Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/ae39196d-53f5-3e75-9a4c-59d89964a735.roa
File:                     ae39196d-53f5-3e75-9a4c-59d89964a735.roa (raw, json)
Hash identifier:          XKms29HjkKvjV1maS4XC1Gj0qvX462Z8324bBNHPWiE=
Subject key identifier:   76:95:ED:A0:3C:03:8E:8E:25:62:1A:51:F9:B7:4B:52:FB:59:71:56
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F4328584F498A86AD8C8C719CEF3CA100
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/ae39196d-53f5-3e75-9a4c-59d89964a735.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18519
IP address blocks:        72.251.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:86:ad:8c:8c:71:9c:ef:3c:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae1eaef9-7044-4dd7-af7b-00f8eb109063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:70:c5:8d:71:10:54:f2:dc:dc:9f:70:bf:
                    40:13:6a:2d:41:c2:73:f6:95:35:43:d8:9a:d6:3c:
                    53:80:0f:9e:1d:a5:81:7a:ee:84:56:e8:c0:4c:cc:
                    44:9d:2c:4c:2f:29:40:d7:ea:31:ae:f2:5b:a0:1d:
                    e0:b1:95:7e:a7:73:dc:98:89:ca:be:2f:a5:c6:40:
                    78:c4:d9:34:02:f3:f7:d6:b9:55:81:93:3e:90:55:
                    6f:a1:14:54:4a:17:90:9b:63:f1:69:5f:55:ef:63:
                    07:b8:37:b6:3f:68:48:33:8f:b4:00:c0:ce:4b:7d:
                    9d:0f:9e:f8:33:f5:cb:5b:30:5f:00:b3:11:5c:6b:
                    78:8a:c5:00:7e:32:80:07:32:0a:e1:7f:20:b9:39:
                    52:8f:f3:29:ff:21:8b:40:11:d4:a8:21:d1:b6:fa:
                    8a:34:0b:18:9f:2f:cd:f7:80:77:01:2f:68:8f:65:
                    9d:5f:52:d5:57:77:8b:cb:b5:6d:f0:3f:be:50:40:
                    3c:d3:a2:3f:e8:bc:7b:56:2a:f6:fc:9d:7a:32:63:
                    29:d3:f0:eb:0a:42:66:6a:79:5f:51:4a:7a:0c:64:
                    23:d5:7a:0a:c2:78:f5:fa:e6:b3:45:56:74:8b:90:
                    55:84:b5:7c:0d:a4:a8:7c:0e:c4:e8:05:ec:11:9e:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:ED:A0:3C:03:8E:8E:25:62:1A:51:F9:B7:4B:52:FB:59:71:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/ae39196d-53f5-3e75-9a4c-59d89964a735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.251.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:18:b7:c7:1d:45:62:aa:f1:09:75:e3:74:e5:ac:a6:46:f1:
         4f:9f:72:4e:57:b5:4f:72:ec:e5:6b:d9:c3:93:2f:22:bf:c5:
         7b:29:1e:87:4e:87:7f:d1:b6:4a:0b:12:4a:9f:4c:cc:5e:a7:
         42:d1:c0:22:a9:ab:36:9c:83:4f:f4:1a:fe:95:82:5d:57:30:
         81:de:5b:1e:1b:d7:89:c6:80:6b:d0:99:9b:11:ff:40:44:41:
         01:e8:ea:ad:67:6c:25:5e:b6:cf:f7:8c:2d:f8:fa:c6:f5:f4:
         dd:db:19:7a:1d:3f:d0:2c:69:9b:ab:9f:56:94:70:be:52:d2:
         94:03:42:e8:f6:27:8b:6c:db:b1:75:ec:ae:68:df:39:fe:32:
         96:fa:5b:35:31:e8:7e:7c:05:7c:7c:31:00:41:ec:3b:80:cb:
         09:18:ee:15:46:fc:fe:3b:ff:87:8e:9b:d4:b9:86:7f:05:4b:
         6b:33:22:f2:77:21:f6:4f:fd:8b:4a:08:06:e1:7c:62:83:b8:
         96:e0:f2:09:ac:83:08:89:93:05:4b:24:99:cf:fa:a2:2e:cd:
         64:99:33:58:6b:d4:f5:33:5c:66:cb:3b:83:27:35:9d:9c:ce:
         86:f6:1f:49:a4:21:ad:47:dd:db:33:e3:60:b7:81:3b:84:6b:
         84:03:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:28:28 2026 by rpki-client