Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c5048bc7-9107-3e17-bfda-f71ced1a0716.roa
File:                     c5048bc7-9107-3e17-bfda-f71ced1a0716.roa (raw, json)
Hash identifier:          Am5Wj7kc8m9rS1LPTHc2HP3k7eff+4n8yZJO0VpYHiY=
Subject key identifier:   B1:1E:4E:64:29:13:D8:73:BB:0A:5A:68:B9:0D:A3:0B:7E:98:B0:D8
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F1467B08EE60EABF99FA7E080
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c5048bc7-9107-3e17-bfda-f71ced1a0716.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     13213
IP address blocks:        173.255.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:b0:8e:e6:0e:ab:f9:9f:a7:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=fffbf985-5368-4b09-9bc4-74a6456095bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:62:2b:13:b0:02:f7:d4:9b:f5:cc:37:c8:
                    38:ab:ab:84:23:c9:de:fe:66:39:4e:a2:88:03:7b:
                    25:76:a6:34:30:e4:0d:50:e3:42:5d:46:25:10:97:
                    5f:13:6b:44:a0:f4:0f:52:f9:98:ca:40:29:e9:20:
                    6e:fa:2d:6a:5e:39:bb:8d:3b:03:0b:10:ac:da:c1:
                    95:61:dc:cb:a8:e7:09:54:ba:06:68:34:11:d8:16:
                    c4:f8:b8:d5:ae:0a:1e:8d:70:39:a9:44:d0:17:7d:
                    17:9e:83:61:3f:35:17:f3:be:de:38:a6:cf:cc:c8:
                    fc:f5:18:cf:8a:90:45:c9:bd:2d:7f:bb:57:22:3c:
                    58:fa:63:8a:14:20:ae:9a:4b:1f:5e:5d:50:5a:55:
                    14:3c:c5:f6:c0:a6:99:d3:04:2b:57:6b:0b:30:fd:
                    1f:c3:6e:ac:e4:a1:18:af:6f:dd:e7:b8:e1:ac:d2:
                    55:19:a4:92:8b:6e:de:49:40:0b:b0:43:03:0d:b7:
                    71:6e:a5:a1:54:7c:47:0b:c5:2c:3f:d5:96:c1:6d:
                    db:5e:a4:44:e3:45:40:57:54:49:e4:37:2c:b3:2a:
                    eb:b6:d0:d0:fe:be:d4:7f:12:e4:66:4d:b4:df:bb:
                    b9:c8:21:1e:22:96:87:4d:1e:34:8e:3c:bb:fb:1c:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:4E:64:29:13:D8:73:BB:0A:5A:68:B9:0D:A3:0B:7E:98:B0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c5048bc7-9107-3e17-bfda-f71ced1a0716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ec:50:00:77:d9:5e:48:44:49:13:24:44:e1:30:da:42:91:
         ee:16:b5:77:db:77:27:83:d8:86:bd:9e:d5:9e:29:b0:7f:06:
         38:3b:45:81:27:ce:a4:88:10:27:5d:c2:4b:20:b1:42:26:36:
         4e:ff:89:e2:da:1e:1f:37:78:57:cb:50:18:e8:d2:98:49:28:
         26:bb:ba:bc:74:04:01:09:f0:e4:30:b6:e0:e7:92:07:28:df:
         e3:7e:4c:1a:3d:85:c4:6c:8f:eb:f5:3a:68:72:37:e8:03:8a:
         f1:7e:c5:ed:e1:ec:e0:79:77:15:01:e3:5a:53:29:72:ca:d6:
         a2:8b:f8:12:ee:3b:16:f7:1a:55:07:75:7f:67:e4:c2:b4:e0:
         32:8b:ed:91:78:01:ab:d2:aa:21:67:89:28:2b:52:99:7b:9f:
         40:7f:64:11:b0:58:21:65:38:f0:dc:76:e7:1c:c7:79:6b:dd:
         e4:61:cf:7f:76:f3:bd:1e:f7:59:9b:7c:da:9b:04:28:b7:87:
         94:4d:b0:a5:59:4b:c7:10:2d:ed:b3:c3:ea:c5:12:03:da:de:
         74:99:f7:48:aa:dc:da:a3:9a:1f:ee:21:62:c1:d7:5c:6a:f5:
         55:20:75:b6:2c:ff:a2:a7:5a:3e:75:2c:f5:28:33:57:56:8c:
         4e:47:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:07:52 2026 by rpki-client