Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa
File:                     f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa (raw, json)
Hash identifier:          8zVo+TDBBOP3tdiGlZ0eJLyoDaEvmvxFbeux5gQjj20=
Subject key identifier:   51:77:F6:4E:5B:66:7A:21:A3:D6:F7:4C:8C:2A:DE:8A:28:E6:C5:8C
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584F093CECBC3B106DB72F144280
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     3855
IP address blocks:        162.255.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ec:bc:3b:10:6d:b7:2f:14:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=58bfbb9f-2c04-4482-baa9-d006737964d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:32:9d:df:ae:82:6a:dd:e5:25:02:40:11:
                    9a:d7:30:0b:3e:6d:14:8c:fb:82:87:e0:0c:9a:27:
                    9d:8b:44:5c:2f:a9:94:d0:5f:05:f6:53:a4:a0:31:
                    72:3a:83:55:27:12:54:1f:8b:9c:45:ad:c7:0e:41:
                    82:de:97:61:32:d6:87:ed:9a:f3:ea:62:ef:e5:1f:
                    c6:64:63:f7:69:44:f2:48:5e:80:1b:65:a1:55:18:
                    c3:df:b8:2a:6e:4c:6f:98:26:4f:27:a6:c0:ac:66:
                    d7:77:79:63:b0:cf:b4:52:8d:1a:21:65:d8:0f:7f:
                    07:35:8f:f8:ba:03:82:2e:17:69:8c:53:da:c7:b3:
                    24:10:e3:fa:72:3d:dd:63:a4:b1:b9:58:7a:a3:81:
                    2d:53:b5:1b:07:e7:55:ff:ed:27:03:71:0e:5c:8f:
                    32:04:74:34:5b:2e:67:fd:d5:2e:02:5f:a1:c7:12:
                    4c:f5:e3:4f:66:87:03:d3:53:5d:5d:95:0a:ff:ad:
                    39:a6:01:da:0a:07:4f:f4:d5:e2:f7:3c:fd:23:40:
                    0f:8c:24:e6:81:51:59:5c:0f:33:d1:ba:66:07:63:
                    e6:e6:da:a6:2d:9e:24:63:99:71:7a:7d:6e:8f:af:
                    ad:20:9a:13:09:aa:93:0e:c9:13:29:3e:88:ce:76:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:77:F6:4E:5B:66:7A:21:A3:D6:F7:4C:8C:2A:DE:8A:28:E6:C5:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:69:27:e8:1c:6e:af:30:86:77:1f:4a:6c:42:56:d0:15:9c:
         b2:8c:ac:67:aa:08:85:05:1e:f5:90:06:c7:b0:fd:83:67:e7:
         85:65:e7:19:fe:94:35:cf:fe:90:6a:a1:a9:29:17:4c:62:9e:
         49:03:ab:05:cb:38:6e:ca:f5:df:7a:11:a3:49:af:be:5c:7b:
         12:a0:73:34:56:89:ab:82:8a:d7:95:2b:fa:40:14:1a:2d:ed:
         c4:96:2c:4f:03:36:b8:b5:da:cf:1c:b3:4a:27:d5:a6:45:c5:
         6d:34:4e:e3:3f:b1:64:30:04:c8:d1:b4:a7:c9:9b:cb:a1:d3:
         5f:d1:8f:d2:5d:74:f7:15:46:ce:ef:ea:cb:ac:36:94:31:81:
         6e:4b:52:03:7a:10:56:e7:74:15:96:d2:0b:f5:d3:e6:0f:21:
         47:3d:66:37:b4:8f:d2:31:bf:7a:b8:15:0f:ca:c3:a7:45:84:
         6a:77:d4:13:46:51:1e:44:96:13:9f:4e:4e:60:0b:7c:76:5c:
         f8:84:eb:20:44:1d:36:0a:61:c5:99:91:7d:d6:c3:cd:27:38:
         44:d7:78:33:70:81:d2:e7:2a:f1:07:36:58:ff:f8:7d:99:e8:
         df:b4:17:39:b7:b2:a4:78:37:99:50:21:e6:fb:c3:b4:29:2f:
         eb:33:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:15:00 2026 by rpki-client