Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/ee7edf0a-7517-3d2f-a18a-ed8c84ba27e3.roa
File:                     ee7edf0a-7517-3d2f-a18a-ed8c84ba27e3.roa (raw, json)
Hash identifier:          Cj5qz46MAI5eSb/vs7xkusl4zH5NjILcQNPjbkFTYRk=
Subject key identifier:   76:8B:8D:5A:97:BE:11:07:E1:5E:33:47:99:B2:DF:C6:B3:0C:AE:E0
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584F1897A981CB71E40A54EB9C80
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/ee7edf0a-7517-3d2f-a18a-ed8c84ba27e3.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     58182
IP address blocks:        216.52.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a9:81:cb:71:e4:0a:54:eb:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=0c2921e0-2a25-43b0-9068-4c133e340050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:bb:27:d1:0c:9a:26:bf:71:00:94:5e:75:
                    f1:91:c3:e0:8e:76:b5:4e:92:53:82:79:b0:ec:86:
                    44:28:a2:6a:7e:1a:15:cc:68:ee:0f:01:c4:d8:31:
                    3d:c1:04:d5:7a:bb:dd:bb:ac:f0:94:c1:43:3a:30:
                    2c:fd:3d:ce:74:46:63:fb:a9:8f:28:e4:76:94:6a:
                    0f:c8:d4:e2:40:9f:76:c6:7f:a3:92:81:e0:ef:49:
                    f4:5b:2b:09:ca:7c:f1:2c:1c:ee:bc:67:29:bf:7e:
                    24:38:4f:b3:b3:b2:f9:3e:5b:e7:c6:a8:3e:1b:db:
                    1d:fa:f7:20:28:c6:fd:7c:36:3f:32:b4:36:63:77:
                    cc:15:7b:10:79:ae:ac:25:36:8a:6f:d1:c4:9a:c2:
                    ce:19:05:ef:d0:98:6f:11:d8:c9:94:46:7c:2a:7b:
                    c3:29:c8:b3:da:ff:73:c3:a0:7a:a7:00:2a:6c:4d:
                    7b:b2:46:26:5a:eb:8c:0f:e1:8f:1e:7e:59:d5:72:
                    c7:b4:f4:bd:c7:16:cb:46:ed:a7:e0:a3:50:0c:cc:
                    1f:aa:6d:37:7c:83:2e:69:ff:b2:c6:fa:fc:95:7f:
                    c4:46:25:f7:84:1d:32:91:58:ff:aa:59:8a:32:e1:
                    c6:07:c7:b6:d0:b7:ca:94:fc:f6:91:f2:da:58:52:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8B:8D:5A:97:BE:11:07:E1:5E:33:47:99:B2:DF:C6:B3:0C:AE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/ee7edf0a-7517-3d2f-a18a-ed8c84ba27e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:db:6e:67:5f:7c:f2:8f:5b:6c:95:aa:c2:53:45:9f:8f:
         1e:17:21:ed:18:07:98:3b:ce:1e:6d:98:db:15:59:17:cc:0d:
         8f:a6:3b:bc:50:00:6b:34:99:43:f2:12:cb:4c:3d:e2:84:b6:
         a5:5e:8f:3a:c4:eb:48:93:6e:8b:a4:7c:40:47:53:3b:13:10:
         e9:95:a1:c4:2b:0d:b4:3c:bc:e0:62:17:69:9b:fd:c5:6e:54:
         7b:ec:40:8a:d4:36:4c:6c:b7:ad:6a:12:53:89:46:af:66:14:
         3e:9a:af:22:5c:d8:49:df:3e:19:23:27:79:75:bd:66:f9:3e:
         f3:0f:c0:9c:2f:d8:d0:da:5e:3f:2c:09:56:89:c8:4c:98:14:
         91:e0:50:13:77:a3:dd:0e:9c:9d:4b:43:e4:de:fe:8f:d4:22:
         c1:96:72:98:92:82:6a:ea:68:0e:f3:7c:9e:91:a2:f6:08:e9:
         99:c6:be:c5:dd:ab:cb:70:38:fd:3e:f2:dd:6c:e0:c0:01:d2:
         f5:e7:da:01:08:ea:a0:b7:4d:50:04:78:15:36:fc:1d:71:18:
         16:80:28:8c:db:ed:bc:a8:f6:c5:78:a3:5a:4e:fc:4a:7a:54:
         e5:d0:ac:10:81:dc:00:a5:6b:39:6b:29:8f:5b:43:89:8e:05:
         b7:ab:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:18 2026 by rpki-client