Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/4ac87067-0888-37f7-91f0-1b190b8dd719.roa
File:                     4ac87067-0888-37f7-91f0-1b190b8dd719.roa (raw, json)
Hash identifier:          4omCoUKpvlTF6563a7cOVkOSCb34TPANMg9GirQDdFg=
Subject key identifier:   CB:65:67:86:3F:C1:7F:48:80:51:4F:CD:72:76:44:7D:C5:E4:06:56
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584FA8B4CAAC84E2D889EC8DCD80
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/4ac87067-0888-37f7-91f0-1b190b8dd719.roa
Signing time:             Thu 29 Oct 2026 03:55:32 +0000
ROA not before:           Thu 29 Oct 2026 03:55:32 +0000
ROA not after:            Wed 27 Jan 2027 04:55:32 +0000
asID:                     11696
IP address blocks:        64.190.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:b4:ca:ac:84:e2:d8:89:ec:8d:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 29 03:55:32 2026 GMT
            Not After : Jan 27 04:55:32 2027 GMT
        Subject: CN=8de8308a-0144-4bb1-9be0-cfbcbac062c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:e9:f5:04:9e:d4:ba:63:e2:8c:73:07:46:
                    20:0f:72:e7:5e:6a:81:2c:59:4b:86:8b:e1:09:c4:
                    86:63:63:a0:f9:fc:46:ef:6e:b0:36:74:83:16:82:
                    30:5c:48:7b:9b:f7:82:7b:3d:46:b4:a0:88:26:22:
                    63:c1:33:61:27:54:aa:81:87:20:97:31:9f:b3:33:
                    b6:b9:44:96:3d:ae:ae:a6:2a:c7:48:72:ce:9f:d5:
                    9f:da:a5:5a:8b:ff:d4:56:63:2c:46:f4:69:1a:c2:
                    29:66:db:5c:7e:44:e0:99:c4:a4:b9:d9:f1:9e:8f:
                    96:29:64:5a:01:bc:0e:9d:08:76:e7:14:30:53:80:
                    73:4f:a5:5e:fa:15:49:bb:47:dd:6a:af:39:ec:28:
                    d2:40:84:3d:21:40:e9:55:c3:54:30:dc:b1:dd:3c:
                    79:33:0d:38:96:28:83:9f:cc:c6:90:84:98:3a:c6:
                    4a:38:b7:33:9f:e8:60:32:d1:cd:2e:8f:ac:4b:0c:
                    18:ca:b4:d7:c4:d8:1c:12:b4:34:68:f8:6b:5d:8f:
                    07:e5:d1:12:61:7a:24:55:9c:c8:a0:2f:d3:27:48:
                    16:cb:1f:9d:a0:93:db:ea:57:79:58:1b:6a:9c:af:
                    6e:0b:e6:4e:52:1b:9a:6c:c7:c2:78:27:ea:43:71:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:67:86:3F:C1:7F:48:80:51:4F:CD:72:76:44:7D:C5:E4:06:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/4ac87067-0888-37f7-91f0-1b190b8dd719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:68:a4:d2:51:dc:ba:e7:77:49:c2:d3:7e:a5:89:c8:32:f0:
         19:4f:3e:f4:27:3b:10:9c:99:e2:0c:cb:8f:f0:3f:1c:a7:c9:
         e6:6b:96:8c:7f:b8:cb:a2:bd:93:18:ed:6b:28:69:83:1b:ce:
         c1:7a:f8:f6:09:9b:6a:5d:b4:29:c7:a8:93:9a:23:6c:f6:08:
         86:f6:66:e2:47:4b:8a:da:b8:2d:04:0a:7d:c9:ce:90:26:cd:
         f9:5c:e7:6b:b7:e8:96:9a:26:4a:92:67:60:da:bd:62:29:7c:
         99:69:b4:c2:56:2a:23:e7:4b:3b:52:d9:fd:87:44:78:ac:51:
         92:08:3f:ad:e3:c7:1c:77:66:32:0e:a5:e6:cc:a7:11:6a:e0:
         bb:0d:70:ec:a5:af:db:3e:fe:72:fb:e0:48:3d:ba:aa:93:f9:
         41:41:d5:02:10:65:da:1c:82:44:af:72:b2:cb:95:cc:50:ca:
         eb:46:0d:d8:6c:95:14:99:14:2f:40:1e:f1:9e:81:d3:2a:20:
         97:8d:b9:38:98:9d:56:91:32:c5:77:ef:d3:2f:b9:59:1e:a2:
         15:d1:e4:68:d0:37:f2:e0:c6:9e:8a:8b:ec:2b:05:58:df:2b:
         20:a2:ad:8d:99:08:52:20:cf:42:28:9f:8d:20:ee:de:b8:b0:
         1b:74:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:53:36 2026 by rpki-client