Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/c72ca1da-7519-3f6e-ac80-e001e000243b.roa
File:                     c72ca1da-7519-3f6e-ac80-e001e000243b.roa (raw, json)
Hash identifier:          wEJv13K4a9g3e3BxVmZ4TRU5lyPAVfbmRMTG8ewD5U8=
Subject key identifier:   C4:6F:B7:0A:AD:0E:CE:D1:29:3F:40:F9:80:11:60:99:0E:53:0F:52
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F2EFE5D9A6C3349995F062A00
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/c72ca1da-7519-3f6e-ac80-e001e000243b.roa
Signing time:             Tue 15 Sep 2026 13:35:09 +0000
ROA not before:           Tue 15 Sep 2026 13:35:09 +0000
ROA not after:            Mon 14 Dec 2026 14:35:09 +0000
asID:                     53610
IP address blocks:        134.22.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:fe:5d:9a:6c:33:49:99:5f:06:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 15 13:35:09 2026 GMT
            Not After : Dec 14 14:35:09 2026 GMT
        Subject: CN=a84c3150-6b0f-4b99-8b82-c2975e9de48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:b7:81:ab:16:dc:47:5b:4a:1d:bc:4d:df:
                    ed:a2:ff:e3:ca:f0:94:8c:44:3d:fe:68:01:fa:a1:
                    0e:0d:a3:46:7a:c7:36:fe:a9:85:d2:e5:79:fd:3d:
                    66:ec:f2:cc:31:73:16:7a:fe:9a:11:95:f5:1c:25:
                    7d:47:80:73:48:7e:74:80:e6:58:4a:7b:05:f7:e5:
                    10:f8:47:27:5c:c9:14:9a:98:16:5d:a9:ad:b9:f0:
                    d3:49:5f:e5:da:e0:26:33:42:0f:46:8a:34:c0:af:
                    27:72:08:76:9a:44:bf:bb:db:fc:f3:a6:38:f6:9f:
                    02:1d:76:f6:41:03:c2:8d:23:c4:11:0f:96:96:04:
                    35:02:f4:5d:98:d6:10:82:fa:cd:ea:2d:2f:a6:e0:
                    a8:58:0e:64:41:51:f4:1c:58:91:ad:5c:85:64:01:
                    bb:f1:9b:b4:6b:1d:87:d7:12:70:7c:9e:1d:81:ed:
                    c4:1d:cc:83:ad:90:83:4b:87:aa:89:71:50:b9:9f:
                    fe:82:24:af:98:ca:46:fa:e3:2c:9d:1f:99:4f:41:
                    38:23:1b:b3:6b:09:67:b1:6c:7a:f7:47:46:2a:d3:
                    2d:2a:c2:cf:6e:b8:93:ce:14:fa:0a:99:80:18:28:
                    27:2a:d2:3d:50:ad:9f:c9:29:09:a5:be:f7:b0:00:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:B7:0A:AD:0E:CE:D1:29:3F:40:F9:80:11:60:99:0E:53:0F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/c72ca1da-7519-3f6e-ac80-e001e000243b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.22.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:99:f9:d7:78:dd:ad:74:ed:85:11:ff:fb:7f:81:c3:5d:8b:
         36:8a:61:02:ac:d6:6c:97:e1:b6:16:3c:50:75:80:83:bc:e4:
         3f:4d:88:c7:e7:06:b7:91:22:9e:34:18:79:b6:38:95:20:f2:
         46:68:95:4c:b9:a5:fa:17:0d:bf:07:54:96:8e:f4:ff:83:a7:
         ff:44:4f:36:8f:86:6d:4d:f4:55:40:99:65:e9:c3:74:4e:e7:
         62:91:e0:9b:11:ce:9a:92:e5:f1:53:ca:f1:a5:7d:42:7b:ab:
         50:e3:47:42:43:d0:61:2d:33:61:58:99:72:da:fa:d6:2b:9a:
         3d:5d:4f:30:a0:84:3a:e8:93:d6:4f:35:c7:a2:a1:f7:23:9f:
         7b:29:66:45:46:3e:0a:d4:13:17:3c:97:69:7f:75:c7:36:6f:
         21:cc:fc:ec:3a:56:7d:7d:75:9e:05:09:40:97:fa:64:61:ff:
         35:27:23:27:2b:c4:b0:cc:5a:ad:8f:8d:ca:fd:4d:97:cc:6a:
         83:96:f0:80:f9:65:45:0b:0e:37:e9:a4:6a:bc:f5:e0:28:d5:
         95:4c:1f:76:d3:5a:7c:32:c9:2b:cc:1a:8d:2c:3f:b0:fe:4a:
         7d:f3:7c:41:30:1d:74:c3:61:9f:f3:01:d4:33:32:e7:44:c0:
         eb:c2:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:22 2026 by rpki-client