Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa
File:                     f851c2c2-de47-3e35-85ca-156d6c109859.roa (raw, json)
Hash identifier:          oqHJZaGSMjocADd/RFfXWvye2S4BuehXw+oIN3uoyRs=
Subject key identifier:   E0:B2:40:31:06:14:09:C9:C9:9E:57:B3:33:85:64:51:4A:F0:CB:61
Certificate issuer:       /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial:       010D0C9F4328584F1CC79F6E82729E63DDFFCCA0
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     26523
IP address blocks:        162.252.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9f:6e:82:72:9e:63:dd:ff:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=07308bff-fb7f-485e-9625-c57d984195cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:54:c1:99:ea:22:59:9a:7d:d2:9b:a3:51:
                    83:c5:92:cc:4a:cd:ef:0d:9e:b7:53:85:b8:21:43:
                    0b:22:e3:71:59:19:6d:d9:e8:e3:66:cc:f6:55:6e:
                    1d:0b:c7:4d:c9:e9:bd:18:ba:b8:f5:81:7e:16:c1:
                    d2:d1:05:ab:08:7e:e7:a7:b1:56:60:d7:dc:53:55:
                    bb:82:9c:a1:ef:02:ff:57:09:ef:de:8e:e5:f2:38:
                    c6:0c:89:f7:19:e6:e6:24:30:20:cf:df:4b:56:4b:
                    99:5f:fa:84:2b:8b:1f:23:a3:65:0a:d1:78:59:ef:
                    a1:42:8f:0c:61:cd:3d:ac:e0:2d:08:21:3e:59:c6:
                    a9:e3:e1:c4:3f:da:d0:e9:71:d9:1f:55:c6:c3:2a:
                    2f:f1:ba:46:3d:cc:60:68:c5:a4:6c:94:8b:a2:23:
                    bc:1d:af:5c:39:26:e9:87:9c:1f:01:89:57:02:27:
                    cb:89:ea:e2:a5:d2:89:88:51:be:a6:61:42:25:94:
                    fb:2a:48:36:93:30:11:47:ea:17:c8:99:37:84:b7:
                    41:53:f2:2c:3e:65:86:ee:69:9e:7c:53:3d:e5:9e:
                    63:21:78:9e:5c:3f:8c:0a:c7:48:e4:22:f3:8d:a4:
                    25:ac:fd:b6:e4:fb:b0:66:10:05:a1:1e:e8:59:7e:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:40:31:06:14:09:C9:C9:9E:57:B3:33:85:64:51:4A:F0:CB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl

            X509v3 Authority Key Identifier:
                keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:97:9c:07:d9:ad:92:f4:1f:d5:43:ea:1b:1a:c6:8c:81:a1:
         bb:2d:30:8c:f5:a4:6e:d7:d5:2a:6a:7b:b1:3d:e9:b8:aa:38:
         d3:8c:ba:ec:3c:1b:52:fc:6c:57:42:f6:20:0e:32:0c:c7:05:
         d9:a2:7a:ba:29:a1:7c:5c:e6:02:54:eb:43:fb:f5:85:0b:8a:
         4a:b5:1f:6e:d1:0f:be:13:bc:c9:ee:13:94:3c:56:97:a7:05:
         2e:54:a4:d7:fb:48:56:65:57:77:88:23:81:9d:fd:c3:e5:e4:
         eb:b8:45:31:f3:9b:8d:3e:6b:21:c0:8b:70:84:65:95:80:da:
         c5:2d:2d:0f:53:4c:05:37:23:ee:67:f7:84:27:41:b5:90:21:
         88:63:c6:1b:e5:78:bd:24:d0:fe:c1:0a:c7:77:fc:4c:5e:ae:
         03:16:1c:1d:ed:f6:df:f5:4b:43:82:e6:46:63:78:70:21:ac:
         de:67:d4:8c:0d:df:13:b1:65:34:9b:28:e2:04:6c:7b:08:f6:
         f5:fe:c3:9c:43:44:18:0e:3f:0d:f3:21:56:e5:d9:a4:43:69:
         d2:5a:d6:46:c2:2a:15:a3:b9:b3:89:27:75:36:28:b3:65:e3:
         b9:50:46:f4:57:9e:c9:d2:64:f9:e7:eb:35:13:3c:63:74:70:
         8d:df:74:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:48:17 2026 by rpki-client