Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa
File:                     546853d9-414a-3e2e-85ae-b99c281ac2b0.roa (raw, json)
Hash identifier:          W7tscvj5BcVjvNxv5JLoNwUk3jx8la8TWxQlu74s2KM=
Subject key identifier:   47:1E:2A:7F:D7:97:DE:61:0B:4B:CB:AD:3B:67:19:39:40:33:DD:2C
Certificate issuer:       /CN=db9c5868-bb9c-4fd1-9aca-05762a850994
Certificate serial:       010D0C9F4328584EA791BEE286A9A5CB7EDBB2C0
Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11872
IP address blocks:        128.230.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:be:e2:86:a9:a5:cb:7e:db:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=98a40917-d7da-45a8-a33d-dfa37e16ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:19:68:88:13:08:23:a5:7e:1e:af:7d:6d:
                    98:5e:0d:af:62:d6:35:21:ee:26:d1:a9:72:75:19:
                    e2:4e:2a:ec:0d:99:4a:1d:d9:92:14:2d:3a:78:63:
                    ee:72:88:71:ec:9e:4a:fd:33:b9:4f:9e:b6:ee:3b:
                    e3:d3:dd:ba:d4:5c:f3:88:bb:2c:11:6f:28:b5:92:
                    a4:a2:99:25:2f:13:9a:84:2a:28:c0:3b:e8:ca:bc:
                    28:0c:99:77:8e:44:89:de:3d:9d:eb:d4:d4:ac:69:
                    e6:d2:3b:d0:7a:c1:90:3a:64:20:70:97:3d:a8:ed:
                    9a:4c:4a:12:5c:5d:08:94:aa:88:7a:7b:8c:b6:02:
                    cc:f8:74:b9:13:ed:cc:8a:2f:5e:a0:c5:96:23:2b:
                    d8:2e:1e:76:6e:08:3f:50:26:8d:23:99:8c:85:d5:
                    4b:b5:04:62:c0:2c:88:04:35:30:7a:b5:c3:0e:2e:
                    3a:87:e5:62:3e:b6:33:b0:82:ec:c3:af:ba:3c:a2:
                    21:8f:45:ff:85:81:c7:40:7c:a5:92:e0:1b:e8:8d:
                    6e:19:8d:16:18:21:54:5e:bc:88:38:f2:9d:d0:dd:
                    9f:94:f2:a4:cb:51:fa:43:f1:c3:b3:a7:5d:7a:b8:
                    0c:8c:08:e3:53:dc:1f:f8:6e:9b:ce:08:07:2b:5a:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:2A:7F:D7:97:DE:61:0B:4B:CB:AD:3B:67:19:39:40:33:DD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl

            X509v3 Authority Key Identifier:
                keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:20:2e:63:cc:b4:15:a7:47:91:a3:c9:21:17:a0:69:e3:
         f7:78:0f:44:ca:04:92:14:09:54:06:71:ae:1e:48:5a:51:b6:
         8e:12:c1:01:22:17:ea:09:63:5e:b1:fa:ab:5f:c6:2a:56:a7:
         8d:1a:8b:8e:4f:2d:4a:6e:6c:b1:d8:85:ca:75:7f:8a:0c:6d:
         e0:86:b9:2a:64:20:48:08:8e:a7:33:7a:8a:0b:94:1c:b1:68:
         dc:a9:23:f0:81:b1:6a:84:0d:84:5f:38:b8:ac:d8:94:ca:77:
         26:54:c2:98:42:3b:02:3f:be:a3:3b:a3:71:20:39:ca:e4:2f:
         04:33:6d:96:6b:18:9a:40:a6:d7:1c:2b:59:1d:fc:bb:8f:85:
         92:a8:13:be:60:67:ff:bc:96:20:f7:3d:db:09:c5:fa:ce:1e:
         9e:73:89:1f:a3:f0:4b:04:58:4f:db:81:18:7a:83:4d:79:a0:
         e5:4b:0b:b4:f1:55:41:f0:ba:da:d9:3d:9c:34:b6:db:17:a1:
         6d:e0:c0:56:17:ff:a2:b0:fa:1d:96:34:19:61:72:2c:e4:5b:
         ef:27:72:20:d0:4a:37:d3:c1:ba:48:c5:42:c5:80:7f:7f:29:
         3f:f3:f6:40:36:a3:c9:a6:3d:58:ef:9c:9a:63:8f:e7:8b:e1:
         aa:47:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:23:35 2026 by rpki-client