Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/767dee72-c590-35db-b598-808b05edd8ca.roa
File:                     767dee72-c590-35db-b598-808b05edd8ca.roa (raw, json)
Hash identifier:          JI3G7WJhQEpA6UiRXX+Dh8WkEU0oWU7b0ZCKmd7fiiM=
Subject key identifier:   80:02:56:6D:44:B9:C3:D0:61:4C:7E:42:D5:DD:47:EE:64:44:20:F3
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584DCDC5A5BB62A6AD8FE1367700
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/767dee72-c590-35db-b598-808b05edd8ca.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     53768
IP address blocks:        162.134.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a5:bb:62:a6:ad:8f:e1:36:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=84e47737-d610-4b7e-a051-2fa020e6fbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:67:e6:a4:f5:94:a8:c2:5d:fb:74:13:80:
                    e7:2d:8c:20:45:21:09:48:39:87:26:fb:bc:50:b3:
                    49:6b:1b:95:80:25:78:b2:81:b9:da:a3:dd:56:3b:
                    06:a3:16:74:75:83:c7:72:e4:ef:25:58:9a:6f:35:
                    16:35:35:fe:e5:ee:70:8b:3d:f3:3d:ef:0c:89:1b:
                    28:5d:b6:da:36:35:1d:ac:52:66:bd:90:64:65:ce:
                    cb:42:7b:d2:86:59:42:65:35:68:34:2f:64:86:23:
                    5f:de:63:85:3c:32:c2:d3:b7:01:71:28:c9:b8:f9:
                    52:d4:c8:89:08:a7:d3:8d:ce:4b:eb:7c:96:0b:7a:
                    a4:bd:96:e1:18:d1:1d:a4:21:62:d9:f7:48:b3:95:
                    36:24:96:88:63:a8:c4:89:41:57:a3:16:d3:0a:41:
                    27:f2:f7:85:68:ae:4c:62:c9:fb:00:4c:d1:b0:e1:
                    eb:07:88:a0:72:32:24:dc:ae:86:bf:36:a1:a9:9f:
                    8d:63:24:8c:da:98:21:54:b6:42:c3:83:e3:d0:73:
                    14:e6:a1:eb:0f:0a:5b:61:41:87:83:f3:b1:c3:d8:
                    ed:0d:f9:1a:51:43:43:2f:2d:c6:2f:42:de:84:f6:
                    6b:67:8f:14:34:9b:80:72:0f:5f:9a:4c:5e:9d:05:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:02:56:6D:44:B9:C3:D0:61:4C:7E:42:D5:DD:47:EE:64:44:20:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/767dee72-c590-35db-b598-808b05edd8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:f0:09:08:3a:53:ba:cd:0c:f7:20:a0:d2:54:73:bb:33:
         36:ef:8c:ef:16:3b:b3:91:b8:f4:4f:d4:33:f5:20:23:8d:4a:
         04:2c:76:d7:19:13:b0:40:df:62:bb:ca:81:c6:e2:fb:ec:11:
         bb:9c:bc:a4:fe:42:f3:a2:09:95:33:37:49:b0:8f:fc:a0:67:
         28:40:3c:8e:d0:41:8e:1e:b3:3b:e2:5d:e1:a6:18:21:9a:e0:
         e7:a4:81:1d:9b:27:e7:21:24:ab:33:d5:79:6e:ec:d1:77:92:
         b1:13:d2:e9:42:3e:4f:3d:48:c7:d2:6f:6d:25:46:d2:46:7e:
         47:cc:82:3d:05:4a:92:2a:f1:fc:d2:14:9b:3b:da:0b:2c:29:
         ee:74:e0:23:d6:c9:23:36:05:7f:2a:26:f1:cb:7c:3a:79:88:
         aa:2b:9d:67:e2:43:fd:e7:8d:38:db:0d:1a:61:56:1c:59:d9:
         c1:f8:70:73:4f:7f:87:f0:04:dc:d9:27:3b:6d:56:f1:59:12:
         00:50:e0:c9:15:d6:cc:a1:9b:b7:38:04:46:b6:a4:4e:25:01:
         d5:8a:aa:d0:0f:17:8e:54:c7:a6:a3:17:34:43:bb:50:3b:78:
         d7:5b:1c:34:ff:eb:4e:bc:52:8b:39:73:14:6e:74:8b:85:f9:
         50:06:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:25 2026 by rpki-client