Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa
File:                     09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa (raw, json)
Hash identifier:          GomvOyXejDWqFOy+ePHSNjiZBa3MAjVBr80RsPwzgGU=
Subject key identifier:   81:00:37:0D:44:FD:35:76:31:5C:27:3E:18:E6:01:52:70:74:FD:93
Certificate issuer:       /CN=9d31cc8a-85b8-417c-94eb-9137b7864609
Certificate serial:       010D0C9F4328584E779A3784AC3DB2C8D254F1C0
Authority key identifier: 6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        161.210.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:37:84:ac:3d:b2:c8:d2:54:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d31cc8a-85b8-417c-94eb-9137b7864609
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=8a3f3752-1677-4000-b75f-387bf11749d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:0e:a0:1c:bf:8e:9b:c5:6a:03:19:36:3f:
                    e7:df:df:fa:3d:b2:d4:29:97:13:94:bb:98:2f:c2:
                    fd:41:b3:7a:9c:63:60:3b:77:ab:44:3d:d8:01:5b:
                    82:65:66:47:e7:3c:0d:25:19:d7:a4:3b:2a:c3:30:
                    89:67:d2:de:11:10:b1:c9:93:f7:22:61:e4:aa:cb:
                    32:eb:e8:2f:e2:47:61:3a:02:25:0f:0a:34:e4:43:
                    8c:67:8a:9f:2c:37:28:9c:3f:fc:ca:f9:17:f4:88:
                    ad:7d:cd:06:43:78:e4:06:4a:d2:4e:34:f8:b5:7d:
                    a0:9c:7e:14:ce:36:d3:08:c1:8a:3e:af:80:a0:1d:
                    24:ef:70:9b:26:47:36:86:b7:c5:46:65:92:9a:49:
                    c1:e6:fa:a2:b0:39:b4:d4:0c:68:25:99:ed:5a:ae:
                    a9:21:9a:08:c3:df:b8:e2:e7:f8:67:95:e3:4e:c9:
                    04:05:d2:23:56:38:46:7d:54:97:8c:2b:86:9e:c3:
                    80:ec:7c:db:8f:0b:44:81:71:66:8a:04:17:84:0e:
                    6c:1e:2a:ec:d6:8a:81:f3:e9:27:c1:47:1f:b9:e8:
                    fe:70:fe:f5:3b:07:5e:46:67:58:17:f9:d9:1f:59:
                    77:fe:9e:bc:d7:b8:c3:16:2a:cf:ad:d4:0a:9d:44:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:00:37:0D:44:FD:35:76:31:5C:27:3E:18:E6:01:52:70:74:FD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/09f2b5c5-7afa-3f43-b023-94ea22d6d827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.crl

            X509v3 Authority Key Identifier:
                keyid:6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.210.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1b:2e:27:90:ae:cf:0a:9a:1d:76:95:93:e4:d8:c2:a4:46:
         6b:3b:9b:46:63:30:44:f7:0d:0d:95:01:a1:84:c8:18:3f:43:
         97:77:83:28:65:68:24:90:4c:ec:a7:8c:0e:c3:fb:5e:65:c2:
         85:5b:43:45:b2:d1:6a:e7:62:ba:03:62:ca:f5:12:9b:07:18:
         30:ae:7d:5c:2d:7b:39:47:89:2e:cc:30:d8:ff:d5:68:34:59:
         3e:79:cc:70:e6:5f:d8:63:39:cd:14:4d:0d:95:33:45:50:4f:
         c9:1c:b2:d9:ff:c3:5e:a6:51:4e:90:ca:56:aa:3e:1f:ec:b1:
         a5:c6:91:4b:eb:cb:12:94:69:35:bc:94:65:4d:3a:64:b2:f5:
         3c:da:17:4b:a2:89:2f:83:e1:68:a9:47:bb:ef:06:5b:f4:89:
         6f:88:71:0e:5f:6e:64:0a:e5:37:24:0b:ae:13:2f:89:92:c5:
         8b:46:68:86:64:bf:27:e6:e6:d4:0d:8e:f8:1c:01:49:10:6a:
         01:ae:a0:c6:db:93:99:40:c8:5b:b7:1e:22:73:4a:09:d3:ec:
         f3:80:e2:8d:3b:a0:6b:df:09:3d:45:bf:1d:5d:b9:82:c9:6e:
         1b:ab:75:3b:e8:05:c7:5b:7d:c7:63:2b:66:f8:dd:47:63:b7:
         60:e3:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:39 2026 by rpki-client