Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
File:                     4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa (raw, json)
Hash identifier:          ZAAL8HBPhhLaXgha2HEqQCuUJtOaS2N8/zZgnXA6ybo=
Subject key identifier:   36:E5:DF:D5:DE:8A:63:76:72:12:1C:5E:8D:D7:58:8B:0E:56:C9:EC
Certificate issuer:       /CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
Certificate serial:       010D0C9F4328584F119D154B37852B1FA331DA00
Authority key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     395089
IP address blocks:        192.160.102.0/24 maxlen: 24
                          2620:132:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:15:4b:37:85:2b:1f:a3:31:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5472dbb4-b6d9-4e75-b20d-650cdc9368c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:14:c0:d6:8e:b1:51:c1:62:63:6c:52:d4:
                    0c:7f:4f:2a:8d:96:0c:59:7f:83:cf:de:90:03:6d:
                    b9:ec:47:e3:3b:4d:4a:c9:4b:2f:ec:1c:3a:94:e1:
                    7e:d4:e7:0f:77:86:82:ae:4c:5b:aa:ac:f8:03:1a:
                    e8:86:45:b8:27:fe:b3:83:70:7d:9e:a8:b5:17:5a:
                    3c:12:6b:46:51:04:18:0c:e8:ab:08:f9:c0:10:df:
                    6b:61:b0:e0:41:e2:16:3f:1c:a2:4d:ca:6a:01:b5:
                    20:cb:b2:84:75:03:b9:13:cd:a8:18:7c:fc:0e:ca:
                    17:f6:2f:99:6f:87:b8:f3:fb:4d:9f:ac:45:0e:96:
                    70:ee:6e:ce:9b:63:5e:ce:d0:5b:42:37:07:56:62:
                    57:c9:9c:3b:ca:26:3f:fa:f3:c5:68:ad:f2:5c:91:
                    be:a8:e1:5a:8f:cb:72:74:2b:1e:fd:39:7f:e1:95:
                    95:2e:30:10:3a:ae:a4:85:82:42:1e:ce:49:17:25:
                    df:26:49:d9:28:ab:60:8a:2e:7c:24:86:46:27:67:
                    36:13:db:90:45:36:cc:b6:c5:43:ca:34:7b:5b:f4:
                    d4:e9:4f:a2:28:18:1d:2d:2b:ae:ff:d6:30:0f:d4:
                    40:c7:ed:59:d2:32:c1:f1:6d:11:7f:a1:73:dd:0d:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E5:DF:D5:DE:8A:63:76:72:12:1C:5E:8D:D7:58:8B:0E:56:C9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl

            X509v3 Authority Key Identifier:
                keyid:08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.102.0/24
                IPv6:
                  2620:132:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:7b:2e:e0:ba:34:4d:68:18:96:f9:cf:d7:bf:20:71:a2:
         c8:fa:d5:68:43:fc:77:a5:f6:a1:37:21:9e:5d:bf:9a:a9:61:
         fa:ed:44:b1:7e:91:f9:ab:78:fe:43:45:50:a0:b3:b7:72:dd:
         35:7f:67:95:a6:d4:c9:d2:92:24:86:48:db:63:29:9f:a4:dd:
         ea:33:4d:e4:6c:20:07:cb:77:00:49:1e:02:6d:1d:b7:8f:e0:
         eb:c3:f0:54:d2:80:77:9b:6b:48:78:f6:1f:63:5e:a1:2d:dc:
         a0:21:08:7b:6d:05:93:07:8a:1f:7b:23:dd:08:a3:fb:a5:c1:
         7c:72:bc:8b:3e:95:73:52:17:a0:8e:9f:b6:71:a2:0d:59:b0:
         c5:98:4f:84:54:41:8b:60:84:cc:a8:d7:b7:09:67:d9:c8:b2:
         c4:c8:25:4d:eb:7d:28:58:6b:62:ca:11:59:6f:53:dd:24:c5:
         f7:d1:5a:ff:e3:d3:64:73:d4:0a:4d:f0:94:bd:90:12:c1:29:
         ad:ac:2e:b1:8d:eb:13:96:c8:55:53:08:2c:01:7d:d9:2d:9a:
         65:ca:22:e5:6c:8f:5a:be:7b:78:ff:dc:bd:fd:4b:0a:e2:e5:
         f0:da:85:00:21:51:8b:8c:c0:44:7e:d7:8d:ca:da:f4:e3:d1:
         5b:54:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:23:07 2026 by rpki-client