Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/ff1b0e71-a4b6-3440-bf40-4a76be03e506.roa
File:                     ff1b0e71-a4b6-3440-bf40-4a76be03e506.roa (raw, json)
Hash identifier:          ku3k3Jyk+tms4KKoEGySyRZvqAWPbtoTiuYdrFZOzoI=
Subject key identifier:   45:94:F5:82:BA:55:91:AE:7B:92:3E:AA:C6:6E:96:BA:55:8A:1B:0B
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584FA8A8ECD52C7CCAF466652D80
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/ff1b0e71-a4b6-3440-bf40-4a76be03e506.roa
Signing time:             Thu 29 Oct 2026 03:31:37 +0000
ROA not before:           Thu 29 Oct 2026 03:31:37 +0000
ROA not after:            Wed 27 Jan 2027 04:31:37 +0000
asID:                     11696
IP address blocks:        216.246.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:a8:ec:d5:2c:7c:ca:f4:66:65:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 29 03:31:37 2026 GMT
            Not After : Jan 27 04:31:37 2027 GMT
        Subject: CN=283e050d-c8cc-4f79-884c-332d8a1e7a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:67:58:7a:e7:1c:c9:ec:17:f8:65:1b:b2:
                    7f:e1:90:b4:e8:c9:34:8d:d3:44:de:49:d4:df:25:
                    ad:7d:ba:68:06:0f:e8:94:49:aa:d6:61:67:43:43:
                    03:d5:d4:8d:f1:42:b6:b6:4a:25:3f:50:fc:fa:21:
                    05:6c:14:92:33:d0:9c:b4:52:f9:79:c3:28:4e:90:
                    04:4a:dc:84:a3:e0:5e:05:28:1a:d6:0f:d3:b5:81:
                    3c:7c:dd:f8:d3:8d:a2:fa:16:73:32:93:3f:30:4e:
                    17:f5:45:80:d7:4d:19:d3:37:68:b0:a6:61:e1:5e:
                    ae:32:59:82:03:bb:3f:0d:69:48:0e:a2:9b:65:d2:
                    b9:3f:86:ba:33:f6:c7:fe:76:6d:fd:de:3f:66:b7:
                    87:f9:3b:65:cd:c1:23:21:f0:73:76:e2:ba:97:be:
                    5c:4a:9d:c1:2d:fa:de:f4:f9:46:ff:69:fd:32:c8:
                    01:ec:34:cd:91:0c:2d:d9:25:07:cd:81:da:a5:83:
                    7a:0a:22:86:83:19:5a:45:62:ed:fe:b4:4a:6a:a0:
                    c0:90:2a:8a:a0:ed:48:41:c5:60:be:5b:75:d4:ab:
                    35:0c:d6:05:a5:4f:f9:0e:b3:93:1c:3f:16:32:c1:
                    d7:0d:b9:41:68:33:aa:44:c3:de:e5:cb:56:6b:1a:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:F5:82:BA:55:91:AE:7B:92:3E:AA:C6:6E:96:BA:55:8A:1B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/ff1b0e71-a4b6-3440-bf40-4a76be03e506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:7f:03:6e:75:3f:4d:e7:64:45:d3:b2:2e:35:cf:78:61:
         f4:34:55:9d:3b:a7:3b:e0:b2:89:63:72:4c:c0:4f:85:c8:bf:
         bd:6b:84:10:8e:b9:26:b1:24:75:13:83:ac:38:ce:48:2a:96:
         ba:64:63:75:dc:1e:09:30:5a:e0:4f:92:66:8d:6a:60:89:e6:
         62:09:11:68:b7:cd:24:6b:32:86:2d:12:c7:a3:61:02:de:79:
         52:80:01:91:b1:74:5e:3e:b7:e4:a6:26:c6:75:8e:4e:23:c7:
         ff:ca:95:b1:be:87:27:df:a2:c5:32:76:44:07:b1:95:4b:4f:
         34:57:06:ff:e7:7b:53:eb:77:97:77:14:8a:4c:16:63:9d:63:
         31:52:3a:40:6a:31:69:59:1e:37:87:15:e1:ed:f3:a2:64:4a:
         3e:4d:c4:fe:96:2d:0a:66:a2:0f:5a:72:8b:eb:77:0b:4f:3b:
         83:87:10:ee:e4:ca:8d:13:e4:b2:e9:65:99:2c:5d:9e:3b:fb:
         82:78:6f:9f:0b:f0:13:9a:b7:8a:c0:07:dc:86:db:74:b2:21:
         d5:85:2c:84:94:34:ed:a0:56:fb:3b:2d:f1:03:4d:d0:55:18:
         27:67:17:7c:22:3d:cf:aa:76:04:a8:c9:0b:4a:5c:3b:32:aa:
         4c:67:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:08:09 2026 by rpki-client