Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/81147481-e43d-3c6e-b921-7a5d45ad8299.roa
File:                     81147481-e43d-3c6e-b921-7a5d45ad8299.roa (raw, json)
Hash identifier:          hF9Tk144c95A+dghelNlQ2h2DTwKYGq4CEG8pVmKz5s=
Subject key identifier:   67:C1:15:4D:7F:8A:07:08:B9:82:C0:D9:AA:4B:B5:E7:09:6B:EC:5D
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584EF71765AE33444F85A3077280
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/81147481-e43d-3c6e-b921-7a5d45ad8299.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     30687
IP address blocks:        216.38.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:65:ae:33:44:4f:85:a3:07:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e82ccf36-496a-4e5c-a0e7-669fc52d59b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:bf:79:be:93:95:c0:31:0e:48:f6:1e:6d:
                    b4:2f:0d:03:60:47:13:68:80:41:d9:b4:c2:3e:ec:
                    39:a2:30:dc:60:6d:ab:4c:6a:1b:91:ec:ba:be:66:
                    0e:0b:4d:96:aa:26:0c:07:0d:a6:ab:40:2b:82:7b:
                    73:43:d6:8c:0f:49:ec:66:a6:72:e5:17:27:6c:21:
                    a5:c4:1a:46:97:0c:76:14:1c:da:b2:2c:7f:7c:41:
                    7a:ac:76:37:1c:b8:ee:36:1f:75:ba:1e:7d:0d:40:
                    bc:76:72:39:8f:7c:72:99:39:dc:d3:a7:19:16:31:
                    ca:48:d4:f6:99:ff:08:7c:dc:2f:92:21:3e:3c:a2:
                    7d:61:51:9a:23:d3:9e:58:23:e8:25:e7:23:ef:7d:
                    c0:a7:23:f8:4c:ab:0a:fb:ba:41:c6:1d:8a:4c:a0:
                    ca:0b:a2:4b:43:47:36:0c:7a:eb:fe:b5:35:98:4b:
                    d4:c2:e0:53:3b:07:6b:1a:e5:17:d3:fd:84:b3:39:
                    1c:c9:2e:bb:42:3e:40:6c:1d:b8:8c:5a:92:03:58:
                    a3:49:4e:97:f7:ad:4f:85:29:11:05:7f:af:2c:0b:
                    8b:71:a0:ef:fc:35:0d:5f:06:d1:a3:72:87:50:bb:
                    2c:b2:32:a8:f6:ce:08:ea:ad:10:53:c1:98:0a:35:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:15:4D:7F:8A:07:08:B9:82:C0:D9:AA:4B:B5:E7:09:6B:EC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/81147481-e43d-3c6e-b921-7a5d45ad8299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:79:14:a6:80:42:ae:c9:9f:dc:93:dc:47:27:02:3e:07:e7:
         b3:87:21:fc:16:23:a7:81:72:c8:21:dc:59:7a:e0:f5:4a:e4:
         98:e6:8d:45:67:ea:97:ce:4c:92:6d:f1:08:d3:1c:bd:87:c7:
         23:6a:d6:1f:06:a2:8f:38:f2:65:e5:16:1f:99:02:a1:17:32:
         d5:ca:e2:fe:7a:46:47:e7:26:ea:5a:3a:e0:e9:3f:52:bd:29:
         85:52:b6:c2:ae:8b:39:fd:93:8f:77:91:3a:fd:dd:be:a9:dd:
         83:b9:43:d6:2b:14:da:43:db:8a:3b:86:da:27:b9:fc:1d:4b:
         0b:9d:3b:a8:e1:a3:c3:89:72:95:a8:82:fb:d9:9b:d1:d8:87:
         98:5f:a0:ef:40:bb:bb:57:b9:59:90:d2:06:6a:5d:2b:65:88:
         72:f0:eb:20:36:01:69:46:b3:24:ff:7a:c1:47:d6:0d:71:60:
         79:90:b3:c2:16:d6:cb:00:62:4e:07:48:bd:f8:09:da:f8:35:
         e9:1d:27:83:a7:4a:dd:80:a7:20:74:b6:fc:2b:89:c0:b5:be:
         c6:a1:a5:1a:56:e1:d9:1b:f2:28:1c:ed:48:5b:3f:c6:4d:63:
         45:1a:8d:e2:7f:77:0a:a7:be:e8:85:67:e3:72:ad:a8:5a:15:
         44:09:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:21:35 2026 by rpki-client