Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c55206ce-573d-37b2-b563-127c86f7a20b.roa
File:                     c55206ce-573d-37b2-b563-127c86f7a20b.roa (raw, json)
Hash identifier:          QF0r+S1p8KP7K/b/Crk1rfzDoBTCdcJntRnNbybrtAQ=
Subject key identifier:   93:51:0F:DA:7C:75:89:1B:A3:88:98:E3:06:26:45:97:F5:5A:A7:EB
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F0D6CE469D97B4EC6D0240F00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c55206ce-573d-37b2-b563-127c86f7a20b.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        150.230.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e4:69:d9:7b:4e:c6:d0:24:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=e70f8532-fce0-4c99-bf34-6dc7c0c09081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fe:e8:c8:6f:34:73:30:c4:13:9e:31:99:57:
                    ba:ff:af:f0:0a:5b:f1:da:a0:c3:73:17:38:32:cd:
                    fc:c3:2c:3d:6b:4a:06:75:7d:8d:53:6a:e1:33:72:
                    e4:53:4f:b6:7e:b5:f7:80:a6:1b:aa:09:3f:4d:22:
                    f2:1f:2b:0f:c9:e5:16:f9:cc:02:87:4f:06:32:98:
                    c8:90:d2:04:c3:36:0c:e3:87:3b:b8:7e:1c:c0:91:
                    46:55:43:af:81:84:1d:56:ea:6f:65:fd:9a:45:90:
                    6b:aa:f2:3b:ce:50:3b:00:f9:ff:fb:c4:8c:64:d3:
                    c2:2a:1a:ce:22:da:22:71:72:63:5f:bb:c3:8d:4d:
                    ad:42:94:76:5e:c7:d2:f9:57:41:f1:e6:b3:3f:82:
                    19:51:b1:14:2b:ac:89:5a:f4:7d:e7:d7:74:33:ed:
                    86:56:a7:9d:46:26:ca:49:63:36:81:dd:4f:f3:75:
                    1c:35:5e:19:95:a2:a6:43:65:b0:38:ee:21:66:f0:
                    f1:10:e9:53:78:ce:ac:b4:5d:f5:64:1a:ef:06:05:
                    26:4e:de:17:af:cd:5c:c6:5e:f2:f5:04:ab:4a:ed:
                    de:1e:a1:77:62:93:4a:b4:93:c4:09:dd:e7:d8:d7:
                    89:fa:7e:55:e0:60:e2:84:17:a9:12:c9:55:b0:9c:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:51:0F:DA:7C:75:89:1B:A3:88:98:E3:06:26:45:97:F5:5A:A7:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c55206ce-573d-37b2-b563-127c86f7a20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:79:e6:01:3e:9d:6b:61:b7:d3:d7:84:bc:d6:8f:d6:3c:52:
         ec:ef:d5:6f:8a:a8:fe:ef:fe:95:0c:c5:c5:7e:dd:3d:e7:51:
         46:2a:5a:99:a3:bc:2b:8f:7e:d6:3b:86:ce:6d:c1:85:a2:3a:
         94:74:37:87:65:89:5e:9a:ef:86:ae:e9:12:cc:07:01:27:d0:
         fa:57:35:25:86:25:5d:88:51:10:aa:5d:33:7b:c8:fc:03:34:
         3f:6b:27:5d:41:12:cb:40:9c:cb:d9:e2:e9:b1:35:f2:94:33:
         13:7e:d5:fc:d3:4c:69:91:58:ec:b3:f8:2e:f6:5a:ff:4e:8e:
         21:89:99:06:a2:ca:7e:46:1d:66:50:06:90:3c:7e:3e:87:e0:
         45:9a:c1:8b:62:0d:3d:6d:1c:9d:10:b8:fa:ec:59:03:61:db:
         30:9d:11:9e:04:4e:ef:6a:ae:ab:88:4d:f3:ab:11:f1:24:ed:
         02:90:21:31:2c:a5:48:14:2e:6f:72:a9:e4:8c:ac:67:45:1e:
         93:79:bf:c4:95:dd:7c:51:51:72:14:00:df:b0:d1:95:a8:2f:
         4a:39:9e:70:7a:77:51:bc:7d:d7:ce:d3:fb:17:de:2b:e6:13:
         d0:63:a8:18:48:0c:41:9e:af:5d:80:83:ae:99:fe:58:61:70:
         21:3e:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:55:55 2026 by rpki-client