Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa
File:                     ad35477a-7b33-3abf-a97f-75b5a8927582.roa (raw, json)
Hash identifier:          dFBK39VpEjiQiDDkcrtKE2O1RaNhM3gN2WaKdUi/7nQ=
Subject key identifier:   39:15:09:0D:97:0A:BB:66:C2:F6:78:80:56:DA:60:E1:39:E0:09:4A
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584F1B624BB9AD70628156191B00
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     398210
IP address blocks:        168.220.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4b:b9:ad:70:62:81:56:19:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=71dcef74-b886-4f0a-8281-de6e23eebebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:dc:93:bd:4b:00:3b:71:3e:35:0c:09:94:
                    c6:a0:c7:28:a5:3d:3d:57:41:47:9a:f0:e9:70:d9:
                    34:1e:4d:55:f1:ca:b3:9a:79:85:3b:6c:9a:9d:ee:
                    7b:ec:21:de:9c:de:a8:30:67:9f:b0:84:e7:1c:52:
                    aa:3f:2a:3a:76:4e:7f:9f:0b:70:5e:4f:9d:78:a6:
                    b2:9f:2e:57:f8:bf:d7:bf:42:c4:e1:5c:58:11:63:
                    e2:c2:1f:a8:8a:4a:78:5b:61:a5:65:7d:2f:b7:f5:
                    e0:c4:e1:ed:dd:e2:f0:df:10:79:18:4b:65:e2:8e:
                    0b:6a:98:4e:28:79:b9:d6:82:ae:6d:d1:f8:95:10:
                    17:e2:09:b9:6d:5b:cb:78:90:76:e6:c2:7a:0f:25:
                    e1:29:31:06:4a:50:08:20:64:ba:e4:b5:11:06:8d:
                    7f:0a:44:36:77:30:6e:22:1e:fa:96:7e:6a:64:87:
                    85:80:fe:15:17:36:bb:a3:aa:15:f8:08:85:7d:45:
                    91:c8:e0:bf:f8:ee:b0:03:36:e3:17:f2:b0:2d:af:
                    ca:4f:af:5a:27:21:af:61:3f:6e:60:75:b6:c4:39:
                    b1:97:ae:6b:e2:a2:91:b3:77:59:f4:4c:2e:bf:52:
                    54:c1:2e:fc:c5:df:39:92:e8:05:4a:56:69:f6:7c:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:15:09:0D:97:0A:BB:66:C2:F6:78:80:56:DA:60:E1:39:E0:09:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:8e:61:dc:ec:da:59:c4:d2:22:fd:38:90:67:73:10:f8:
         2e:99:0b:b9:19:35:53:74:5b:72:1b:8c:b3:1d:09:63:cd:4e:
         62:c3:ba:b7:b0:c6:7b:8d:16:a1:34:33:88:2f:c7:71:ee:5b:
         fd:27:e1:4c:f9:25:89:50:f4:76:b4:18:0c:e1:51:ee:32:10:
         28:d4:f6:04:c7:66:6d:f4:d5:24:01:2a:14:4e:43:0f:2c:33:
         b1:83:ed:bd:2a:86:ed:9a:87:9a:b8:70:4e:0d:ad:71:5f:4a:
         c7:ff:18:8b:14:9a:7a:76:6b:60:18:ed:39:68:b7:34:fd:b2:
         99:4b:13:25:b4:56:a6:33:0a:58:ae:86:43:c9:19:4a:c1:bd:
         19:ed:b6:a1:44:73:7d:26:3f:5e:af:ec:6a:a8:39:50:84:b9:
         b8:c3:72:69:03:ef:b7:7b:b4:8e:7d:e4:d2:b0:f3:9e:72:8a:
         9d:4d:ff:62:2d:d4:d1:5a:cc:81:d2:c4:75:c5:85:c6:65:93:
         b4:dd:1f:38:d3:e2:0b:94:95:f8:23:b5:e4:62:10:d2:5d:30:
         03:6f:d2:f0:3e:2b:36:c0:7e:1b:ad:65:a0:b3:ff:29:77:33:
         8a:c1:5b:5c:ee:67:83:cf:8c:dc:7e:7e:b7:e6:b9:15:b1:0f:
         b6:d9:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:56:20 2026 by rpki-client