87:
         19:54:6c:0a:0b:9b:c5:e0:1c:e7:35:bd:8e:ef:95:6f:88:c9:
         41:4c:ba:1f:51:56:f8:a2:7c:63:99:55:5e:52:67:80:5f:15:
         31:49:27:8a:66:0c:47:48:f4:80:c2:3c:fc:ec:6a:f4:c6:de:
         4a:69:46:a2:2f:42:9a:16:dc:4b:b7:01:ff:7c:cd:d8:4a:69:
         67:94:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:39:06 2026 by rpki-client