Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/f7175e07-1420-33f1-98f2-96f8a3916e92.roa
File:                     f7175e07-1420-33f1-98f2-96f8a3916e92.roa (raw, json)
Hash identifier:          p6NcM2nDiGtdnNMkeGRUfwzZoT+RVgco23mr6tt9ciM=
Subject key identifier:   A7:ED:1E:5D:81:A5:B5:3E:0A:63:C5:12:5B:A8:66:52:BC:4E:DF:A9
Certificate issuer:       /CN=e8253a5c-5822-44df-8846-56b6c0450bbe
Certificate serial:       010D0C9F4328584F4973AF7470E8C9FB08BCC280
Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/f7175e07-1420-33f1-98f2-96f8a3916e92.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23036
IP address blocks:        158.222.80.0/20 maxlen: 20
                          158.222.80.0/23 maxlen: 23
                          158.222.82.0/23 maxlen: 23
                          158.222.84.0/23 maxlen: 23
                          158.222.86.0/23 maxlen: 23
                          158.222.88.0/24 maxlen: 24
                          158.222.89.0/24 maxlen: 24
                          158.222.90.0/24 maxlen: 24
                          158.222.91.0/24 maxlen: 24
                          158.222.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:af:74:70:e8:c9:fb:08:bc:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=891f60e0-b238-4c77-8ce2-e95857434c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:1b:bb:78:47:18:e1:60:1e:7b:bb:36:a9:
                    82:2a:c3:bd:af:3c:db:d6:d4:16:50:1b:f4:14:8a:
                    05:2e:27:0d:c2:36:48:e6:24:46:74:31:51:4a:e2:
                    7a:e0:02:1a:bf:14:78:ee:88:d6:c7:3d:2b:50:f4:
                    04:68:7e:14:24:40:6e:7f:71:01:b3:e4:37:83:75:
                    69:e1:00:6e:05:c5:8f:32:15:06:47:65:c8:d2:5f:
                    e0:8f:c6:2a:fc:cb:9d:3d:16:76:1c:0a:cf:5a:22:
                    d8:2b:69:e6:70:08:96:4a:f8:af:26:ca:af:ea:1a:
                    0e:b8:f7:99:89:bf:5f:6b:a7:88:25:34:99:dd:9f:
                    d8:5b:90:44:b3:cf:78:a3:75:9c:f9:96:1b:bd:9b:
                    c2:b6:e5:3e:81:a3:71:3e:9e:c5:cd:ff:80:ee:29:
                    80:a3:b4:9c:b9:07:25:d3:03:48:47:13:9b:5e:22:
                    04:a8:24:1f:6e:13:83:81:48:ac:d5:f2:2f:c2:fe:
                    cb:59:cf:c2:10:da:a0:65:e1:53:a2:d6:6c:e8:23:
                    a1:ba:27:77:07:66:a7:24:c6:39:2f:84:8b:a5:d9:
                    91:ee:83:34:a3:dd:ec:30:26:7a:57:1c:f0:d1:a7:
                    4b:19:7e:9c:84:e0:e5:4a:67:1f:9b:f2:0c:e1:f5:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:1E:5D:81:A5:B5:3E:0A:63:C5:12:5B:A8:66:52:BC:4E:DF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/f7175e07-1420-33f1-98f2-96f8a3916e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl

            X509v3 Authority Key Identifier:
                keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:85:f4:b2:8e:49:62:7d:5c:cf:3d:9b:b1:75:14:2a:0d:6e:
         2f:eb:74:c3:ed:c2:d9:d7:ab:32:16:be:1c:e8:fa:0e:5c:c6:
         3e:d1:7c:98:8b:e5:07:80:47:6e:f7:fb:91:a4:58:1c:59:5e:
         2d:6f:4e:2f:95:f5:d5:73:f5:8b:01:f7:7b:98:b2:85:b6:a1:
         b3:c4:07:6e:65:ca:02:ed:f1:86:04:88:a2:54:7d:e7:48:16:
         3a:9b:f0:7f:a4:91:04:62:74:a9:9d:a5:f1:85:a2:78:b6:a3:
         75:1c:25:4c:7f:30:2a:87:df:54:7b:2c:29:88:05:9c:b1:d5:
         b0:a6:6e:12:9e:10:8a:2b:4b:23:e6:28:5c:76:31:c9:7b:0e:
         63:a1:61:c2:e6:29:86:28:33:0f:8f:d5:39:22:9f:d6:0c:8d:
         48:ba:8c:26:e5:40:35:c8:0e:db:4c:e7:48:e3:9a:b4:6b:11:
         c8:2a:f0:dd:c1:14:7a:56:7c:a0:a4:48:e4:b3:c5:88:80:da:
         fe:20:90:1d:b8:f9:af:54:24:90:6b:a4:cf:be:d9:45:9a:9c:
         22:cd:59:f6:fe:26:a3:05:92:6f:06:ee:00:09:75:61:33:e6:
         ec:ff:0c:11:56:14:d0:9b:56:3a:3c:0b:c5:98:b2:40:b2:08:
         0e:8e:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:29:30 2026 by rpki-client