Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/d9a4916a-4216-3af1-b9bf-088baaca159b.roa
File:                     d9a4916a-4216-3af1-b9bf-088baaca159b.roa (raw, json)
Hash identifier:          UtDTEqQzYAospK6zMq0+uuFk6XvnybJrg52Fm/cFlGU=
Subject key identifier:   50:AB:81:4A:1B:F5:73:77:61:AB:E1:AF:BA:3E:59:B0:7C:D1:A8:F9
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F4328584F74B82EE3AA24278100120880
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/d9a4916a-4216-3af1-b9bf-088baaca159b.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     11287
IP address blocks:        163.182.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:2e:e3:aa:24:27:81:00:12:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=f3237d1b-229c-4ff4-bdd5-0ea3978f2eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:24:ea:56:48:fa:de:8b:f4:33:fb:99:a5:
                    7b:36:9e:a2:bf:e4:b5:1e:71:c4:78:a1:b1:38:f7:
                    2f:02:ba:04:b2:da:f6:9c:d9:8a:62:1f:5d:66:23:
                    b4:d2:42:ef:9c:ec:93:c4:ad:10:a3:3f:b2:b6:21:
                    35:6f:9a:b0:d6:0f:b7:bb:42:b9:b4:24:3f:ce:ea:
                    d1:8e:48:24:d1:f2:ec:0c:3e:e4:56:81:27:6d:a6:
                    59:ea:9d:3b:4d:9e:28:7c:86:1b:b6:7d:69:a9:e2:
                    d2:29:98:0c:4d:e6:a4:e9:83:f6:64:fb:37:2a:aa:
                    79:e4:23:78:7d:71:8b:b7:14:35:ec:9c:e0:46:ba:
                    53:72:f2:da:e3:d9:26:e3:db:cd:03:5a:60:ec:0c:
                    7a:d8:68:81:fd:85:d3:ac:76:58:51:40:2b:e6:d3:
                    bb:36:d8:16:53:e4:58:f0:0b:85:cf:b0:d4:fb:ad:
                    8c:1f:f4:b5:a3:f6:47:e4:05:d4:7b:6d:94:b4:51:
                    2f:be:32:3d:b6:b6:01:83:06:a1:c7:3c:38:d7:4e:
                    80:11:66:8f:ea:25:31:ec:dd:ff:6d:3a:c7:dd:1e:
                    bb:a1:a0:ac:08:4c:a3:4b:ab:6d:f2:8c:f1:e9:76:
                    f8:6e:b3:ce:9a:7a:00:2d:ea:84:49:9b:0e:85:06:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:81:4A:1B:F5:73:77:61:AB:E1:AF:BA:3E:59:B0:7C:D1:A8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/d9a4916a-4216-3af1-b9bf-088baaca159b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:f5:3d:b4:9e:de:5a:01:5a:04:34:52:ec:2f:3b:65:0c:
         1c:0a:b0:3a:5c:7d:d2:b8:fb:b4:2b:12:4d:83:d4:6a:af:2b:
         4c:28:5c:80:05:60:6a:82:e0:f9:e0:c7:30:1c:5e:ad:85:20:
         94:b9:39:dd:04:25:70:cf:84:e3:d9:6c:e4:27:71:7c:f7:06:
         ab:43:b1:06:f1:e5:c6:e9:c1:89:58:79:ff:56:d8:57:0c:cd:
         83:f2:09:b4:d5:67:7f:28:0b:01:f5:21:f3:80:8e:c9:3c:e3:
         79:9c:84:c6:83:64:22:1e:e5:6f:d4:8f:2e:e7:6d:f6:e9:5a:
         9d:97:c0:14:20:e6:f1:8a:02:d1:92:ed:3c:bb:0a:fb:0e:b0:
         96:7d:be:b0:21:a5:93:f1:64:74:ce:e2:7f:20:56:41:66:0a:
         0f:27:29:97:64:73:07:73:59:90:be:89:86:9a:b6:2b:1c:8e:
         7b:ab:40:6e:cb:06:0d:80:67:03:a6:8d:53:5b:02:a2:ca:d1:
         13:83:80:ef:ea:b6:21:fb:a9:e3:0a:f3:e7:b4:78:da:fc:f9:
         07:28:59:2c:62:72:c2:84:9d:3b:e9:c7:d9:bc:f2:8a:62:22:
         35:9d:d9:df:08:83:80:ad:c2:0a:d2:ee:de:28:8c:4d:69:9d:
         8c:b6:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:57:51 2026 by rpki-client