Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa
File:                     582ea809-ce36-3215-be87-d35103b9b9a7.roa (raw, json)
Hash identifier:          AR8iMYMqLK3tr9fvYDmMsMsZcvjlRF4PimqduArGfjU=
Subject key identifier:   1E:88:21:C9:E3:BC:4E:7D:2B:9D:A8:14:72:C4:3A:AE:95:44:69:F8
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584FBAA10BCEFC2D4C7C204B5D80
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa
Signing time:             Wed 04 Nov 2026 14:00:13 +0000
ROA not before:           Wed 04 Nov 2026 14:00:13 +0000
ROA not after:            Tue 02 Feb 2027 14:00:13 +0000
asID:                     59865
IP address blocks:        199.62.146.0/23 maxlen: 23
                          199.62.148.0/22 maxlen: 22
                          199.64.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ba:a1:0b:ce:fc:2d:4c:7c:20:4b:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Nov  4 14:00:13 2026 GMT
            Not After : Feb  2 14:00:13 2027 GMT
        Subject: CN=787b2a8c-486e-4834-934f-24d21d3bec18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:91:3a:68:35:69:29:7e:03:70:9b:de:ec:
                    bf:78:1a:9c:7f:2c:0c:76:b4:16:5b:c7:fd:10:fa:
                    84:bb:ab:41:4b:6b:65:6a:83:b5:27:49:b1:c8:ef:
                    13:34:a8:e9:81:0a:6e:c2:98:52:85:49:09:75:a0:
                    be:e3:f3:2e:2b:d6:2e:51:96:cb:3a:7d:6b:85:c2:
                    0c:da:75:d7:90:fb:28:56:f2:51:99:cf:fc:90:e5:
                    db:15:a3:5b:e3:23:f3:0b:dc:38:e8:4d:88:89:6a:
                    b1:22:83:7f:c7:34:af:60:54:e5:8d:d3:da:c3:c1:
                    97:be:e4:e7:f9:6b:29:d4:68:9c:1b:1c:2a:fb:5b:
                    fc:2c:d1:e8:11:b4:c2:1e:c3:9f:15:2c:6c:3a:cd:
                    c6:3d:55:ce:41:75:09:3d:20:b1:0c:16:ea:78:e5:
                    67:4b:96:3c:86:31:a5:26:bd:fe:35:78:40:13:f4:
                    f7:30:7f:7f:a9:0c:3c:ee:c7:1f:9c:12:01:d4:7f:
                    05:9e:00:43:b0:43:a4:56:c3:e2:51:65:8c:2f:ce:
                    c4:77:a4:dc:5a:6e:3e:7d:8b:8c:0f:25:17:77:92:
                    6f:3f:24:8d:74:53:2b:75:f2:ec:cd:0d:da:58:1b:
                    26:c5:74:7e:57:52:03:74:74:e7:50:31:00:0b:5c:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:88:21:C9:E3:BC:4E:7D:2B:9D:A8:14:72:C4:3A:AE:95:44:69:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/582ea809-ce36-3215-be87-d35103b9b9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.62.146.0-199.62.151.255
                  199.64.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:48:2a:68:6e:5d:f2:8d:cf:6a:33:09:35:d9:9b:c0:1a:
         1d:6b:d1:94:d3:e1:e5:a3:7d:b0:7f:1c:3d:d4:3c:79:14:c0:
         3a:3b:80:74:d4:ea:df:b5:7b:95:0f:61:34:92:8b:a8:8e:14:
         ae:8b:70:5c:05:bb:c1:e0:b0:bb:e5:0a:4d:6b:ee:af:22:28:
         f6:cc:50:40:cc:1c:aa:35:52:da:de:5e:0b:8c:79:01:33:39:
         1f:f1:c7:38:61:e5:c4:59:df:a8:6d:34:d8:46:04:ce:ea:8a:
         f7:65:59:73:bf:8f:08:5a:30:13:33:cd:cf:43:e5:96:ed:e7:
         8e:b8:f1:81:d4:d1:02:1b:fa:32:d9:6c:ae:4c:dc:0a:4a:28:
         ab:06:45:75:57:e2:46:9e:a8:ed:e6:49:d1:54:d8:5d:29:da:
         97:30:e3:77:8d:6c:b0:7d:32:2f:21:bf:f1:db:16:9b:7f:1b:
         6c:77:8f:98:8f:e1:b4:8d:33:cb:e1:72:bb:a0:f7:a5:04:dd:
         14:4b:28:36:ec:bf:e9:e8:02:d2:16:4c:c3:67:f8:c4:80:df:
         87:d7:e8:2b:58:cb:9a:70:b1:43:c2:0c:c0:be:e7:02:d0:6d:
         cb:28:cf:b6:25:16:5b:ca:6c:08:bb:1c:f1:e3:44:16:5f:5a:
         5d:84:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:15 2026 by rpki-client