Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/80bc92da-d65b-3e55-ad8a-8115335ed30b.roa
File:                     80bc92da-d65b-3e55-ad8a-8115335ed30b.roa (raw, json)
Hash identifier:          MxkBofOnschOnN+wdtDGisLhIfUMMFqi/eXS0OwY9Eo=
Subject key identifier:   E3:53:3F:98:E9:8A:D3:D3:90:8B:80:7A:3F:3F:34:89:77:0B:F6:AA
Certificate issuer:       /CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
Certificate serial:       010D0C9F4328584EF9E20D90C5FA2C82550ED3B0
Authority key identifier: 8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/80bc92da-d65b-3e55-ad8a-8115335ed30b.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        162.219.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0d:90:c5:fa:2c:82:55:0e:d3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=38371aaf-88aa-4acb-8d1d-492541b78b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:27:af:8b:1e:5f:e6:81:6c:f7:35:86:68:
                    3b:f7:36:d6:69:11:2e:70:dd:2e:ab:ed:b7:09:d1:
                    be:39:7b:57:07:cf:12:46:84:19:dc:26:63:fd:c7:
                    17:1d:a5:9e:12:9b:8d:a6:94:28:8a:16:88:a3:5e:
                    17:78:54:ce:79:83:66:df:9a:69:4a:96:a3:e5:12:
                    76:ba:c2:5c:e4:c2:b4:84:36:ae:21:4e:4f:c7:cf:
                    48:39:a0:2b:5c:c4:1c:c7:d1:b8:ef:e4:12:0e:68:
                    f7:dd:cd:81:e6:17:23:b9:d8:3f:7c:d0:46:ab:c3:
                    ae:a8:04:fc:ce:db:36:71:8f:5f:da:96:a5:a6:35:
                    9d:92:37:e8:51:74:06:44:5a:df:39:5c:e3:7a:67:
                    78:ed:37:ba:b6:e2:43:2a:09:fb:3a:0b:27:c2:c3:
                    9a:40:b7:15:b8:e7:bb:34:7d:02:fc:17:eb:a8:1d:
                    d4:d4:31:70:00:68:39:10:aa:1b:df:ed:3b:96:0a:
                    e1:3d:0d:9e:b1:f8:f9:fb:30:2e:98:ab:38:84:0b:
                    5d:ca:f1:8a:10:78:99:d5:37:02:9a:ad:3c:ab:37:
                    6d:b6:87:8a:c8:f0:e5:70:93:44:73:b8:03:f5:f0:
                    92:aa:09:f9:f4:24:c3:08:1a:05:78:22:06:9a:8c:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:53:3F:98:E9:8A:D3:D3:90:8B:80:7A:3F:3F:34:89:77:0B:F6:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/80bc92da-d65b-3e55-ad8a-8115335ed30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl

            X509v3 Authority Key Identifier:
                keyid:8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:f5:1a:b3:50:21:12:41:bc:ea:63:c1:4d:4a:f3:55:2f:
         04:ec:41:95:06:96:e4:a3:2d:e1:21:a1:dc:e2:bc:d4:76:49:
         11:a5:ea:96:3b:da:df:15:ac:0e:a3:b2:ac:4a:69:82:91:3c:
         e8:08:21:ce:8e:4b:74:11:67:2d:66:ef:a1:de:62:9b:01:4e:
         7c:f9:73:6c:31:52:f5:37:1a:e1:5b:11:58:a5:c9:d8:30:32:
         63:9d:e9:7b:b8:e6:10:2b:b2:73:4a:fa:52:d4:33:d2:fb:b2:
         37:c3:5c:d9:1f:96:6f:91:f1:8b:97:34:41:57:b9:23:84:92:
         09:6b:4f:56:cf:eb:77:6d:73:2c:ae:0f:b4:c8:e2:3d:eb:39:
         e1:cb:57:0b:e1:f4:d6:a5:42:b4:bb:51:13:e7:25:9f:fd:37:
         e4:7d:f2:bf:e2:f0:fa:75:78:1b:08:52:6f:cd:87:f7:59:6e:
         2c:99:30:38:ca:b5:7b:97:7c:c3:26:49:21:c8:d5:4e:9d:59:
         6d:7a:a0:3b:99:ed:be:53:80:78:1a:0d:9e:e1:4f:c5:a7:75:
         c3:3d:4b:fe:3f:73:74:d4:25:97:bd:3f:0c:db:27:33:6c:5d:
         67:e5:10:50:44:f5:56:bf:81:1b:8c:67:8e:7a:60:da:2f:68:
         21:f8:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:36:16 2026 by rpki-client