Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
File:                     ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json)
Hash identifier:          5urmM6V2d//h4N/7n+/jUQ6xrrVz4HBRB5ZFrS0w6HE=
Subject key identifier:   5D:69:65:F4:36:83:C0:85:8E:EA:62:70:E9:F4:ED:16:B9:8D:D1:B7
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F4328584EED521D90AFA9B32D4D752AC0
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     21693
IP address blocks:        170.152.0.0/16 maxlen: 24
                          192.234.136.0/24 maxlen: 24
                          192.234.137.0/24 maxlen: 24
                          192.234.138.0/24 maxlen: 24
                          192.234.139.0/24 maxlen: 24
                          192.234.140.0/24 maxlen: 24
                          198.179.151.0/24 maxlen: 24
                          198.179.152.0/24 maxlen: 24
                          198.179.153.0/24 maxlen: 24
                          198.179.154.0/24 maxlen: 24
                          198.179.155.0/24 maxlen: 24
                          198.179.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:1d:90:af:a9:b3:2d:4d:75:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=94bb3f02-b5e6-4458-a142-00f3d3a8aafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:31:2a:ad:52:d7:71:06:2f:9d:4d:18:ef:
                    eb:8f:71:4b:38:2f:cd:1d:30:c8:a6:a9:5a:d3:d4:
                    d5:9b:5b:ca:eb:4d:e2:0d:b6:90:42:b3:14:41:f3:
                    52:0f:f2:91:31:68:e0:66:cc:e8:9c:ae:50:2c:bd:
                    b1:db:12:c9:ec:3e:77:67:b9:42:f1:d8:de:d2:e5:
                    48:1d:9a:8e:42:08:f8:53:91:cb:49:f1:3d:73:fe:
                    a9:16:7d:17:57:74:a0:b3:41:44:f9:82:34:21:35:
                    f8:8b:b0:ae:24:c9:12:a4:a1:a8:c8:d9:f2:b9:01:
                    03:50:47:6f:50:43:0a:f4:64:ab:44:8a:f6:5a:54:
                    94:f3:93:aa:20:00:1b:90:be:e5:be:de:a2:c3:07:
                    f5:d4:fe:73:e4:8e:37:1d:5f:90:6a:0b:7a:85:ab:
                    48:a3:d2:e2:6e:8f:41:9b:b9:31:e9:26:aa:91:43:
                    59:83:57:ce:16:99:5d:a0:33:27:f5:d1:b9:bc:f0:
                    86:0f:67:d6:ad:88:18:05:d0:6e:51:73:f2:39:4d:
                    eb:d2:39:8d:f7:46:41:da:a5:27:73:a8:0e:cb:c8:
                    14:c7:cb:0f:c1:3e:00:20:63:c0:f1:5e:c5:97:2b:
                    7b:5d:4e:ee:72:c6:49:1b:45:0f:d0:5b:51:1c:57:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:65:F4:36:83:C0:85:8E:EA:62:70:E9:F4:ED:16:B9:8D:D1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.152.0.0/16
                  192.234.136.0-192.234.140.255
                  198.179.151.0-198.179.156.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5c:1a:26:d6:89:f3:0c:cc:0d:d1:31:23:f1:71:f3:8a:fc:
         90:ee:32:b5:b2:a4:3f:a5:4e:07:e7:cb:cb:89:82:95:9a:85:
         5a:c1:30:e1:fa:4e:e0:1f:db:7f:70:30:c3:cd:e2:8a:21:b7:
         72:af:c4:ec:96:14:10:4e:bf:a9:da:b0:ec:4c:33:2a:d3:be:
         2b:dc:61:57:ef:e4:a1:b9:e2:ef:e9:e5:d5:7c:92:44:2b:e6:
         6c:2f:6d:7d:f7:0c:31:29:78:d6:54:43:8c:76:14:98:8c:88:
         1e:e9:b3:e7:0f:12:de:bd:e7:96:b5:f4:87:02:0f:d3:a3:84:
         29:38:93:56:0b:f2:92:56:e2:6d:ef:68:bb:76:93:17:3a:f5:
         f3:0d:7f:86:6f:d9:90:68:d9:c2:f8:81:e5:8f:12:ac:94:e4:
         12:96:e5:81:c9:05:08:22:ed:ed:9f:20:1c:24:16:f9:73:0c:
         3d:14:4f:61:be:14:30:d2:56:e5:48:a9:0d:af:30:c2:4a:9a:
         d7:07:07:7c:cd:ad:fb:4f:2c:eb:17:2e:fb:5e:0c:e7:e0:39:
         a5:e0:d3:16:5d:be:45:f4:10:56:b1:35:15:03:20:b3:ba:f0:
         cf:d3:5c:01:94:63:e9:2c:5c:62:96:bc:60:ef:e4:3b:c6:db:
         85:cd:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:54:23 2026 by rpki-client