Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa
File:                     96525ac2-3951-316b-b1c6-8b0b84089950.roa (raw, json)
Hash identifier:          l+Q6XnTQUTuoUIJ334eEsXHpZIR2txBIFMKmCETuwLc=
Subject key identifier:   26:FA:8E:FD:10:CF:E2:80:10:EB:A8:9E:D6:57:A8:92:B4:68:06:46
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584F31B7BC25CD94EAEDBC01BF80
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        164.55.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:bc:25:cd:94:ea:ed:bc:01:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=7b14a656-9bce-442f-9a35-4869ab9bf138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:4c:17:3d:d3:b6:31:83:80:59:8e:fa:db:
                    d5:e9:b6:a2:a2:f5:d0:46:7a:6d:23:31:f5:13:48:
                    47:7a:f2:ca:98:ea:f9:63:5a:c0:48:df:e4:a8:49:
                    e9:ce:fa:20:60:bb:57:3e:fc:ca:9f:ae:a5:84:b1:
                    f1:5a:01:82:6a:e0:7e:73:97:4d:49:52:c4:ee:fb:
                    21:d0:e9:bb:e8:fa:54:d8:f2:fe:5f:0a:f3:0c:98:
                    df:12:0d:ae:05:a0:27:1b:c2:0b:55:78:1e:c0:17:
                    8d:72:b2:96:d4:82:5e:58:fe:69:c0:fe:d0:bc:c8:
                    73:6e:54:32:50:d5:64:92:21:52:07:89:73:bd:94:
                    9b:c7:8b:52:73:69:98:f0:ca:4e:e5:ea:0b:93:af:
                    5e:1e:db:9d:52:0c:1b:3c:13:33:12:a8:cf:82:bd:
                    2c:88:16:3c:99:39:97:c8:6f:4b:29:fb:76:42:ad:
                    69:d0:88:3e:23:ab:70:e0:48:1c:9c:5a:d9:ff:76:
                    c5:84:46:23:81:b3:57:c8:3d:4a:e1:a1:c8:ae:83:
                    a5:bc:47:7a:30:b5:15:61:73:53:50:1a:07:be:c2:
                    d7:dc:29:c6:59:39:35:8d:ae:6b:4c:b7:5b:6f:b7:
                    a5:b5:5d:a7:5b:d0:54:d1:74:9d:58:5c:6b:58:7e:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FA:8E:FD:10:CF:E2:80:10:EB:A8:9E:D6:57:A8:92:B4:68:06:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:63:57:6c:44:e9:b2:12:cd:08:bb:0f:52:f1:23:64:e3:
         db:8b:45:e3:fc:4b:76:54:ef:69:b1:78:03:cc:bb:c7:28:ca:
         61:af:6b:66:28:5b:b8:b7:c0:b4:36:19:f8:79:d3:90:a0:eb:
         e2:ed:d7:df:6b:70:51:a2:64:6a:3b:d1:75:74:bb:a4:81:2e:
         36:3b:ff:23:b8:cd:9b:15:ee:c4:e8:01:c0:40:6c:d9:78:7f:
         71:c6:62:58:66:96:0b:f6:73:b9:1b:40:4a:d1:69:3d:70:d8:
         e2:f2:fe:b5:da:99:c7:16:b9:b8:5b:8a:17:9b:18:36:f8:d2:
         ca:8d:6e:da:f8:cb:2f:7a:b4:d5:fe:88:c1:d7:b5:63:86:c1:
         93:69:e8:05:2e:ca:b4:b1:cf:1e:8a:0f:ed:c9:6e:1e:58:cd:
         b1:df:37:dc:d4:a2:04:33:e7:ac:34:25:9e:58:48:80:cf:81:
         2f:e4:3c:d5:aa:00:b8:3f:f5:dc:93:3c:8d:29:34:83:4f:96:
         d5:86:db:9a:ae:b5:75:25:07:37:44:aa:3d:0a:d5:32:b6:ad:
         7d:d8:a0:0d:7c:9c:de:36:6a:f4:00:f8:d8:50:00:cf:15:dd:
         2f:02:f9:0b:94:94:29:ce:53:c0:0b:74:3b:8a:40:05:4d:fd:
         24:90:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:31:28 2026 by rpki-client