Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa
File:                     31dd128e-6217-30ff-8b1a-469e384a6d67.roa (raw, json)
Hash identifier:          BwFa0wQUbmjZElobejmYUNDdPhoLoQMcQ5Zw/98HCYI=
Subject key identifier:   67:9B:35:E2:8C:00:27:75:7C:47:62:95:E8:53:DB:ED:6B:E8:B7:2B
Certificate issuer:       /CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
Certificate serial:       010D0C9F4328584F49745E08561C35067AC774C0
Authority key identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54004
IP address blocks:        162.118.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:5e:08:56:1c:35:06:7a:c7:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ea746740-96ac-48d8-9082-4a1ec8354ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:b8:5e:1e:11:37:af:2b:32:c2:90:2a:81:
                    e6:c5:b9:be:06:67:11:7b:70:99:8f:e0:75:03:78:
                    17:bf:a9:6a:c2:32:ac:4c:aa:00:60:ad:a5:56:5a:
                    93:04:10:b1:c4:d7:a4:21:4d:ef:78:7b:cc:82:d6:
                    52:b4:61:ab:ae:06:d9:0f:59:ce:7a:17:6b:2b:df:
                    81:95:c1:a2:c6:f2:e6:95:c8:b4:e3:db:30:02:cb:
                    f9:55:99:73:d2:fa:ab:4f:1e:13:d0:11:74:35:df:
                    ed:05:35:18:ca:96:e0:89:c4:35:8d:69:be:8a:88:
                    13:1b:ea:b3:35:bc:fa:71:e2:dc:2b:74:29:89:06:
                    fa:b0:6c:d6:11:38:83:1b:e8:95:39:3a:a7:64:8d:
                    78:3c:42:fe:3b:3b:9b:43:87:60:9c:d4:66:53:bd:
                    77:b9:27:6f:b3:3d:6a:06:6e:32:f2:ae:21:87:2d:
                    1f:87:57:01:ec:a6:4e:73:8d:17:a7:1f:6e:6c:b8:
                    69:2d:2e:02:ce:c2:4c:09:0c:55:83:c8:8f:23:33:
                    eb:c7:6d:7b:77:21:36:fe:bf:92:12:e5:53:af:82:
                    88:07:6e:0b:e5:8c:5a:7f:de:92:a2:eb:ec:00:ba:
                    26:a2:95:26:fb:bd:0a:4a:44:5c:bc:40:f8:02:2b:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9B:35:E2:8C:00:27:75:7C:47:62:95:E8:53:DB:ED:6B:E8:B7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl

            X509v3 Authority Key Identifier:
                keyid:32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:12:01:3c:6c:a3:2a:12:40:f9:3b:38:97:0d:d8:29:e0:
         e9:67:e9:02:e9:98:05:6b:af:bb:ab:7b:02:98:3a:20:02:a1:
         10:22:4f:4a:3f:18:52:7f:ea:38:31:01:db:64:60:89:de:d3:
         5d:11:05:ad:c4:25:bd:e0:8e:5e:c1:de:7d:db:dc:e0:55:10:
         57:e8:fa:92:89:70:86:0e:25:8a:f9:9a:b7:35:bf:b2:f1:83:
         db:9c:cd:c1:92:e1:31:10:fb:b7:94:41:ee:e6:5f:c6:ec:3e:
         67:bd:2f:59:2a:5d:1a:43:13:2c:72:80:b2:df:a9:4d:cd:86:
         64:cf:88:5d:39:38:b7:a5:81:f2:d7:c0:2a:82:ed:32:bc:42:
         40:e5:c0:0f:c8:54:48:cd:96:c7:39:14:94:61:de:71:57:71:
         ea:d6:7d:58:a3:97:97:da:30:35:71:81:a2:68:bb:d9:a3:23:
         18:4e:a2:21:1f:14:bf:52:0c:fa:c6:86:4b:06:2b:ce:03:1a:
         ac:e1:3a:e2:18:48:81:0c:9c:0e:cb:23:02:ce:e0:d5:ef:6b:
         8d:1f:f5:04:04:b3:0a:3e:cd:39:49:2f:4d:f6:28:f8:9f:35:
         a4:33:3d:e3:d1:75:e8:28:d4:91:cb:21:a5:48:a4:8a:43:b6:
         50:1b:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:04:30 2026 by rpki-client