Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa
File:                     a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa (raw, json)
Hash identifier:          OQ2FsGZhfZCQ/I2i9vf4lh2FjjfEC3Yukff8mf0w0Oo=
Subject key identifier:   30:FC:58:93:87:55:56:50:63:45:1E:D2:A0:A1:D1:E8:BA:58:5C:E6
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584EA79720D466B07F7FC57D9480
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63201
IP address blocks:        161.38.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:20:d4:66:b0:7f:7f:c5:7d:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9cebe9e4-d6d3-4ffa-9a5d-a83564172322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:9e:c4:15:a5:ee:95:4b:eb:34:65:90:0c:
                    9d:3b:80:a4:cb:98:79:f2:ff:e6:8c:5d:78:1a:13:
                    20:70:49:c6:06:da:e4:29:87:4a:90:a3:f0:b4:3a:
                    52:a6:74:c0:e9:6f:f2:02:a0:1f:c6:01:d4:e2:dc:
                    74:b2:aa:05:ff:26:17:ae:59:34:87:1b:17:b9:4e:
                    25:78:76:47:20:bb:f2:7b:d5:b8:1d:3a:ee:01:2f:
                    08:c9:23:99:29:a5:44:87:45:49:af:2d:23:cc:30:
                    a8:28:6b:b6:f2:a1:03:26:9f:3d:4d:79:d4:c5:a6:
                    f6:6d:c7:e0:7e:c2:22:ca:48:e9:69:88:91:9c:4b:
                    86:1b:22:d8:3c:5e:de:0b:ea:27:5b:b6:07:9d:9e:
                    23:c1:20:ad:41:f1:b4:af:c3:ef:8c:fe:94:3c:0d:
                    1b:c9:71:1a:65:8c:df:52:99:33:c2:6b:62:e7:9b:
                    20:dd:0a:d9:81:4f:9d:5b:e0:55:36:eb:d8:27:16:
                    81:6b:17:63:1e:c9:5e:fe:a4:7a:2c:61:51:be:23:
                    e3:2e:2d:a4:5f:76:d8:53:06:42:0b:ef:42:f7:65:
                    97:6d:d6:57:3a:5a:94:10:1f:a2:d7:e7:cf:a4:f0:
                    b5:b8:bf:b7:26:4a:3a:fb:d6:43:1a:58:89:bb:16:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FC:58:93:87:55:56:50:63:45:1E:D2:A0:A1:D1:E8:BA:58:5C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:12:e4:20:96:ef:95:d5:f3:b2:df:70:5f:63:96:6e:75:cb:
         54:55:b7:d8:e6:44:b6:6b:d9:d7:f0:d8:07:31:2e:8c:e4:db:
         e6:37:52:af:a0:aa:5e:b9:ef:71:3f:1d:41:20:23:c9:00:0b:
         7a:24:9f:1b:47:8d:44:6c:35:8e:49:c0:9e:d5:a4:9f:bb:29:
         6a:8f:d3:95:0b:a1:71:c6:bd:91:be:09:18:4f:59:2b:ab:42:
         5e:a1:f0:25:8c:fb:68:71:47:4f:18:c7:7b:b1:7d:e9:47:ff:
         9b:18:63:26:fc:63:d6:85:89:b6:96:87:6d:92:89:52:57:c5:
         e3:a3:cb:91:8e:a7:60:48:5d:f4:f1:11:67:2e:0a:7f:db:5b:
         1d:71:57:ef:dd:9b:ee:9d:d6:04:28:d6:84:33:77:cd:73:f1:
         3b:2c:cd:63:51:1a:8e:09:eb:57:d0:66:c7:40:c0:00:76:4b:
         b5:d8:ea:b4:7e:c7:7a:64:06:b0:bc:a8:f8:18:52:92:de:5d:
         b6:85:09:8b:c2:39:bf:d3:02:b4:d8:85:28:8d:1c:6e:aa:96:
         89:f6:f2:39:7a:30:ec:ef:50:5b:a1:63:c1:74:40:fc:11:f7:
         87:e8:05:94:9a:a3:0b:6e:c9:96:10:43:96:47:20:c7:dc:38:
         92:92:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:05 2026 by rpki-client