Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/883a395f-3512-325c-9608-898d0bf943a8.roa
File:                     883a395f-3512-325c-9608-898d0bf943a8.roa (raw, json)
Hash identifier:          C0DghCVvXXcK7vHX6xn2iic/xmBW4zhIteyYf14HEP8=
Subject key identifier:   D5:43:08:24:70:DF:4C:96:54:30:E3:B0:19:22:4E:19:DA:3A:5A:52
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584D5E1A82B5D524BED3246CD010
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/883a395f-3512-325c-9608-898d0bf943a8.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        160.32.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:82:b5:d5:24:be:d3:24:6c:d0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=890d5876-6f7f-42b0-9f52-74f65fa32df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:86:a6:75:61:87:85:72:7f:b2:d6:9f:48:
                    e4:d0:bd:72:33:c1:a6:b1:f9:88:a6:ff:9f:bd:9b:
                    88:5a:a7:b9:03:d3:79:ed:ac:76:2c:24:b7:bc:3f:
                    ce:17:7b:5a:05:a7:06:2b:d6:8c:0a:0b:f1:72:ca:
                    46:ed:0b:a4:92:a5:53:5a:aa:31:74:ae:5c:cd:59:
                    ee:15:92:e0:19:b0:ba:83:3e:44:5e:1c:21:1b:14:
                    86:a7:a6:75:3a:fe:a2:62:c7:9d:29:52:89:fb:ce:
                    82:69:04:41:64:20:85:62:37:76:42:90:c7:fc:d4:
                    d3:2e:a4:ca:ba:c7:bd:3c:a6:0d:f2:53:87:ca:7d:
                    85:6e:6d:f1:ca:10:28:f1:d5:ef:96:fe:96:1d:2f:
                    21:10:6e:a7:7b:95:9b:50:6d:a7:c2:05:44:47:da:
                    9e:33:cf:50:a0:d6:9b:80:b1:2b:1d:27:62:a8:8f:
                    d6:47:dd:98:41:83:79:75:67:df:22:29:ab:1d:11:
                    47:b6:f1:35:2a:11:75:c3:87:a6:a3:0e:a7:51:f3:
                    49:d5:37:5d:ae:bf:3d:be:73:4b:4c:b2:63:9a:00:
                    da:b9:0f:0c:07:34:0b:44:82:1b:2f:e9:63:ea:7b:
                    09:71:19:47:15:13:3b:82:55:35:38:cb:35:84:69:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:08:24:70:DF:4C:96:54:30:E3:B0:19:22:4E:19:DA:3A:5A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/883a395f-3512-325c-9608-898d0bf943a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:73:40:cc:80:48:6a:d0:e6:12:90:71:ea:ab:25:89:15:da:
         30:f7:69:3c:58:e2:e7:75:af:06:ae:68:93:48:fb:b4:2e:73:
         87:29:21:4e:65:34:3b:42:fe:e5:7c:90:8d:4c:9c:d6:2d:da:
         ca:f8:aa:9c:70:00:6b:42:2c:6a:91:6d:cd:08:4b:01:d0:a2:
         5f:6b:94:de:95:e8:02:11:b9:3d:de:da:a1:a0:35:5e:7c:ca:
         c2:71:0e:a9:34:7c:4c:a7:32:c4:fc:c1:59:5b:f1:c4:56:fd:
         2d:c3:12:96:df:3e:54:53:b6:43:56:4a:fe:19:1a:44:92:90:
         b5:60:6b:f0:a9:40:90:fc:80:cd:13:a5:66:39:2c:ef:0c:11:
         8d:62:fc:ab:1e:76:c3:03:af:b9:fb:b6:a5:ab:b2:82:c8:01:
         18:3d:62:3d:ba:1c:37:9e:1b:c0:54:a3:7d:88:18:02:bc:7a:
         0c:8d:b1:9b:2d:9f:1b:c5:d3:58:df:ea:12:32:02:dc:23:f1:
         1b:51:4c:f0:3a:78:03:53:1a:71:96:58:34:9b:3a:b3:f7:bc:
         36:d8:dc:03:f2:7e:39:23:4e:35:f1:12:0e:cf:d1:33:20:23:
         ad:58:65:b3:60:49:83:62:b6:ca:99:61:a6:35:86:c7:fa:5d:
         34:71:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:31 2026 by rpki-client