Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa
File:                     325875a8-7f1a-358a-a215-06cc79b97d9a.roa (raw, json)
Hash identifier:          rWUNRLx7PIpw3b6+X/0am9qnXsUA6BGFZeOFwre/j9s=
Subject key identifier:   7B:2F:92:65:78:E3:71:EE:19:06:2D:2E:3A:7F:9B:FE:98:53:98:67
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584F4975F462D24EF5F27DD0B440
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395567
IP address blocks:        172.83.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f4:62:d2:4e:f5:f2:7d:d0:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fbe53265-130d-481a-8ff8-003c1034b494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:53:b9:43:51:58:41:6c:a8:3b:f1:4d:36:
                    5e:08:28:1b:25:4d:ba:2a:a5:27:9b:16:fb:ca:29:
                    6e:50:a4:e9:e5:e1:74:10:cb:c3:5d:bc:62:d2:c3:
                    e2:98:ef:a4:3d:3c:d3:64:48:95:63:8b:65:43:70:
                    33:0a:b8:53:b0:97:44:ac:a3:da:d8:69:e6:59:eb:
                    09:e0:50:42:97:41:03:b2:53:af:d3:d0:5d:ef:83:
                    de:30:e5:de:a8:b1:fc:ce:5b:00:c7:f4:f5:e5:08:
                    34:1a:f7:40:6d:0f:48:04:29:be:3f:a5:23:ef:06:
                    67:69:ba:f5:c0:2c:59:f5:57:94:9c:df:cc:6d:f5:
                    a9:73:c7:cc:be:15:d9:fa:bf:a2:70:ab:cc:17:ce:
                    32:da:9f:f3:f5:a4:cd:02:51:e5:b4:b4:5c:f5:a8:
                    31:64:66:42:e8:66:c5:30:52:68:78:21:9f:5d:49:
                    b0:26:7a:6f:1d:79:7d:d8:6e:23:e5:7b:ef:6d:86:
                    01:e4:a4:7d:fd:37:e4:42:15:03:d7:27:86:af:29:
                    56:3c:40:0b:02:89:2c:4a:0a:ab:0a:4e:47:da:dd:
                    63:69:bd:04:3f:ff:f3:0e:79:b3:32:01:5e:09:b8:
                    0b:08:bd:b3:05:9d:0d:b1:f1:64:8a:f7:46:1d:4c:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2F:92:65:78:E3:71:EE:19:06:2D:2E:3A:7F:9B:FE:98:53:98:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:3d:5f:35:59:8b:4e:8e:a4:2a:58:5f:ad:4c:6a:c6:de:
         7c:e9:ef:77:fe:90:bf:1a:ba:c8:d6:a2:96:81:79:17:f9:84:
         bb:c4:99:29:77:6d:b2:e1:7b:b2:e8:20:d8:29:09:e1:a3:a9:
         78:5c:e8:c6:cf:1e:27:a5:74:5e:f6:20:35:8e:58:9f:6f:64:
         49:2d:27:50:0a:66:8d:8a:c3:df:50:2f:fa:54:78:72:34:35:
         00:44:27:f1:02:1d:6a:45:9a:d9:59:c9:ae:b2:17:38:52:88:
         90:bc:d2:8c:44:b6:d3:85:76:29:80:28:f9:d8:05:5c:d6:a5:
         8d:d7:18:5f:ba:93:82:7b:a2:c6:46:38:20:94:c7:3e:17:b2:
         1c:72:0d:70:37:f6:46:2b:f2:b3:79:85:d3:e8:55:8a:c3:67:
         02:da:26:4f:ee:31:ce:98:49:52:d7:3d:e1:91:6f:cf:a7:b3:
         97:1d:c2:4b:61:cd:ba:a2:57:e0:64:21:1a:23:83:35:eb:de:
         72:42:b2:bb:cc:3d:e9:3e:17:43:a2:17:76:0a:81:b8:ed:1c:
         a3:3f:aa:a2:9e:3c:ab:43:49:41:8c:0e:f6:70:1f:f4:9a:5d:
         75:19:a9:b4:08:53:9a:60:3c:6c:60:b3:64:a4:ee:37:1a:eb:
         70:20:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:57:37 2026 by rpki-client