Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa
File:                     de52b118-f70d-34c0-8d87-b4abb72880d9.roa (raw, json)
Hash identifier:          qAOuB3NAVRF/jWeJG4+11uYokDKztEVgesbgttFKXoU=
Subject key identifier:   FF:3C:A7:EC:AC:87:3F:EB:82:C9:B6:DA:74:E1:B9:A3:35:77:C8:3D
Certificate issuer:       /CN=b2db0e90-cb59-4049-beac-d39b54244d28
Certificate serial:       010D0C9F4328584F0C0785308A027A14AB42B680
Authority key identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa
Signing time:             Thu 03 Sep 2026 01:00:12 +0000
ROA not before:           Thu 03 Sep 2026 01:00:12 +0000
ROA not after:            Wed 02 Dec 2026 02:00:12 +0000
asID:                     11155
IP address blocks:        147.124.16.0/20 maxlen: 24
                          153.75.32.0/20 maxlen: 24
                          162.118.64.0/19 maxlen: 24
                          2605:f9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:07:85:30:8a:02:7a:14:ab:42:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2db0e90-cb59-4049-beac-d39b54244d28
        Validity
            Not Before: Sep  3 01:00:12 2026 GMT
            Not After : Dec  2 02:00:12 2026 GMT
        Subject: CN=30042989-a0a6-442f-a418-dbe04cafab27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:89:11:0d:b6:6e:81:5d:2c:d8:24:6c:9e:
                    da:59:fe:3d:98:27:80:e8:77:a9:a9:9e:5a:40:ad:
                    be:de:38:62:35:19:e5:0d:69:8e:5f:df:1b:d9:fd:
                    9b:38:09:fd:14:07:a8:89:e3:cb:39:be:61:22:a3:
                    89:7c:46:42:56:75:b3:bb:3c:be:15:21:c2:ec:76:
                    d8:8c:29:1e:69:2e:1e:6c:1e:c4:3e:ba:19:35:5a:
                    10:3f:9a:62:c2:68:36:bb:68:be:66:08:9f:c1:f9:
                    f2:a3:b3:3b:b4:16:6d:30:22:08:08:fb:15:56:ef:
                    fe:33:14:f4:cd:33:42:b9:f8:13:83:c6:33:33:cc:
                    f0:d0:6e:cd:e2:47:5b:d3:e3:b7:1b:58:4b:c7:60:
                    67:61:1d:61:5f:96:24:11:8d:f2:84:75:90:c1:1d:
                    09:d0:c0:0b:06:b1:a3:e1:78:12:fe:b4:79:d8:6c:
                    f9:be:aa:a3:bb:7e:d7:3d:61:f3:40:8e:0c:8c:84:
                    a6:77:3d:22:9a:fc:59:59:c3:e8:0b:5e:02:a6:4f:
                    23:2a:5d:9c:f3:19:89:89:8c:f0:c9:64:ea:69:03:
                    e6:2c:cf:bd:f1:d5:e2:38:43:48:39:b4:c2:70:11:
                    d1:4a:86:96:8b:45:30:91:eb:d2:24:1e:77:fe:5e:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3C:A7:EC:AC:87:3F:EB:82:C9:B6:DA:74:E1:B9:A3:35:77:C8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.16.0/20
                  153.75.32.0/20
                  162.118.64.0/19
                IPv6:
                  2605:f9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:6d:a7:ed:ba:8d:2d:78:5d:5b:a5:71:9d:6e:5e:0c:d0:
         bf:50:35:e8:19:f4:bf:0b:dc:c1:0e:75:23:22:a8:7c:47:a8:
         e2:b0:18:54:9d:81:4e:f9:2a:3b:87:28:27:8a:c5:98:8b:42:
         76:d6:d6:7e:68:a0:0c:e9:96:c9:9f:3f:4c:ab:d5:83:c2:7a:
         ec:11:1a:49:e0:65:02:8f:99:0e:f8:2f:07:9b:08:a8:7e:50:
         fa:47:33:fd:3a:50:2c:de:42:87:50:4f:af:fe:0b:28:a9:54:
         3b:aa:b2:78:df:0b:79:81:6c:e9:2b:86:36:37:f1:66:5e:19:
         42:c6:18:9e:a2:7a:b0:65:71:ae:fe:eb:bf:8c:09:fd:f9:69:
         19:38:91:ec:4b:d5:f2:6e:c2:eb:2c:96:03:b0:f8:da:3f:39:
         8d:f9:07:67:a9:f0:a9:e5:32:cb:5e:d9:b4:f8:b0:ca:80:cd:
         d9:40:27:68:76:0d:36:2b:58:a2:68:ce:6c:01:08:6f:ac:d3:
         c9:5d:37:d3:51:28:99:ea:79:8a:24:8c:22:5a:f6:14:d6:e5:
         ec:b3:7b:ec:1f:87:ae:36:19:21:56:e0:61:8b:fe:62:be:67:
         77:85:4e:91:20:84:8a:31:76:5a:38:cd:2d:1a:77:75:b9:d5:
         9a:8d:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:40:57 2026 by rpki-client