Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b8133867-e13f-3d1a-ae8a-ff35e82283ce.roa
File:                     b8133867-e13f-3d1a-ae8a-ff35e82283ce.roa (raw, json)
Hash identifier:          byT57WkwRQSWInZEzQggDLkg5FHV2XNVAXg0sgxc+4g=
Subject key identifier:   8E:DF:92:04:BE:7F:20:01:F7:14:99:EA:BF:AC:EC:94:1F:BA:54:B2
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584F4974F1C14E909DEF455C9E80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b8133867-e13f-3d1a-ae8a-ff35e82283ce.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14114
IP address blocks:        157.133.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f1:c1:4e:90:9d:ef:45:5c:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=938ee17d-402f-46e4-b93d-de1b5cb13fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0c:be:be:d2:4a:23:20:e2:9e:0f:69:b9:f9:
                    84:75:6e:04:9b:9b:db:34:bb:e6:8f:ca:e0:39:48:
                    e3:5e:75:ba:49:60:71:03:7b:ad:62:e7:bb:51:92:
                    12:b9:ae:9d:4a:81:dc:06:76:75:bc:18:37:d1:65:
                    f0:df:f8:e8:81:ba:22:9b:23:ba:8e:82:92:df:de:
                    e3:90:6e:8f:93:50:ef:11:9c:5a:d2:45:92:4e:fd:
                    f0:3e:c4:e4:2a:db:25:a4:30:94:7c:e5:86:24:43:
                    94:a1:aa:4d:75:33:89:fd:e6:6e:98:59:b8:de:22:
                    ea:4e:f6:9e:ea:01:1b:a7:7c:ad:77:7b:f9:94:e7:
                    ef:33:73:e6:fe:cd:69:6f:a8:d5:4d:0e:96:0a:19:
                    81:72:a3:fe:45:1e:73:a1:b8:4f:98:8e:50:ee:e7:
                    e5:a0:19:b1:00:72:45:1f:af:7c:4b:d4:bf:c1:e3:
                    52:6e:a8:7d:da:bb:b3:48:05:33:e0:9c:87:87:8e:
                    7c:d3:35:7d:ba:fc:35:f0:43:b5:2e:38:62:7a:6c:
                    6b:97:59:e0:25:c4:07:02:9c:d2:8d:fe:21:4b:0c:
                    66:b8:b7:44:19:be:4c:4e:2b:5b:fd:38:1f:80:e1:
                    46:87:15:7a:df:03:db:43:c6:9f:b9:03:6c:f2:eb:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:92:04:BE:7F:20:01:F7:14:99:EA:BF:AC:EC:94:1F:BA:54:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b8133867-e13f-3d1a-ae8a-ff35e82283ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ed:c4:20:85:c3:6d:52:4e:2c:e6:cc:fa:bb:f4:c6:8f:7d:
         d5:ca:4e:12:50:69:c8:cf:fe:62:a1:7e:4c:08:45:74:8f:2f:
         a5:39:79:0c:8b:bb:b3:59:86:a4:76:f0:60:d3:28:05:6a:39:
         97:05:6d:41:a2:ba:50:d4:91:35:2d:95:c6:9b:91:07:86:ea:
         86:2b:47:94:2e:5f:7a:68:72:2f:b7:f7:7c:77:44:9b:81:ba:
         57:4b:96:74:5c:e3:7b:66:eb:2e:82:5f:93:ad:b6:b0:9b:d5:
         66:c0:bd:d1:0a:01:51:70:20:7b:e2:6f:62:30:65:0e:5e:18:
         3e:38:8d:5f:65:5e:0a:43:47:2c:83:47:b1:20:7c:b4:a5:35:
         c1:c0:13:91:05:b7:ae:b7:b5:65:33:eb:31:f1:90:db:bb:81:
         1d:d5:c2:c2:ee:77:ad:96:a8:9f:f3:86:bd:c3:a3:99:75:2b:
         de:f1:d6:7a:8b:9b:ec:b0:d4:ce:82:19:a1:b2:a9:d4:bd:2a:
         d7:0a:e2:d1:09:6b:93:a7:a9:5d:43:d0:e7:1c:15:02:16:1d:
         90:c8:12:c8:d4:0c:48:a0:a4:c2:66:f8:23:30:c4:5c:92:0c:
         d2:00:81:38:aa:c8:3f:d9:1c:c7:a0:93:e4:8e:59:44:60:b7:
         52:65:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:53:19 2026 by rpki-client