Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
File:                     ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (raw, json)
Hash identifier:          CmrY75eotETfR2gJqi2stYogVXgjGGZdujZ35M4YJzk=
Subject key identifier:   88:87:B0:8C:27:E6:B6:C6:52:E8:E5:40:7F:C4:2F:9F:9C:6C:EE:E4
Certificate issuer:       /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
Certificate serial:       010D0C9F4328584E7A64E01769FAF9DDB46626A0
Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     36786
IP address blocks:        132.203.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:e0:17:69:fa:f9:dd:b4:66:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=9a84f9dd-a631-4597-82a5-28cd7a7c3724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:66:4d:b7:05:9d:82:a1:b9:60:80:5f:f6:
                    6c:0a:b4:9c:e3:b7:55:3b:9c:b9:f4:26:75:fc:35:
                    32:13:2b:8c:7b:3e:5d:53:b2:44:38:97:d1:8a:d5:
                    8b:9d:8a:b8:9a:27:25:5b:6f:76:ca:92:d9:b6:93:
                    7d:83:c6:de:cf:b2:e0:4c:49:5c:90:81:df:37:d6:
                    45:26:38:a3:e5:20:9e:cf:9e:27:6f:0a:ce:43:1e:
                    59:cd:2b:31:95:68:f6:e7:69:c8:66:7e:ec:71:ad:
                    d0:2a:46:86:7d:4a:db:1f:04:bb:89:12:1d:09:14:
                    e6:69:b0:83:83:60:86:8b:73:e2:56:26:f6:39:82:
                    90:ee:61:62:6d:92:7e:75:5d:02:15:98:26:89:b4:
                    4b:00:e3:f1:e5:77:01:9d:01:83:3a:46:79:ef:67:
                    c1:6b:90:3b:24:25:99:76:74:1f:e1:e5:d3:da:d3:
                    3e:a6:10:3c:56:d0:2b:30:b1:f8:40:bd:16:f1:62:
                    62:93:92:fe:14:66:b8:48:e4:fb:58:bf:a8:0b:ee:
                    1c:2d:c5:ab:f9:37:9b:57:6b:b6:4c:f1:c7:14:5f:
                    45:ce:e7:22:3f:e8:5a:d2:f6:a8:24:96:67:88:09:
                    3e:84:b6:e5:60:bd:da:76:c6:ba:bf:95:d3:cd:ef:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:87:B0:8C:27:E6:B6:C6:52:E8:E5:40:7F:C4:2F:9F:9C:6C:EE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl

            X509v3 Authority Key Identifier:
                keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.203.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:b0:49:ce:c6:a1:c5:09:7f:18:5b:f5:a1:69:6c:ea:8a:
         18:61:e2:12:8c:f4:5a:3e:03:26:41:5a:14:db:a7:ad:b2:1b:
         20:d2:c8:25:5d:c5:7b:60:94:bb:15:6a:cf:10:d2:17:74:0d:
         0e:2e:36:65:02:e1:b8:c9:f1:ce:b5:bc:55:e9:15:f5:a1:50:
         12:8d:57:18:76:f0:ce:83:5b:c0:74:83:bb:1b:dc:6a:ce:fd:
         6c:32:71:77:22:a0:78:f6:0d:41:46:18:f0:0e:46:b1:79:57:
         15:ab:91:28:cc:e9:d1:32:cb:0e:10:bc:f0:78:03:cb:77:2d:
         c2:9a:58:4e:38:56:c0:a9:13:67:20:bf:69:09:df:aa:9f:fc:
         77:27:4c:4a:1e:0e:f8:9d:9e:ed:dd:83:4f:e7:c7:9a:1a:82:
         e2:3c:1a:44:20:62:07:81:7b:27:1f:4c:1c:ee:75:a3:5e:f8:
         16:72:84:f0:f7:d0:a2:9e:bd:63:e1:b5:ec:ad:6e:dc:27:fc:
         5e:99:58:3a:23:41:1f:f3:67:93:ea:95:cf:2f:f9:42:3b:c7:
         7a:1d:d4:f2:eb:d5:84:c6:c1:22:d4:a5:83:bf:cf:12:e1:d8:
         cd:de:ca:82:77:f1:b9:ab:fb:d2:18:2a:96:87:a8:dc:37:0d:
         2e:90:7f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:23 2026 by rpki-client