Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa
File:                     845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa (raw, json)
Hash identifier:          UAgTQ354geifHJjQP6CL6ChPnA2RqsGxgV3TC9NyiOM=
Subject key identifier:   AF:62:22:1A:31:2D:8D:5D:86:C6:18:22:BF:38:B9:CB:C0:3E:1C:4C
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584F4986AE7D32E5EE9190E2EAC0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     376
IP address blocks:        206.167.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:ae:7d:32:e5:ee:91:90:e2:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9d480393-0a0b-4473-8661-de53561eb91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:83:55:a3:c2:e7:69:e3:9a:b5:2a:d3:69:
                    d6:98:09:7a:ed:cf:f0:aa:5e:69:f1:e3:d5:b3:eb:
                    49:b0:e0:fc:77:fa:b0:70:fc:f0:f8:c3:00:27:bc:
                    56:b5:b2:07:1f:aa:7f:41:46:6a:dc:5f:12:89:6c:
                    6f:11:29:82:44:69:5b:7e:e8:2d:0c:2e:a7:c2:26:
                    1c:fb:01:01:8a:88:6c:9e:cf:1b:92:96:8d:6e:e9:
                    8c:d2:b8:d7:50:bf:f5:67:3e:5a:91:be:99:be:99:
                    34:1a:d6:18:9b:96:40:11:bd:11:f5:ec:81:f5:34:
                    05:43:f3:95:e9:97:87:ad:ee:e7:f4:59:87:20:02:
                    98:36:ef:fe:8d:cf:88:09:6f:ee:04:26:6c:eb:0d:
                    9b:da:d0:58:7a:d9:46:33:3f:77:e9:36:e0:9e:6e:
                    c4:4c:69:90:26:62:76:3b:d7:93:d4:2e:9f:92:a3:
                    67:6d:5e:39:ca:20:9a:48:5c:1d:a7:d3:de:61:a9:
                    31:dc:7e:0a:12:11:3d:a7:fb:c9:23:83:3b:fd:8c:
                    94:4c:49:2a:4b:d2:3c:ea:d9:3d:dd:99:77:8a:f2:
                    9a:7f:c0:df:5f:29:69:81:2b:58:05:7e:74:86:b3:
                    73:87:db:e8:f3:25:3f:c8:bd:8e:62:f7:c1:9d:c6:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:62:22:1A:31:2D:8D:5D:86:C6:18:22:BF:38:B9:CB:C0:3E:1C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:31:af:fa:eb:ae:fa:91:f7:77:fb:18:5d:5f:c6:c8:b6:b8:
         c9:aa:a0:7c:82:9e:1e:48:03:86:e5:30:2e:5b:ac:7e:0e:01:
         72:19:d5:33:84:d7:cd:c4:eb:c3:9e:40:7f:66:5c:d1:a5:8c:
         36:a8:18:6c:c0:7d:19:fb:cf:93:2a:d9:3a:2f:27:56:4f:83:
         c7:2e:59:5a:e8:e0:95:ee:fc:15:18:3c:77:6c:8e:3b:95:8c:
         d9:cb:22:92:ce:13:5e:78:e3:21:7e:36:e1:64:36:76:bf:08:
         80:0c:41:42:39:a7:95:ab:ae:f3:f1:8f:be:e1:40:7f:46:7f:
         8b:ad:b7:90:ba:d6:1b:4d:a1:27:ff:cb:73:3e:1f:14:7e:fd:
         61:0c:77:d0:0b:9e:18:07:ce:b5:03:ef:e2:9f:bc:46:f1:6a:
         dc:04:8d:45:85:35:c0:e7:6f:ef:b1:c7:e0:d8:de:a4:7a:7c:
         ca:fd:f3:b5:08:28:b1:a3:54:e3:bf:66:8e:46:e9:bf:7b:63:
         54:ab:28:da:ca:dd:82:1f:3e:ec:8b:db:7d:56:1f:99:ab:6d:
         d7:20:df:36:e7:cf:17:40:a1:94:1b:63:64:45:cf:57:be:2a:
         a4:91:a0:37:60:77:a8:9f:51:5b:75:5e:75:d1:45:84:4b:e6:
         d2:7a:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:22 2026 by rpki-client