Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa
File:                     ddf8a60d-859f-3b0b-9243-c725f1c33259.roa (raw, json)
Hash identifier:          61budp5REUq7kgNdu0YiJshU6iqFZunw8F0yMrsDiCk=
Subject key identifier:   15:69:1B:9A:CA:27:1C:33:95:EB:7C:7A:94:0D:FF:F8:90:9C:34:5D
Certificate issuer:       /CN=712951d4-501e-451c-a20a-59b6aff3e2d4
Certificate serial:       010D0C9F4328584F3052734656788F70C00CAE00
Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     133127
IP address blocks:        155.161.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:73:46:56:78:8f:70:c0:0c:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=485302a1-94a5-4fdd-8344-0e6d24c16c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:95:e7:99:34:23:39:64:67:a4:9c:56:57:
                    3b:3c:93:c5:fa:6f:3d:f2:1c:a1:51:02:56:06:6b:
                    79:b1:d2:be:42:c2:78:6c:a5:b9:0d:c3:66:93:d6:
                    5c:65:6b:08:af:f7:dc:82:a6:7f:78:4e:ef:e3:89:
                    98:b7:78:9a:d8:bf:a2:67:56:6a:a4:3f:ce:12:3b:
                    aa:5a:d4:70:db:fb:1f:88:39:5f:c3:93:f8:75:1d:
                    64:36:21:76:da:b8:58:bc:cc:37:49:72:44:4c:b3:
                    61:fa:92:c3:59:fb:b8:f4:ad:3d:13:76:59:d8:29:
                    52:94:ca:70:51:b2:dc:0b:c0:f2:ca:14:4d:d9:2f:
                    7f:36:b8:e0:25:a9:71:6f:78:c6:c6:da:17:e7:88:
                    2e:18:4c:6d:a3:7c:4a:a2:fa:55:72:4d:d6:f4:10:
                    e4:c5:ba:d2:d4:4f:3b:c7:c6:d5:d1:ff:86:63:14:
                    01:9c:bf:63:46:6a:bb:ac:d7:ad:d6:b5:07:3d:82:
                    dd:23:92:aa:c5:0c:00:0c:7e:02:b8:6d:34:ac:11:
                    9d:15:8b:7e:de:a2:22:87:48:e4:f2:7e:fd:22:b5:
                    6f:42:59:9e:3c:22:da:b8:66:54:a0:df:8f:2e:c0:
                    53:27:62:3f:33:96:d5:52:c1:11:34:29:58:ac:7f:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:1B:9A:CA:27:1C:33:95:EB:7C:7A:94:0D:FF:F8:90:9C:34:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl

            X509v3 Authority Key Identifier:
                keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:92:b4:19:49:e8:f7:b3:71:31:93:d2:9f:b1:d1:03:79:36:
         4b:73:09:ac:ab:9c:d2:9e:63:0c:43:67:36:82:1b:bf:0e:f1:
         56:5d:60:24:1b:42:36:95:52:5d:19:00:bb:d6:ff:75:72:2b:
         a0:85:e9:a1:29:84:64:e9:eb:a3:38:0d:3c:df:fa:13:fd:19:
         b7:c4:e8:97:32:25:a0:98:4d:5f:70:d9:2a:f6:a5:a0:ae:0c:
         bc:6b:33:35:d1:e3:d6:ad:06:b0:77:b4:a5:f6:8e:5d:8f:bf:
         be:49:32:57:2b:74:2d:a0:2c:ae:b4:09:a2:ff:0f:35:c0:a4:
         d8:15:10:e9:3b:da:08:30:09:36:fd:4b:65:a5:dc:53:e1:60:
         78:6f:08:eb:e2:9f:d3:57:7d:0b:63:4c:c9:31:85:4f:bd:ff:
         f1:c1:8b:56:93:86:3b:59:ed:12:ca:0b:c2:5a:fa:f1:d7:98:
         67:cf:19:93:5d:e0:1c:18:1e:4a:83:12:ad:79:3d:fb:98:cf:
         81:db:49:2e:a3:28:30:0d:04:37:fc:18:bd:c2:bb:29:c0:87:
         29:84:8c:2a:85:00:e7:f4:9f:fb:d3:a9:15:59:b8:d2:0c:bc:
         46:32:93:c4:b6:e7:7c:6b:79:1c:63:c1:89:b6:57:3c:01:da:
         dd:6b:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:50:13 2026 by rpki-client