Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa
File:                     f12db169-8a5e-3b39-b763-848b626ee468.roa (raw, json)
Hash identifier:          brIp8K/yCnKWHALE2SLTEcqfGjv2uvfC9VBzyXEkYJk=
Subject key identifier:   83:1C:AF:72:E5:A1:6A:43:EA:76:82:05:C0:3B:B6:2E:FE:A7:03:D1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ECA6C6BAA0DB5CB2B08A60680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     5065
IP address blocks:        216.132.110.0/24 maxlen: 24
                          216.132.111.0/24 maxlen: 24
                          216.132.116.0/24 maxlen: 24
                          216.132.117.0/24 maxlen: 24
                          216.132.118.0/24 maxlen: 24
                          216.132.119.0/24 maxlen: 24
                          216.132.120.0/24 maxlen: 24
                          216.132.121.0/24 maxlen: 24
                          216.132.130.0/24 maxlen: 24
                          216.132.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:6b:aa:0d:b5:cb:2b:08:a6:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=62a29af7-a3d3-4126-bf32-6135b64218ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b1:b7:68:d8:cf:4b:82:a0:40:b3:c5:b3:b8:
                    e0:04:7e:9a:b0:07:6e:8e:4a:8b:76:57:c7:7e:47:
                    e7:a8:f7:db:d7:32:85:8f:10:f0:db:95:55:ca:89:
                    b2:3c:2d:14:95:d3:99:78:f8:12:4b:d9:fe:1b:fa:
                    ea:86:f5:48:21:61:5d:01:aa:d3:38:fc:1d:e6:0d:
                    1e:7a:b9:9d:a0:03:40:5f:6a:2f:dc:02:3a:ff:30:
                    c2:a4:9b:a3:9b:e8:d5:bc:cc:b3:d0:8f:c7:9e:1f:
                    80:18:96:b6:6b:c6:56:b5:e2:5a:da:9a:45:39:f0:
                    e3:96:51:33:5b:37:a4:dd:04:fa:c5:ce:cf:ef:ae:
                    f7:4c:dc:4f:a2:58:91:bc:0b:93:2f:44:b8:a8:80:
                    ac:81:31:f1:ad:a0:1b:e7:c4:c1:52:8b:6b:39:b3:
                    f2:ec:b2:4a:92:20:78:15:51:b0:6b:6a:35:4e:8b:
                    d8:7a:57:92:7e:0f:5c:b6:4a:fb:40:76:9e:7e:ca:
                    52:36:20:d9:cd:f4:de:3a:18:78:03:ca:c9:4f:9b:
                    28:cd:70:7f:19:00:f8:79:ca:1f:38:6a:f8:e7:c9:
                    f1:44:7f:45:95:c4:d9:87:0c:8c:79:1e:e1:46:c4:
                    47:0a:27:65:c4:55:2b:40:f4:1f:38:f7:21:2b:a2:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1C:AF:72:E5:A1:6A:43:EA:76:82:05:C0:3B:B6:2E:FE:A7:03:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.110.0/23
                  216.132.116.0-216.132.121.255
                  216.132.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:44:7e:cb:bf:f1:3e:c0:87:b2:1f:44:23:36:f6:86:31:af:
         7a:5d:c7:5b:d1:cf:f8:74:7f:17:76:88:cf:a5:b5:2f:cf:09:
         13:2b:9e:c1:f9:73:e3:22:d1:d9:8c:54:ec:68:c9:ca:4e:99:
         a5:06:7e:64:5a:eb:38:86:c1:38:84:2a:01:c5:16:38:2d:08:
         3c:f3:aa:20:11:29:49:8e:44:cd:a0:5f:0b:f5:ad:e6:0d:85:
         dd:20:00:31:98:3b:a7:5e:71:aa:38:c0:43:b2:9c:b8:7b:54:
         94:28:d9:ea:4d:89:38:46:b3:6d:9e:3b:ff:ce:6f:44:bb:0f:
         80:65:3d:01:16:70:18:ac:64:e0:c7:80:07:61:51:8d:c0:ee:
         8c:ef:b1:a1:5c:d2:00:a5:d1:0b:11:84:ee:c7:a7:6d:2a:7a:
         ce:23:30:27:c2:fa:a7:c2:ba:9b:2d:05:0b:c4:3e:a7:6f:a6:
         7a:58:29:ee:8a:fe:68:9c:fc:15:02:d5:c2:62:44:36:36:2e:
         58:a1:d0:18:a4:00:5a:e2:07:11:9e:47:2d:5f:0c:32:3d:64:
         57:ab:23:88:28:e5:64:b5:15:b7:ad:5b:98:62:be:89:a3:f5:
         01:f3:63:b2:46:44:ee:61:90:e7:31:ba:f3:bf:dc:b3:9f:76:
         e3:38:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:06:44 2026 by rpki-client