Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/848b9c6d-590e-3540-a8da-03f2b34ae4ce.roa
File:                     848b9c6d-590e-3540-a8da-03f2b34ae4ce.roa (raw, json)
Hash identifier:          gTIjDU3jKq2a0VLrjGY+dk4HwXD8zcMx6yBEXNGIwQs=
Subject key identifier:   45:1D:B4:53:68:1D:4A:77:7A:E4:6C:A0:CD:57:23:49:07:99:A1:23
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EFB4765B89BA3BB2C7078E000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/848b9c6d-590e-3540-a8da-03f2b34ae4ce.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     0
IP address blocks:        154.22.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:65:b8:9b:a3:bb:2c:70:78:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=72bf3123-32c5-4f9c-b467-c8b636d7b997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:f3:99:f9:77:8e:98:3b:31:94:6f:c4:80:
                    47:1e:26:6c:0c:78:f4:7b:2b:69:7c:a7:c6:33:cf:
                    fb:af:99:8f:b8:12:a1:1e:5d:2e:6a:79:b7:59:ee:
                    7f:85:3d:3a:66:fc:50:93:8c:23:06:f8:11:81:ec:
                    d2:ba:89:d8:f2:d5:db:75:bd:40:5a:b9:5c:bc:b5:
                    d1:78:9d:52:b0:af:07:11:b1:9e:db:71:af:76:89:
                    30:49:ef:85:37:fb:be:42:2f:ac:e1:aa:63:06:bc:
                    9f:99:39:85:2a:dd:ca:3b:aa:e5:b2:a5:58:1b:61:
                    f8:a4:66:b3:6f:10:8c:58:7f:f8:29:e6:c3:53:02:
                    4c:52:4a:e8:f5:48:d7:e0:9d:bf:bc:64:7c:59:88:
                    6a:2c:4e:58:c2:35:1a:e7:ef:9d:76:65:80:5a:b9:
                    76:92:75:32:ad:a8:d1:7a:3f:dc:2c:ac:d6:af:3c:
                    79:4b:77:3b:58:4d:55:d9:0a:bc:67:e1:34:4c:f7:
                    6b:36:94:30:d0:b8:9c:4b:96:88:3a:8d:c1:4f:db:
                    c2:e9:8b:91:1b:c0:3f:25:a7:9a:57:b1:00:0c:e8:
                    7c:d4:d6:0f:02:63:19:76:29:7a:2b:e8:45:01:6a:
                    d5:a6:4a:cf:03:d8:8f:c1:7b:33:de:7d:9a:0d:fd:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1D:B4:53:68:1D:4A:77:7A:E4:6C:A0:CD:57:23:49:07:99:A1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/848b9c6d-590e-3540-a8da-03f2b34ae4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.22.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3a:c3:f1:92:8e:f5:56:c0:26:e2:16:4e:29:88:d7:d1:ba:
         8d:c2:5a:64:6f:e3:3d:93:b0:7f:3b:ab:50:15:fe:43:00:ea:
         55:d0:5d:91:ee:07:69:9f:c1:d8:59:dd:87:ba:c4:dc:df:48:
         8c:1f:4e:01:63:17:53:98:5a:4e:eb:e8:79:0e:7e:4b:35:4a:
         94:17:6e:8d:85:88:26:cc:dc:2e:89:16:56:4c:6d:12:4d:71:
         1f:cf:3e:a4:4d:ab:45:c1:dc:b4:94:7c:1b:cd:60:1a:e2:c1:
         64:3a:11:6a:f4:29:21:43:53:c4:47:6e:45:eb:de:8f:84:53:
         38:17:40:df:3a:4c:bd:8c:bb:a4:f0:2b:04:97:3c:2a:13:cb:
         45:1b:cf:f1:82:73:48:fa:8b:09:ed:46:8e:45:a4:84:40:ec:
         f4:b9:3c:b7:30:49:24:0d:ae:61:d1:27:ac:d6:3c:60:cf:8a:
         f3:86:f5:24:10:0b:e4:8f:0a:9e:b6:17:d1:c0:92:19:09:05:
         6d:b5:45:38:9b:cc:1b:8b:6e:d9:a1:0f:2a:e1:6d:92:cf:70:
         8e:3a:c7:79:2a:8b:d0:9a:2f:e5:49:f0:0d:55:28:0d:7c:a7:
         0a:4e:05:4d:d3:81:9c:ac:d2:f4:b7:77:87:66:03:54:14:55:
         8f:38:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:50:22 2026 by rpki-client