Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8d5b8dc3-5e31-3d1c-88bc-5d67e69dbd34.roa
File:                     8d5b8dc3-5e31-3d1c-88bc-5d67e69dbd34.roa (raw, json)
Hash identifier:          QL12+y4d6A66rkIADOAyE0CezaK8+ByXclkuNnSBsu0=
Subject key identifier:   37:C8:DE:D3:6D:CB:3E:E6:7C:4A:55:79:E2:AC:E8:19:0A:E3:57:3D
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584F698D7D115E128CEB112074E0
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8d5b8dc3-5e31-3d1c-88bc-5d67e69dbd34.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     26211
IP address blocks:        205.220.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7d:11:5e:12:8c:eb:11:20:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=b8077dc0-8bb0-4e37-8600-670768dbec43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f6:26:67:9d:72:b4:44:e3:84:53:59:2d:6f:
                    e4:ce:de:15:b5:4e:00:6d:f5:0b:a4:2e:d5:24:c2:
                    77:63:31:50:95:25:c1:2d:e7:4a:87:5c:58:cc:04:
                    56:47:00:93:ea:5a:d5:a3:16:ce:ec:0c:dc:29:62:
                    e0:c7:1f:80:ad:21:a8:83:65:98:21:b0:06:b5:a7:
                    f5:2f:06:d0:43:0c:1d:23:f9:9d:cf:39:c9:70:f6:
                    43:5a:a3:ec:05:a0:59:9e:ed:17:68:0f:2e:d5:4a:
                    10:ab:f1:02:b1:8b:ae:75:eb:4e:33:91:05:a3:88:
                    af:1d:af:06:99:95:5b:dc:23:86:6b:81:a1:bb:c9:
                    54:82:0a:c0:74:fc:ac:0e:6b:b4:de:ce:bc:ce:88:
                    ab:f3:c1:74:21:a4:58:e0:ce:64:2d:b4:25:ea:38:
                    ec:29:fc:38:54:a6:11:8e:d4:a6:2f:44:b1:ba:46:
                    6a:88:5d:a9:54:70:c3:1f:c3:8e:de:74:76:3e:61:
                    2a:bc:e4:88:4a:56:ba:a3:8b:97:35:f6:f3:11:12:
                    88:53:c4:a0:43:ed:3c:1c:81:50:ad:45:dc:d0:71:
                    b7:e4:90:ac:59:e7:60:4c:e6:c0:40:dd:80:76:27:
                    e5:f6:48:f0:77:8d:60:c6:8c:2a:6d:d8:a0:87:21:
                    cf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C8:DE:D3:6D:CB:3E:E6:7C:4A:55:79:E2:AC:E8:19:0A:E3:57:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8d5b8dc3-5e31-3d1c-88bc-5d67e69dbd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:84:ee:1c:d3:9d:73:78:3b:20:fe:99:05:74:ef:90:c0:4e:
         f7:c1:c7:cc:e2:82:72:34:d5:c8:02:b9:a2:36:aa:ba:ff:83:
         b6:90:19:5a:85:16:b7:ac:8c:42:8c:f1:a8:4d:ab:40:08:1c:
         27:57:b9:48:0c:bd:cb:2e:0d:12:aa:77:5b:57:91:6b:fe:81:
         cc:f4:b4:a1:0f:fe:c9:07:bb:c9:8c:31:81:39:aa:de:63:04:
         74:05:89:d0:43:38:d7:ce:3f:2c:cd:ae:a4:9d:54:b1:55:4e:
         75:de:03:87:fa:05:08:32:bf:fa:3e:86:2d:0e:6a:69:0a:17:
         91:33:e9:ea:e3:26:2b:d7:ae:b9:93:21:f7:83:77:c6:8f:1a:
         05:0a:6a:34:8d:9d:7c:e9:3a:dd:22:2f:5f:33:8c:13:25:b6:
         73:11:bf:d3:82:b1:a3:63:69:5c:6a:1b:a8:62:96:e7:66:43:
         a5:06:68:9c:a3:f3:f5:fa:86:2e:89:b1:35:0b:ff:06:cc:e3:
         00:88:98:2c:88:dd:a0:05:de:76:b3:4d:00:8c:a3:0b:58:b3:
         76:d7:c7:56:44:8a:6a:9d:0a:53:b8:c2:03:8f:e8:5a:b4:48:
         85:b8:d4:29:85:37:91:b7:f1:c0:fb:a2:b4:65:eb:ef:ef:de:
         97:85:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:27:44 2026 by rpki-client