Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b5ab665-add0-3a56-97f8-599bbf00308a.roa
File:                     0b5ab665-add0-3a56-97f8-599bbf00308a.roa (raw, json)
Hash identifier:          qIYp7ECn4sbgBKy9Ex1l9YCfH5kBTB+aSTFXevNrBxA=
Subject key identifier:   4F:90:41:A6:86:BF:E4:58:02:A3:D0:0B:20:D2:3D:28:A5:0C:5C:43
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F1732524F04F3C869CC27A780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b5ab665-add0-3a56-97f8-599bbf00308a.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     396616
IP address blocks:        216.87.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:52:4f:04:f3:c8:69:cc:27:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=e0566405-c049-4c33-ac45-d0b15ecd85c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:0e:e5:7e:b2:d6:18:af:33:17:b3:f1:6e:
                    50:b7:b0:ac:bd:5c:ac:dc:5e:67:79:53:93:80:8f:
                    73:01:6f:f4:3a:a6:22:f0:95:64:1a:3a:b4:2e:51:
                    60:71:53:25:70:e0:b4:2f:83:f1:8a:b9:89:b5:11:
                    95:45:9f:ea:8c:d3:12:74:cc:db:a7:93:de:cc:93:
                    c1:1f:4e:07:61:31:f1:67:64:70:6f:21:5e:e0:2a:
                    af:33:e8:c4:f4:75:41:e1:17:c5:30:2c:c3:33:19:
                    90:a1:70:ab:fc:f4:34:44:84:f8:c7:02:ec:d6:ad:
                    33:21:6d:04:50:1f:99:c7:97:0f:f0:4a:07:35:83:
                    59:b3:b0:a1:3f:91:af:78:e5:f3:e7:53:f8:55:d1:
                    08:5b:ae:ba:9d:1e:87:56:3b:0c:6d:a7:bd:37:c6:
                    b2:21:20:47:19:02:ba:c0:17:b6:f1:fe:89:ce:c1:
                    d8:f7:87:c9:7e:1c:c6:36:af:3f:6a:c9:2e:f8:93:
                    04:69:0b:9b:0b:57:65:cb:56:37:93:0c:5b:70:c3:
                    be:43:26:c5:85:9f:02:32:23:e3:3f:e2:5e:fb:45:
                    62:73:04:79:37:5e:bd:d9:ba:1e:94:ce:73:3e:2a:
                    82:fe:25:2a:e6:ad:46:59:5c:80:b9:e9:bb:7a:3b:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:90:41:A6:86:BF:E4:58:02:A3:D0:0B:20:D2:3D:28:A5:0C:5C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b5ab665-add0-3a56-97f8-599bbf00308a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:85:62:f2:46:98:02:68:5f:df:b8:7c:ec:67:1b:53:6b:ca:
         53:c9:e0:a5:34:63:58:5e:91:9e:93:e5:1d:6c:32:40:73:a9:
         b8:37:3a:4c:e2:15:60:6f:1b:1a:5a:eb:07:6d:f6:89:83:f1:
         88:d1:79:44:7d:8e:80:0e:56:98:d6:37:68:c8:a3:cf:34:0d:
         62:69:59:5c:19:10:7b:80:61:03:8c:6a:ad:74:e6:d1:11:d8:
         bb:12:6a:ea:56:4b:c3:c8:61:91:5a:29:33:32:a7:97:59:fd:
         22:d4:b7:42:af:0d:e9:d7:3c:be:83:cc:3f:9d:00:18:95:f1:
         89:fb:cd:be:d2:28:7b:cb:d7:56:9c:42:89:66:27:c3:03:db:
         b1:15:18:4d:9a:71:a6:52:b7:b4:19:59:0d:f9:0f:43:b9:f6:
         f7:92:6b:3d:49:ed:f7:bb:d2:24:b8:1d:bc:e9:c5:8b:63:98:
         ca:ce:ed:d0:2d:2d:45:2f:8f:08:78:a0:48:fc:71:6a:c9:a9:
         d3:8d:1d:20:77:6a:7f:b5:1b:c0:41:df:58:90:e9:80:cc:1d:
         46:43:fe:1f:56:df:ac:58:bd:45:ea:8b:a9:dc:fe:91:09:ec:
         d5:39:da:a6:54:2c:5a:1c:17:89:30:ea:f7:d9:aa:37:bf:0a:
         c9:ad:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:21:08 2026 by rpki-client