Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/e532eddb-b560-35a6-beb4-771642e87765.roa
File:                     e532eddb-b560-35a6-beb4-771642e87765.roa (raw, json)
Hash identifier:          d61m3EHz96ZwC+Uy2ht9zv1P8qn6Whw0iOyU7ChHMAQ=
Subject key identifier:   33:40:73:6A:3D:87:1C:CD:2F:37:4C:EA:A2:F5:03:2E:92:61:27:05
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F323B982A7DD481C55A3558A0
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/e532eddb-b560-35a6-beb4-771642e87765.roa
Signing time:             Wed 16 Sep 2026 17:25:57 +0000
ROA not before:           Wed 16 Sep 2026 17:25:57 +0000
ROA not after:            Tue 15 Dec 2026 18:25:57 +0000
asID:                     54641
IP address blocks:        172.81.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:3b:98:2a:7d:d4:81:c5:5a:35:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 16 17:25:57 2026 GMT
            Not After : Dec 15 18:25:57 2026 GMT
        Subject: CN=ad9a7724-e47f-4d2c-afa1-3506fdbc8468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:94:ce:78:87:5e:84:50:4e:c2:e2:98:99:11:
                    0a:f0:4b:8d:2a:f5:d9:de:48:65:aa:df:d8:ed:14:
                    b5:22:68:4e:24:e1:fc:76:75:c2:35:0e:5e:49:c7:
                    06:5e:3e:25:89:ae:1d:c4:a3:6b:8a:29:69:17:b6:
                    39:d7:95:77:72:9a:97:87:73:9c:cb:c9:6b:1c:1b:
                    4b:1d:a9:5a:4f:dc:b9:7c:70:04:eb:79:bd:bf:af:
                    13:eb:93:7d:06:61:cb:58:c5:9e:42:d8:8b:50:ef:
                    c2:4e:c7:03:c5:01:53:ab:85:6b:4b:7b:ab:11:54:
                    41:ee:2d:9c:19:9d:98:15:fc:f9:1b:b0:4d:93:c0:
                    14:ae:bb:bc:61:76:08:08:1d:96:3d:7d:1e:be:2c:
                    51:10:98:53:28:80:bc:9b:48:c9:13:3e:a6:89:94:
                    76:95:a1:0b:3b:d0:c7:a6:42:a4:c6:fb:1d:72:2b:
                    11:a2:8b:d2:fe:bb:6e:4e:ef:88:22:61:78:89:0f:
                    56:9b:4e:60:8f:4b:07:6b:21:03:7e:48:05:cb:c6:
                    f4:a9:3a:7b:7a:5f:ca:30:63:8e:91:51:5d:16:3c:
                    ee:86:34:ea:20:95:fa:56:90:24:3e:e8:92:a2:95:
                    91:32:50:ba:8a:2b:f7:e5:4b:45:42:7d:6a:dc:19:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:40:73:6A:3D:87:1C:CD:2F:37:4C:EA:A2:F5:03:2E:92:61:27:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/e532eddb-b560-35a6-beb4-771642e87765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:57:ec:a5:e8:d4:33:b2:9a:74:51:ca:ca:2b:a7:0e:cb:
         2b:0f:be:e1:0a:4a:15:41:e7:e4:fb:43:9b:14:d5:35:f5:fb:
         59:08:f6:9f:61:ec:87:2c:e3:c1:e8:08:4b:82:61:f1:17:2e:
         5f:51:dc:5d:04:3a:d4:98:45:9d:70:41:4f:b3:92:af:e9:4d:
         ce:ba:9d:0b:bf:ac:d1:d3:4d:3b:88:3c:c4:dc:6a:ee:7d:f4:
         69:46:0a:77:86:8c:22:50:a4:25:5e:70:d2:18:23:bc:59:66:
         fd:39:96:7c:5b:33:7a:89:e4:bb:8f:b4:87:ef:91:b8:7c:c6:
         45:2d:aa:50:eb:ef:64:51:d3:36:e2:cf:3d:e4:90:9a:52:29:
         70:f4:ae:d9:0b:b6:d5:0e:bb:b3:5f:26:05:99:84:b0:da:d3:
         1f:cc:d3:80:6f:ca:6e:43:61:a5:2f:4e:c1:3a:1d:fb:1e:4f:
         82:a3:0b:78:f9:f4:88:2c:33:1e:99:7b:34:67:ad:5d:19:29:
         96:08:aa:7e:31:34:ec:5b:de:a7:57:c3:7b:04:df:34:f0:49:
         53:b9:40:82:35:68:14:53:fd:31:ce:d8:4f:8a:cf:e8:b0:b7:
         ed:7f:6c:d0:97:72:b7:1e:4f:18:4c:90:d0:34:b5:c4:a5:da:
         03:a1:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:38:50 2026 by rpki-client