Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa
File:                     fc352432-4e67-3899-80a1-ee18ecf984a2.roa (raw, json)
Hash identifier:          U7BSqrhXvitRg7wM7dcQztTYipbUaIqwUy5kH4cbf1M=
Subject key identifier:   70:49:91:E2:95:C7:8F:89:CB:66:03:6A:86:70:85:2C:3E:3C:EB:A1
Certificate issuer:       /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial:       010D0C9F4328584F2ABD23A6053DC5DB9A072518
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     19416
IP address blocks:        159.55.213.0/24 maxlen: 24
                          159.55.214.0/23 maxlen: 24
                          159.55.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:23:a6:05:3d:c5:db:9a:07:25:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=963e6c0b-17ae-4f44-b5e8-03f6ecbf9bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:20:f8:ab:53:3e:52:bd:82:8d:fa:ed:3c:
                    07:95:9b:1a:dd:83:a5:33:6e:60:19:0b:2b:c9:b2:
                    e3:98:5e:83:85:44:d5:2c:0e:97:0f:d6:09:34:a1:
                    59:a9:6b:1a:ca:b6:17:08:5b:b0:ca:a7:f5:6d:1a:
                    03:2b:97:aa:c2:9f:72:8e:ab:3b:d9:b9:04:7f:e8:
                    ab:07:21:ee:3b:43:c9:a1:8c:cf:e9:7a:87:50:08:
                    06:74:a5:21:55:16:62:1a:b7:59:38:6b:0a:44:f2:
                    62:81:24:fd:93:f5:c4:d5:a6:a1:94:55:52:d0:14:
                    b0:5b:7f:7e:30:ae:46:0d:88:a5:4e:ef:dc:d2:0d:
                    cb:84:54:fb:17:25:f2:d5:b1:25:89:ed:3d:b5:d2:
                    46:b7:07:a1:87:23:70:f7:7a:1d:e3:6b:75:a5:13:
                    50:8d:2b:95:55:a5:1b:ac:c1:04:8e:f1:44:ae:2c:
                    63:ba:83:ed:a3:2c:d2:24:b6:9c:d2:7e:be:1e:cf:
                    b4:93:33:28:a8:bf:a6:06:be:d6:b1:f1:c9:6a:86:
                    15:cb:eb:fd:6c:a1:66:17:f3:22:60:99:e6:0f:30:
                    58:ad:c0:2f:43:8d:df:4f:ab:08:8b:65:ab:20:2d:
                    c4:80:db:14:ae:16:81:44:ae:2a:59:25:7b:39:ed:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:49:91:E2:95:C7:8F:89:CB:66:03:6A:86:70:85:2C:3E:3C:EB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl

            X509v3 Authority Key Identifier:
                keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.55.213.0-159.55.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:3e:14:70:b2:5e:30:46:e6:9f:8c:47:58:44:07:98:a4:
         ea:4e:72:d5:e4:97:c8:b4:21:46:06:72:fc:f8:48:72:01:ee:
         3f:34:87:89:0b:08:b5:2c:d0:85:69:88:f5:4b:38:3b:46:7d:
         f6:9d:96:9a:c5:b8:75:30:d5:46:fe:1a:21:9c:ad:ed:79:ff:
         e3:d3:5b:78:bd:6a:bf:3c:ad:08:35:6c:29:e8:4f:b9:7f:1e:
         26:5d:73:a3:15:84:e1:6f:0c:73:60:63:1e:0b:6a:a4:a5:2a:
         83:22:8f:58:7e:8f:bc:ae:c1:0d:a2:a5:48:dd:ff:77:b4:dc:
         66:36:65:d5:95:95:f0:31:44:d0:c1:51:e9:83:2a:07:4f:66:
         39:f4:e1:f4:5b:54:16:3a:09:db:3e:91:49:9c:7f:f4:5c:e1:
         80:12:e9:60:53:77:92:8a:d1:60:94:52:c7:e4:9f:3e:f6:f6:
         46:a1:a2:f6:02:fa:62:5a:2c:02:d7:31:ff:9e:fb:9c:af:17:
         5a:ee:17:31:09:16:05:26:83:b6:48:3c:00:93:21:0c:bd:92:
         4b:a3:22:4a:aa:d9:1f:7a:b4:13:f2:bf:7c:5e:6a:f1:29:0a:
         f6:ac:ee:eb:b2:30:1f:85:33:d8:5e:64:ed:89:12:de:0d:ad:
         89:15:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:35:39 2026 by rpki-client