Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa
File:                     cea6a4db-b45f-38c8-ba93-dab3703d562c.roa (raw, json)
Hash identifier:          Ail1DZ+mViqudZGE2BDfZps0GW5KuPVFFblBLczDC5A=
Subject key identifier:   DE:32:6B:1B:AC:88:19:E3:17:8C:6A:35:EB:3F:45:2C:85:1C:DD:A9
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F4328584E5D14AA810A94A489D8212000
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     23158
IP address blocks:        192.16.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:aa:81:0a:94:a4:89:d8:21:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=89625565-3ce5-4365-acc3-00dfa0ac4148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:ea:50:7b:77:6f:1f:b7:e4:d9:8b:83:35:
                    d7:49:ec:36:50:dc:02:b7:49:fa:2a:e4:48:b4:23:
                    ac:67:f6:7e:4b:60:cd:bf:72:8b:69:46:43:18:13:
                    56:f6:f1:4e:e1:83:65:7e:1f:8f:57:e6:99:fc:a7:
                    1c:fe:41:0c:6c:a5:49:b0:02:ba:7d:da:c7:f0:6e:
                    8e:bb:bb:46:ca:e0:31:32:0b:fb:1a:f8:3b:65:ef:
                    e0:ee:2b:d4:e2:42:60:b9:51:b3:af:21:32:b0:4a:
                    3b:26:4b:07:e5:16:d1:94:61:60:65:ae:29:a0:3c:
                    fd:5b:5e:ac:b1:95:96:b3:d8:10:18:7a:bc:e9:13:
                    b7:3b:af:5b:ac:90:51:9a:91:9f:3b:47:ec:ee:86:
                    47:7c:4c:39:6f:76:49:8b:b0:72:65:79:f8:3f:ce:
                    16:04:8c:dc:20:9d:1f:c5:30:39:f7:e9:3e:7f:25:
                    ab:f4:1e:7e:53:d1:c5:db:ff:20:98:84:78:a6:9a:
                    d1:56:c8:fd:b4:2c:a4:25:11:4d:b0:2c:d2:18:df:
                    c5:59:ac:70:a1:0c:92:79:bb:ed:df:f3:07:f0:2b:
                    70:cc:38:98:33:5d:bd:11:ba:32:26:8f:24:bd:cf:
                    09:d8:33:97:65:b7:f7:a4:32:27:dd:0f:d5:59:9f:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:32:6B:1B:AC:88:19:E3:17:8C:6A:35:EB:3F:45:2C:85:1C:DD:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:80:05:c2:f0:30:c5:d6:c3:c9:99:5e:72:17:6f:eb:ac:
         77:ac:bf:15:f8:ed:06:e9:e8:94:e9:4c:3d:8e:04:13:20:5c:
         35:ff:e9:54:a4:ac:29:e2:a2:ef:c1:91:65:9d:09:ee:8b:66:
         95:4f:c7:d5:71:8e:a6:3c:fc:42:7c:5a:e1:ca:13:0a:cb:82:
         ec:a9:d3:a3:2e:1f:3f:17:16:12:c5:62:ad:77:65:6e:f2:f8:
         43:a1:07:78:52:ad:be:e6:36:17:7e:66:ed:a0:8b:de:d3:08:
         55:0f:df:5b:da:51:af:b7:d7:ff:cc:46:03:c3:51:20:c6:4a:
         90:70:b8:4e:fd:d8:14:e8:4a:bc:ee:4b:c6:f9:33:ad:0f:ee:
         80:d6:f7:c5:e4:44:81:a9:8d:e3:40:e1:78:99:ef:34:64:41:
         1a:a2:b0:06:7c:da:ce:25:b0:2d:27:0e:7c:fa:25:6f:fd:8e:
         9e:15:9e:9d:65:11:a0:0e:a4:ba:50:63:aa:9c:2c:c9:5c:20:
         57:bf:1e:d2:eb:4f:90:96:0d:ec:ef:a7:ba:b9:51:8e:9b:d4:
         dd:de:74:9a:7b:d8:43:39:00:df:d4:25:39:da:57:7b:08:ec:
         df:ff:a0:52:3c:8d:0c:c7:90:7e:15:b0:fd:a8:4d:13:59:10:
         de:6b:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:44 2026 by rpki-client