Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5471e504-b662-320a-8ec5-052d1b90bb1a.roa
File:                     5471e504-b662-320a-8ec5-052d1b90bb1a.roa (raw, json)
Hash identifier:          wiJHt9y0o5DdyUpKwJqKVmdmW4MFWlve8S5irMB8si0=
Subject key identifier:   6D:47:F2:C2:79:26:24:69:58:6D:71:03:FE:7F:2C:0F:CC:11:F5:36
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EA3E0AE8641B869D2B5B32080
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5471e504-b662-320a-8ec5-052d1b90bb1a.roa
Signing time:             Mon 27 Jul 2026 17:37:59 +0000
ROA not before:           Mon 27 Jul 2026 17:37:59 +0000
ROA not after:            Sun 25 Oct 2026 17:37:59 +0000
asID:                     198949
IP address blocks:        162.144.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:e0:ae:86:41:b8:69:d2:b5:b3:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 27 17:37:59 2026 GMT
            Not After : Oct 25 17:37:59 2026 GMT
        Subject: CN=39fc1e68-7d36-430b-b66a-8257b736eb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:42:90:46:73:2d:db:e8:65:ae:f0:16:3c:
                    21:aa:a6:d6:0c:43:ad:ef:62:4d:e5:17:3c:c4:3d:
                    b4:2f:04:b8:1e:f4:d7:14:5b:e0:5f:75:5f:f5:db:
                    af:6e:8f:60:66:9b:25:62:b1:08:8b:51:2b:29:ad:
                    29:3e:ce:48:df:bb:4e:17:84:a3:4b:5a:d3:46:25:
                    c6:97:ed:b4:da:8e:47:46:bd:df:a2:22:ca:e6:bb:
                    2e:48:bd:83:38:78:e2:40:10:df:85:f2:66:25:89:
                    51:bb:37:dc:9a:12:b2:59:b7:a9:7a:81:1a:4b:6d:
                    63:e7:cb:b0:ac:cc:4b:cb:50:1c:d4:78:d2:f7:50:
                    a7:d1:e9:b4:d5:72:03:ad:93:18:71:fc:e4:3b:75:
                    12:83:27:ff:dc:15:f5:6b:08:21:9d:3e:bd:09:aa:
                    53:41:cc:f6:16:e7:24:01:b0:17:09:9b:43:9b:e0:
                    c6:57:d7:5d:ca:0c:22:13:31:7a:f9:3c:c8:dc:0b:
                    19:e0:7e:b5:e0:6d:0a:ed:a3:12:50:46:f1:d9:03:
                    d8:2e:7f:8f:d9:6b:30:21:8e:33:e7:2c:15:5e:ab:
                    c2:af:4e:a3:bd:e0:36:34:21:fb:53:63:9b:d0:a0:
                    be:54:e5:8a:9a:9a:7c:1e:23:47:48:bb:e4:0e:e2:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:F2:C2:79:26:24:69:58:6D:71:03:FE:7F:2C:0F:CC:11:F5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5471e504-b662-320a-8ec5-052d1b90bb1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:f9:92:9d:dd:3d:f1:c0:d1:3d:6e:0a:32:97:03:db:dc:
         f6:2c:60:e9:d0:53:1b:b0:40:97:5b:7c:16:ba:f0:93:42:1d:
         7b:9f:c2:8e:d5:77:33:4b:ae:70:43:00:e2:3d:de:64:fb:b3:
         2a:d9:03:e6:98:c0:e0:90:76:04:bf:13:cf:bb:24:e8:76:eb:
         e8:7e:36:8c:7d:50:09:99:90:c1:41:4f:75:c3:0d:d5:04:0e:
         91:13:01:78:41:7f:9b:a8:92:ad:af:05:0d:5a:40:22:46:61:
         81:b8:68:36:3a:ff:1d:88:66:19:7e:76:13:06:f4:43:0a:3c:
         41:ee:d1:1a:86:5d:ba:70:f1:93:f1:f3:98:e3:b6:df:4a:af:
         70:6c:ff:8e:84:8b:ed:2b:78:19:1c:dd:8a:0b:d1:d8:e1:3a:
         39:4c:20:64:07:87:1b:29:ec:47:b9:2e:8a:0a:47:86:9b:d0:
         5a:56:a3:a7:a5:cc:33:4f:35:ba:26:83:87:e3:2c:6a:57:b8:
         c2:fc:22:8d:a1:7e:e1:09:3f:ef:aa:c8:b0:1a:ba:f1:63:76:
         48:3a:1a:f6:35:0a:c3:76:3a:90:4b:40:d0:ce:59:79:af:9e:
         f8:98:05:ea:7a:bd:86:74:11:aa:33:ed:6d:23:00:3b:43:ca:
         54:52:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:04 2026 by rpki-client