Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/a1c2acce-447a-3f61-857f-0e590564cb41.roa
File:                     a1c2acce-447a-3f61-857f-0e590564cb41.roa (raw, json)
Hash identifier:          vKFyyX+lVFpHani4vv0CvYQaz+5hon+RtNzTGmtRg80=
Subject key identifier:   53:CA:79:D4:9C:C1:F8:88:9F:A7:ED:2B:E7:04:76:5E:92:ED:85:BF
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584EA793E43C03C77A98FD5D8500
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/a1c2acce-447a-3f61-857f-0e590564cb41.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53959
IP address blocks:        216.198.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:e4:3c:03:c7:7a:98:fd:5d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=814d9a3b-cbbe-44dd-a54a-2b1c0d0cda1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:38:6e:cb:07:a3:f4:c7:72:0a:0c:ca:ac:
                    18:67:65:34:de:9f:d1:79:c1:d0:e1:43:f1:d3:e6:
                    e3:2d:f8:a0:66:a9:c8:05:eb:21:6e:16:4a:2e:d8:
                    28:f0:4c:ee:29:45:3c:b5:a9:39:db:31:ea:60:7c:
                    05:51:f2:1b:15:bb:4b:a9:04:a8:08:9c:2b:01:00:
                    f2:d0:83:18:60:87:ec:a5:8f:c6:ab:4f:67:9d:c4:
                    76:0b:18:34:a2:8e:91:1c:37:50:7a:92:46:64:a6:
                    5f:7a:69:8c:6e:2a:ef:24:d1:38:07:ae:b5:90:43:
                    83:bd:2f:79:9d:82:46:25:b4:1e:64:7e:ca:1f:49:
                    1e:c0:ec:f7:46:f7:9d:7d:5b:e9:7c:f1:d5:30:35:
                    88:cd:ff:f7:6d:53:26:a6:02:f4:0c:28:e1:7d:0c:
                    a3:2f:a0:47:2d:56:6e:c4:aa:0a:0b:12:c9:76:e5:
                    05:60:06:ed:9f:36:f2:7f:c9:fa:e0:b3:ec:bd:df:
                    6d:de:76:47:4c:ba:a0:e2:23:75:55:bd:2b:60:a6:
                    8a:20:20:44:8a:1a:4a:7f:ef:d8:df:16:d6:dc:50:
                    a8:1e:12:72:ee:a6:d3:83:dc:81:f1:6c:ba:34:bb:
                    81:4a:ff:c3:ca:6c:a7:18:b7:c7:cf:7f:d4:cb:a1:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:79:D4:9C:C1:F8:88:9F:A7:ED:2B:E7:04:76:5E:92:ED:85:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/a1c2acce-447a-3f61-857f-0e590564cb41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:1a:35:0d:b9:db:ba:87:61:ac:f2:28:e7:26:9b:aa:75:
         1e:d1:f7:32:aa:ed:d7:c9:8b:8e:7c:c7:b5:41:aa:da:85:fc:
         95:1e:a7:02:63:b3:33:b6:f9:fd:f1:bc:4d:73:ff:7e:8b:2e:
         a8:bf:a0:9d:24:95:7c:5d:01:ba:c2:92:18:c4:14:7e:b7:f2:
         a0:fd:07:c0:d2:8b:f5:e2:41:36:58:ca:6e:fa:d0:fa:f9:83:
         6c:32:18:39:ef:b6:a9:7e:b5:0b:70:4c:91:b8:8e:49:d1:3c:
         da:ab:a9:01:f0:41:76:b7:b5:01:9a:6a:f1:15:95:f7:ec:b2:
         42:bb:b5:01:69:92:95:f9:e2:27:e8:fc:00:7b:90:26:2a:16:
         36:2a:b7:52:4b:dd:c8:94:47:9d:85:70:c3:9f:66:4b:c3:6f:
         59:39:83:46:88:e5:f3:8a:32:95:f0:0c:f7:ab:e3:67:bb:ca:
         25:b5:4d:1d:46:77:e8:33:5a:9d:34:53:df:50:70:a1:d8:8a:
         62:b1:51:91:07:17:e1:98:1f:b8:cd:39:10:59:8f:da:fc:5b:
         93:95:b7:d8:cc:a5:92:17:fc:c9:8f:62:ac:d4:be:a4:27:f3:
         e1:05:b5:d9:d2:4f:45:d8:9b:03:41:6a:67:ce:1c:5b:0c:4c:
         48:f6:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:21 2026 by rpki-client