Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/462d712d-4b64-380f-bffc-da8753e19c9a.roa
File:                     462d712d-4b64-380f-bffc-da8753e19c9a.roa (raw, json)
Hash identifier:          MMJRcT4BkANsoBUEE6MHV8/r924WowIYRaaTyoSRniY=
Subject key identifier:   5D:53:AE:2A:B7:B0:F1:B8:39:16:8E:53:06:5A:A1:2D:C9:77:00:67
Certificate issuer:       /CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
Certificate serial:       010D0C9F4328584F49729BD404AE69B96EB22480
Authority key identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/462d712d-4b64-380f-bffc-da8753e19c9a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30011
IP address blocks:        162.118.16.0/24 maxlen: 24
                          162.118.20.0/24 maxlen: 24
                          162.118.21.0/24 maxlen: 24
                          162.118.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:9b:d4:04:ae:69:b9:6e:b2:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f9d37674-f6ef-42f6-bbe1-1ff72427f220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:da:d4:b6:5e:2a:13:5d:b6:29:6a:af:12:
                    2a:ae:f2:79:31:4e:66:3f:47:73:f8:a2:94:67:21:
                    93:4a:e2:ff:3d:71:48:ab:42:4d:cb:02:af:37:4e:
                    b4:6d:f3:8c:a8:41:d3:47:0f:d9:fa:57:e0:1e:28:
                    26:0d:5b:26:94:96:27:01:ca:2a:85:ce:da:eb:b1:
                    f9:5c:e9:34:ba:cd:bc:26:05:b4:bc:1a:e2:ff:15:
                    b6:a2:7d:b9:9a:aa:b3:4d:cc:ba:bd:13:ed:86:3c:
                    36:e7:41:62:40:57:c9:ee:12:d0:23:00:54:dc:4f:
                    c6:15:ad:13:d3:8a:db:eb:ce:2c:e7:62:6a:90:a5:
                    fb:3d:c7:6e:20:44:b7:dc:15:e6:99:45:4a:80:be:
                    89:33:07:31:73:17:53:de:51:5d:f1:c7:69:ab:d0:
                    75:27:37:d8:1e:7e:25:2f:b9:35:b6:01:46:5b:6d:
                    48:f5:80:dd:b3:d3:4b:0b:8a:98:8b:51:db:b2:0e:
                    49:6e:82:09:14:e0:d5:cc:9a:4c:fc:12:ea:9c:07:
                    10:02:b5:d9:97:de:21:40:8f:ae:60:be:e2:4b:cc:
                    ae:74:8e:e6:b7:a9:e2:b3:fd:66:e1:a7:0c:cd:2f:
                    85:80:44:2a:73:c4:e2:84:4c:0b:92:9e:5a:ca:b0:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:53:AE:2A:B7:B0:F1:B8:39:16:8E:53:06:5A:A1:2D:C9:77:00:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/462d712d-4b64-380f-bffc-da8753e19c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl

            X509v3 Authority Key Identifier:
                keyid:32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.16.0/24
                  162.118.20.0-162.118.22.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:1b:56:55:dd:2a:2a:31:25:cb:b4:67:c8:2c:58:36:10:
         ae:da:c0:c6:04:3c:a8:9f:0a:fd:87:52:40:dc:ae:6e:cb:7d:
         8b:e3:15:93:b3:4b:4b:83:3d:58:e7:db:d9:52:33:a4:ae:49:
         a4:ca:76:cd:ad:01:7e:f6:b0:42:0c:18:b3:d6:79:b2:9a:52:
         1a:6f:81:1a:86:69:ac:7f:d2:76:e0:c0:80:72:3a:4c:34:10:
         b0:6d:a8:6c:9b:5c:46:85:9c:98:58:98:80:6d:fd:d3:26:62:
         0f:98:07:ab:6c:0e:18:d7:d3:a0:3e:16:c8:04:23:0a:dd:37:
         7e:9c:de:01:f9:72:df:11:de:6d:cc:45:c3:02:7b:b9:a9:b0:
         46:41:44:2b:36:64:dd:33:bb:c7:ac:03:3c:d4:01:96:fa:33:
         42:45:08:26:ce:c9:c7:cd:f0:41:b4:d2:22:77:55:32:25:3e:
         bd:d2:12:63:9e:4f:34:89:fa:6c:22:92:50:b9:03:c9:77:f4:
         c7:cb:02:2a:e1:4e:4c:72:99:e2:fc:a5:b9:50:ba:e9:7f:91:
         2d:11:5a:8b:54:5d:56:e2:1e:52:5e:90:27:7a:a6:7a:aa:fd:
         07:0b:18:bd:e5:bd:a2:f3:df:61:f4:22:90:44:84:67:3e:7e:
         f1:c9:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:52:34 2026 by rpki-client