Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa
File:                     795fa07a-13af-344a-81c5-38585d67c87d.roa (raw, json)
Hash identifier:          GUbtixOhIvbOMV6grOnw5NcnPNv7qsbrqzNtPVjiLtU=
Subject key identifier:   9C:DE:DF:D7:70:BF:3E:B5:79:CE:0B:BA:A7:67:8D:44:9D:2B:73:2C
Certificate issuer:       /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial:       010D0C9F4328584F45428EB5A4157FB76F93D200
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     398471
IP address blocks:        157.62.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:8e:b5:a4:15:7f:b7:6f:93:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=af4c0581-a5c0-4de0-bfbf-b4f47a81b103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:d2:76:4f:dc:28:2c:cb:ad:8c:f0:00:19:
                    42:53:77:c4:ab:5e:52:f3:a9:ca:b9:6d:a0:8d:e6:
                    14:1c:99:39:f0:79:66:90:4d:df:93:2f:73:30:e4:
                    73:5c:cd:a2:9d:ea:83:58:e2:9b:68:99:6e:0c:28:
                    34:ce:c5:a4:90:7c:38:49:5c:b7:c3:f9:d4:20:27:
                    29:8d:7b:2d:53:18:28:93:cb:e5:c1:dc:80:a8:0c:
                    41:09:f2:74:64:16:c5:bf:1e:13:b1:ed:61:7e:dd:
                    1d:35:48:d0:97:49:d2:dd:27:3a:d0:0b:d1:b6:db:
                    15:b7:57:72:65:50:f9:96:6d:d1:14:a3:71:0f:cf:
                    62:a5:8e:53:27:ae:16:7d:66:e7:60:03:f5:c2:69:
                    41:81:f8:27:2f:3f:9a:b5:73:5a:8e:98:1b:ce:0f:
                    84:65:06:3f:40:6c:2a:27:2e:63:95:02:90:4a:71:
                    93:93:e2:0f:18:1e:09:cc:27:0c:68:4b:c4:5e:6a:
                    00:16:ba:50:45:af:ed:6f:57:e1:7e:ac:36:fd:f2:
                    af:e7:d3:67:1e:1d:3e:c3:bf:d3:ec:26:1f:58:f8:
                    37:0e:b2:5e:f4:85:b5:bf:9e:9b:5c:d6:4a:e2:d2:
                    6c:bd:4a:8e:e7:65:f1:a5:43:cc:6c:a2:c4:19:1f:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DE:DF:D7:70:BF:3E:B5:79:CE:0B:BA:A7:67:8D:44:9D:2B:73:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl

            X509v3 Authority Key Identifier:
                keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:06:8d:7b:98:1e:9a:ba:12:5b:d4:fb:c5:bf:a8:b6:2b:17:
         8f:8d:a4:7b:e9:1c:56:15:90:25:31:57:9c:92:78:4d:b4:4c:
         9e:f4:16:6c:2e:65:66:2c:9e:6a:f3:07:85:5f:cc:c5:97:ec:
         0f:5e:82:51:3f:5e:45:a3:b8:87:e8:33:be:db:52:60:60:54:
         9c:51:dc:2d:63:25:df:f1:4a:a6:d6:ee:c8:f8:6c:14:64:9d:
         aa:64:3c:37:f8:6c:db:36:13:9c:b4:50:12:f3:9b:e9:7d:1c:
         d4:73:5f:d9:43:73:d6:de:35:37:67:be:56:bc:73:92:88:d1:
         ad:ba:27:47:ce:fd:69:e6:d3:40:5c:4e:b0:5b:19:ce:be:5c:
         c0:7f:6e:3a:21:ce:8d:86:14:1c:b4:5e:95:a8:67:d3:95:b6:
         72:63:c6:45:eb:91:8f:b8:6a:1f:1d:99:cd:75:88:61:ef:8d:
         0b:b3:03:6a:c9:eb:15:7c:f2:32:db:d6:b5:43:ed:41:1b:1f:
         87:3d:a2:a2:0f:a3:a1:4a:be:eb:36:65:8d:4c:1a:ea:5c:b8:
         e6:36:57:89:50:b7:9e:61:9a:3d:db:84:2b:23:ec:e2:53:34:
         9c:94:b3:db:12:f2:99:69:64:8a:a8:a9:e6:27:ef:92:7c:9c:
         c8:fd:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:18:41 2026 by rpki-client