Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/49d93974-f2b8-3879-80b2-bd70a7cbfee0.roa
File:                     49d93974-f2b8-3879-80b2-bd70a7cbfee0.roa (raw, json)
Hash identifier:          tUqlx9kws21cu7hiiBZpxGb8SAzdwEIO4hcVuVVUjug=
Subject key identifier:   9A:F7:B0:CB:47:DC:43:13:40:FD:65:5D:4C:AC:5D:E3:E3:C8:22:2D
Certificate issuer:       /CN=6894a134-317a-427f-a84c-d649114fbe11
Certificate serial:       010D0C9F4328584F3052794617A884B86FE40B60
Authority key identifier: 0A:A8:27:4D:D7:34:CB:81:9D:78:CF:9C:DA:BF:9B:BC:57:0F:CB:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/49d93974-f2b8-3879-80b2-bd70a7cbfee0.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     54035
IP address blocks:        158.51.202.0/24 maxlen: 24
                          192.208.116.0/24 maxlen: 24
                          192.208.117.0/24 maxlen: 24
                          192.208.118.0/24 maxlen: 24
                          192.208.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/6894a134-317a-427f-a84c-d649114fbe11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/6894a134-317a-427f-a84c-d649114fbe11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:79:46:17:a8:84:b8:6f:e4:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6894a134-317a-427f-a84c-d649114fbe11
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=9cdfda16-2c36-4ba6-aa3f-016c71504210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:d7:c4:10:56:f2:27:98:c8:7d:7c:77:a2:
                    0a:1d:7e:56:79:69:dd:b7:46:98:f1:82:cd:1b:3e:
                    d1:84:1d:74:32:ed:e7:e1:42:4a:6c:0a:e5:dc:e1:
                    87:1f:2c:a6:bd:aa:b7:55:52:04:b2:41:0b:9e:be:
                    59:a2:8b:82:c5:b1:d4:d1:25:b1:f8:15:7a:41:8d:
                    6f:ce:22:c0:75:3f:75:96:2a:a7:75:88:3c:ce:a9:
                    c8:e1:46:dd:aa:b0:a3:f3:81:bc:70:60:1f:fd:38:
                    3d:d4:05:01:52:51:19:e4:fe:dd:99:75:02:15:c2:
                    5b:5c:a3:10:14:a1:7e:07:1d:5d:73:bf:c9:0f:37:
                    77:56:95:25:3a:88:24:bc:8e:51:f2:10:a4:58:bf:
                    43:03:b3:67:af:a2:d1:a4:e9:b2:b2:86:63:39:1d:
                    d0:d4:54:f9:4a:bd:ed:53:94:0a:50:89:2d:2d:56:
                    66:1c:29:a7:88:07:fb:45:e5:a8:f5:2e:8a:42:77:
                    0d:45:29:1d:fa:fd:0a:2d:73:93:d1:b0:a2:cf:50:
                    88:7a:28:e1:14:39:1f:8f:29:fc:dd:b2:e1:94:cc:
                    d7:d7:6f:66:08:09:e7:38:8e:3d:6e:b9:e9:26:71:
                    3c:ea:25:b0:d7:f0:eb:4d:f6:2b:ce:06:4d:99:0d:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F7:B0:CB:47:DC:43:13:40:FD:65:5D:4C:AC:5D:E3:E3:C8:22:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/49d93974-f2b8-3879-80b2-bd70a7cbfee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/6894a134-317a-427f-a84c-d649114fbe11.crl

            X509v3 Authority Key Identifier:
                keyid:0A:A8:27:4D:D7:34:CB:81:9D:78:CF:9C:DA:BF:9B:BC:57:0F:CB:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.202.0/24
                  192.208.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:53:fc:4e:87:77:4d:85:36:c9:c7:bc:70:f5:7a:77:e3:40:
         f5:85:83:f6:da:80:59:72:fd:4b:fb:99:a4:fe:93:db:37:b7:
         52:07:7c:2c:b0:d4:ef:92:a5:e4:4a:d1:41:f9:ee:b2:65:4c:
         e7:5c:a5:d2:6d:1b:3b:58:d2:bd:8e:19:8e:89:43:a0:cb:2f:
         4f:93:3a:72:d9:51:6e:e0:93:4c:d1:59:fd:b7:2f:eb:be:bf:
         8f:d0:11:94:72:c7:fd:c7:f7:ac:13:22:7c:c5:e1:2d:60:d2:
         93:b3:7c:8b:b4:75:c3:9b:43:95:70:34:f7:80:cd:de:7e:4d:
         c3:47:76:24:5d:1d:7c:07:8a:42:f9:1c:63:7c:6b:d4:07:80:
         42:da:46:4d:6c:1e:70:74:54:c9:4f:f9:4a:5d:7b:b6:d9:12:
         0c:91:2c:9f:2c:7e:c8:52:79:8b:ea:fa:f2:28:60:8a:7a:80:
         16:28:09:ca:f5:0e:3b:b0:6a:08:f1:52:63:d6:d9:d5:67:48:
         47:a6:7c:88:57:9b:d0:6f:92:80:10:ad:13:d7:59:ef:67:9d:
         dd:e3:16:f2:1b:1c:63:9e:97:29:95:6d:7b:8b:c7:96:dd:b4:
         49:9c:48:be:40:a6:23:a0:45:a0:56:cf:a9:45:2b:6d:ef:1e:
         d0:da:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:44:42 2026 by rpki-client