Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa
File:                     3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa (raw, json)
Hash identifier:          2hKmXz9YqDNJBPDOiTQcNO5oFcjRJMNiwvvYvcegZpc=
Subject key identifier:   F6:2D:68:43:B2:FA:14:FB:40:11:FD:7A:EA:35:A5:40:53:56:D4:59
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F46A7F6B79D63D06E1C34E200
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     6922
IP address blocks:        204.158.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:f6:b7:9d:63:d0:6e:1c:34:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=5e0e029e-447f-4ce8-b121-3ed6d1d89566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:de:72:7d:c6:e2:af:05:3d:a8:80:77:e6:68:
                    fa:dd:11:4b:0c:22:58:d4:19:27:c6:b2:9f:dc:14:
                    57:cd:ef:aa:6d:07:f6:de:c6:70:2b:0c:75:75:2c:
                    03:1d:99:ec:9b:d5:1a:10:1d:cf:de:59:b1:63:95:
                    bb:b4:f9:42:65:3a:7a:d7:87:ea:dc:0c:55:bb:e1:
                    f5:d6:f6:c0:a3:74:fe:76:33:55:a5:db:89:47:7c:
                    07:4f:f3:0e:d2:9d:85:71:8c:32:ad:93:7d:66:5b:
                    9b:13:e9:fe:5c:b1:5d:7b:4a:b0:8e:4d:42:79:a5:
                    1c:c4:5d:aa:61:43:11:3a:fd:af:c8:5a:1d:3c:68:
                    74:a0:fe:d6:04:f6:ab:5a:7a:bd:55:94:44:ff:64:
                    14:0d:50:a1:af:e8:c5:ab:76:ee:2f:70:fc:1b:e1:
                    5f:24:22:bf:92:4e:2a:e5:72:14:c4:24:f6:84:12:
                    a7:c9:f3:df:00:0a:34:53:12:70:90:7e:d2:42:6f:
                    a7:0f:9e:86:da:f0:76:10:da:a8:1e:ee:4e:80:79:
                    98:a3:d8:cf:7e:c9:f8:28:c3:7f:2f:05:20:e3:0d:
                    8e:45:27:22:3d:62:f6:62:05:fb:24:5e:b3:3d:2f:
                    b5:c6:a5:7a:0b:08:22:b5:95:7a:80:8e:78:8d:9f:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2D:68:43:B2:FA:14:FB:40:11:FD:7A:EA:35:A5:40:53:56:D4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:89:49:ec:6b:74:81:ec:bc:dc:90:83:8b:5c:d8:12:8f:
         fe:bf:86:2c:0f:2c:e5:af:60:2e:e7:90:4d:dd:7b:23:ee:ff:
         0c:03:3a:7c:3a:db:7d:f8:2c:b7:92:95:ad:01:ff:e1:ff:5f:
         2d:00:96:84:67:78:56:7b:36:c7:33:31:19:31:8b:c7:b3:8c:
         1e:06:61:b8:25:a8:9d:e1:af:ed:44:e1:02:a0:42:54:f9:c9:
         27:b5:39:a8:13:b4:83:21:02:1f:5a:74:0c:b0:05:41:22:e0:
         eb:08:9a:c6:a7:09:51:c4:10:6d:7e:d6:7c:49:65:07:49:30:
         03:9e:0c:00:dc:ad:52:0f:b5:2f:14:06:24:ce:04:19:7b:d3:
         a4:a2:ba:6e:a5:f5:29:d2:eb:0f:62:66:29:80:96:22:0d:ec:
         14:a8:52:c8:d3:ea:9d:61:97:66:09:c3:8a:24:0a:36:6e:8b:
         44:15:32:26:8e:d4:ec:bf:28:39:1e:a1:f5:55:b4:40:07:ae:
         08:68:ce:f7:ef:cc:63:87:00:41:97:2d:dc:3c:bf:b2:94:36:
         3b:5d:5d:04:e3:86:8d:89:3b:10:d1:6e:a1:aa:6f:13:51:82:
         03:3d:2f:05:78:f0:58:8f:16:61:6d:1b:09:62:61:50:2f:1f:
         7e:bb:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:06:52 2026 by rpki-client