Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0/6d268863-e49e-32db-9f78-8bd33f7daf73.roa
File:                     6d268863-e49e-32db-9f78-8bd33f7daf73.roa (raw, json)
Hash identifier:          j+ylnkxh6uQwP/o6HH3i/bnkGIBlHb9InagmraGOt80=
Subject key identifier:   10:AB:03:D0:78:BC:E9:D9:21:BB:23:31:F8:EA:C6:97:2C:1C:C7:78
Certificate issuer:       /CN=c4891785-f390-4bf2-84b1-5c5c4871eac0
Certificate serial:       010D0C9F4328584F119CDBBD7210B6B953498436
Authority key identifier: 86:4E:99:50:A8:9A:AC:CE:7A:CD:72:40:F0:0B:D0:07:A1:CA:F6:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0/6d268863-e49e-32db-9f78-8bd33f7daf73.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     21895
IP address blocks:        208.67.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0/c4891785-f390-4bf2-84b1-5c5c4871eac0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0/c4891785-f390-4bf2-84b1-5c5c4871eac0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:db:bd:72:10:b6:b9:53:49:84:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4891785-f390-4bf2-84b1-5c5c4871eac0
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=79a8c833-6c3b-42b6-b1bd-b7d419315662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:fe:1b:6e:92:3e:62:c9:67:12:1e:33:28:
                    43:de:89:51:74:7a:3a:61:82:03:d8:93:d1:c1:62:
                    93:22:fc:e1:29:e1:06:33:92:ff:54:b1:bc:24:88:
                    2f:40:9e:ef:da:bb:03:90:1a:59:b1:23:10:b2:74:
                    d7:9d:b8:07:bd:3d:22:9c:65:65:76:88:57:03:f8:
                    90:c5:7b:35:b2:5d:ca:e5:1a:51:f3:d8:91:68:c7:
                    e6:3c:f4:83:a1:32:d1:ee:a1:cd:3a:95:d9:b6:0e:
                    34:2b:68:14:9a:81:9d:44:a2:e5:71:80:f3:14:81:
                    68:3f:49:7f:8e:76:a0:33:2a:77:ba:13:55:3e:b8:
                    c3:7b:ea:fc:2f:3f:0f:bf:e4:51:0e:74:ac:b1:bc:
                    12:da:aa:5e:f5:33:2d:a4:c8:7e:e1:ab:96:50:68:
                    47:9b:1d:06:12:77:cc:98:aa:0d:d3:93:dc:95:ed:
                    7b:55:0f:7d:70:10:c7:43:03:d9:1c:fd:c5:21:c4:
                    84:ed:2d:b6:05:10:07:aa:6a:88:21:04:4e:f7:8d:
                    ec:81:72:bb:b3:55:02:12:88:06:31:b2:dd:1d:fc:
                    8d:f2:c5:8e:0f:4d:57:f3:22:cf:59:65:42:06:e0:
                    2d:82:c8:0b:e2:ff:ed:1a:ee:48:2c:a5:a1:5a:38:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AB:03:D0:78:BC:E9:D9:21:BB:23:31:F8:EA:C6:97:2C:1C:C7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0/6d268863-e49e-32db-9f78-8bd33f7daf73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0/c4891785-f390-4bf2-84b1-5c5c4871eac0.crl

            X509v3 Authority Key Identifier:
                keyid:86:4E:99:50:A8:9A:AC:CE:7A:CD:72:40:F0:0B:D0:07:A1:CA:F6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4891785-f390-4bf2-84b1-5c5c4871eac0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:7c:1a:5a:a2:78:44:c2:92:0f:7f:74:02:cd:7e:f3:77:
         ff:fc:a9:09:18:60:c5:f5:99:73:4a:16:86:aa:e9:49:23:bd:
         ce:0a:6b:8b:17:7a:6c:da:4a:63:4c:bd:91:fc:38:14:65:05:
         0f:b6:85:82:7b:29:13:6d:97:47:3f:d7:90:c6:da:92:7c:fa:
         92:97:b5:2d:1c:1e:40:e7:1b:1e:b2:ad:16:ca:15:94:f9:34:
         d9:b1:70:fe:52:de:60:df:7b:28:ec:1d:04:ba:7d:d5:d1:6e:
         cd:17:14:40:96:b9:7b:b5:ff:c4:e6:57:35:30:43:24:dd:59:
         ab:3c:4c:28:1e:ed:54:e6:70:c8:88:96:4f:de:c0:27:bb:b6:
         46:61:0a:4a:31:04:c0:35:d4:b5:ee:7f:48:08:1f:d9:8e:8d:
         f2:d3:2e:cd:b2:f3:40:b6:b4:d9:43:ea:8c:00:d5:56:b7:2d:
         4b:39:39:7e:98:5f:52:cc:27:d3:60:dc:e3:18:a4:aa:bc:40:
         dd:a9:43:ba:e9:c1:19:72:59:02:e4:b3:03:e5:b5:4b:fb:27:
         10:e9:38:1c:84:cd:8d:70:11:41:c0:2d:27:57:ef:fe:1e:aa:
         13:87:a7:b5:03:44:e3:ab:99:ef:0c:7f:c2:29:86:b8:0d:aa:
         f7:5f:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:55:20 2026 by rpki-client