Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa
File:                     12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa (raw, json)
Hash identifier:          /kwubTp3MJSCQPUOceWfmLywfV9LqmcSfFmb0PQHrdQ=
Subject key identifier:   57:AD:E3:E4:C8:86:0B:87:55:E0:33:8B:9B:15:4F:69:EB:F4:9F:4E
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584F698D67C57B4136FA298A7E80
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     32723
IP address blocks:        216.6.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:67:c5:7b:41:36:fa:29:8a:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=4638cf48-8270-4ef2-9293-2b0852569c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:e7:8c:82:7e:8b:2e:ce:94:e7:4d:84:22:
                    d5:eb:e7:32:7a:23:7b:bd:9a:14:39:ad:5e:39:f8:
                    05:6e:05:3d:32:c0:f4:17:cf:39:c5:3a:22:70:b8:
                    7a:1f:f7:f3:be:8d:63:28:42:02:d1:67:64:e2:65:
                    6a:36:e7:e7:8f:ae:e2:0b:48:47:2f:c2:a1:a7:58:
                    d7:80:96:23:d0:37:a4:74:16:8b:1f:c5:63:1b:47:
                    76:02:3e:9d:50:e9:96:2f:3e:68:9f:76:e6:88:9b:
                    a9:4c:14:a2:88:c3:e3:86:ca:b0:f0:9a:c1:98:cc:
                    47:ff:94:5b:03:b0:e7:71:42:37:ce:e9:98:2a:51:
                    7e:60:5b:0c:2c:62:4d:3c:11:de:ff:31:0c:d1:15:
                    0f:8a:9f:54:df:12:9c:aa:f3:a1:ad:ae:99:e9:ba:
                    76:20:c1:12:b5:d4:c4:14:1d:93:39:c9:80:6a:69:
                    b3:b6:f1:3d:d7:1e:b5:4e:8a:20:43:2d:1b:bd:6b:
                    6c:88:e3:b8:07:95:cd:54:d5:30:b1:51:f3:a1:d9:
                    19:38:a3:b3:9c:b4:31:8e:ae:c2:13:79:e9:40:88:
                    de:b5:a2:72:0f:17:78:05:5c:3c:17:cc:84:ce:7f:
                    86:d7:d2:2d:32:81:45:98:44:eb:60:79:24:08:bf:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AD:E3:E4:C8:86:0B:87:55:E0:33:8B:9B:15:4F:69:EB:F4:9F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:e9:0d:76:db:3a:5f:54:d6:51:6f:f8:39:69:d4:fb:8c:
         c0:7b:bc:52:de:57:50:7f:b5:ac:2b:5f:30:8a:03:91:23:ec:
         7d:f4:65:d4:da:c6:de:64:64:37:89:a0:da:30:7b:77:ec:11:
         f7:92:90:1e:05:d1:33:a7:e3:f1:09:49:1b:42:3e:4b:cf:2c:
         35:17:a5:aa:4b:09:31:64:6d:79:51:0b:2a:36:d4:15:a5:08:
         99:d5:10:7d:a7:70:a5:09:f1:79:fc:f7:8f:bd:ed:af:cc:95:
         47:fe:fa:30:3d:81:bc:07:ff:50:89:35:fb:25:2a:08:f7:99:
         77:e2:22:3f:98:18:a2:48:5f:5c:15:18:6f:93:08:24:de:e4:
         62:c0:cd:f7:e4:40:7c:7c:a8:31:0f:0e:cc:e3:f7:b8:25:26:
         14:4a:70:61:24:fe:51:76:ae:c9:1a:31:e0:d0:59:5d:6e:5d:
         d3:e0:20:af:bf:80:09:3e:c0:4a:77:97:8a:97:70:7e:43:87:
         b1:a3:28:0c:db:2c:4b:24:c2:5c:e4:99:fd:c8:41:62:44:d6:
         43:1f:1f:a4:dd:f9:5c:f6:4a:95:9b:08:b9:16:2d:f7:26:0c:
         f7:c2:0e:e5:08:ab:a7:b3:a8:b8:af:9e:ee:35:8c:b2:f9:75:
         39:b1:59:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:29:41 2026 by rpki-client