Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/63de5df0-f8c5-3385-81c4-471e716b2463.roa
File:                     63de5df0-f8c5-3385-81c4-471e716b2463.roa (raw, json)
Hash identifier:          I/j0PfIfuyKHXnPEo4zLVHpY2UNgXHo68Bt++L0rCqk=
Subject key identifier:   99:FC:00:0A:EA:DC:0E:D7:31:3E:1A:B0:18:26:DB:E1:4E:D0:E2:FF
Certificate issuer:       /CN=67961c8b-389c-46be-9541-ceac7d38b9aa
Certificate serial:       010D0C9F4328584F3CE2AFF8C65367BF67425386
Authority key identifier: 29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/63de5df0-f8c5-3385-81c4-471e716b2463.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     46455
IP address blocks:        159.117.48.0/20 maxlen: 24
                          204.80.112.0/20 maxlen: 24
                          216.243.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:af:f8:c6:53:67:bf:67:42:53:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67961c8b-389c-46be-9541-ceac7d38b9aa
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=62799a84-2cfd-4224-8a75-f01ecd1b96b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:77:6f:c6:80:78:ca:59:62:35:25:aa:e4:
                    26:38:c4:c3:f2:92:d5:5d:d8:b2:6b:94:e3:49:e4:
                    76:bf:74:11:d5:1b:88:3b:05:9e:ed:d7:67:72:d2:
                    42:f4:b6:72:52:39:24:a8:4a:1a:71:46:cd:a8:fd:
                    97:69:21:0a:c2:bb:dc:56:03:f4:7c:93:cb:be:a4:
                    5d:35:69:59:ef:b5:f8:6d:ca:35:d2:1b:5f:3b:e7:
                    b2:f9:42:dd:8d:77:fa:ec:88:53:cd:13:3a:bd:3a:
                    45:cf:cc:b5:ba:a2:a3:a0:db:19:e6:09:bd:96:c1:
                    c7:65:e8:7f:8e:01:5d:16:d7:85:78:ba:00:e5:a2:
                    75:da:e0:74:b3:16:cd:9c:bf:20:53:ef:87:a1:11:
                    d6:44:f1:43:27:c4:56:14:34:22:82:9d:fd:a2:24:
                    b9:8e:d0:04:44:54:3f:7c:aa:07:c3:2a:d7:70:33:
                    21:b3:9a:37:de:a7:8b:9b:43:4e:dd:27:ad:11:9a:
                    3c:f5:73:48:94:91:70:31:f7:b8:3f:8f:2c:2a:80:
                    23:b0:fd:93:09:79:b3:d7:95:77:be:c8:63:9b:23:
                    55:d1:f7:aa:2f:ca:56:00:8f:44:d3:19:96:20:a3:
                    a0:0c:55:cf:af:de:c0:dd:02:13:eb:9d:39:24:de:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:00:0A:EA:DC:0E:D7:31:3E:1A:B0:18:26:DB:E1:4E:D0:E2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/63de5df0-f8c5-3385-81c4-471e716b2463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl

            X509v3 Authority Key Identifier:
                keyid:29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.117.48.0/20
                  204.80.112.0/20
                  216.243.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:87:1e:b1:0f:23:5d:3d:b1:10:73:21:78:90:8d:bf:31:
         8f:de:a6:c1:65:17:7d:ef:b2:9e:6a:72:95:1f:db:75:c3:b7:
         d9:b5:fa:ba:a7:4d:f6:50:d5:e3:2b:6e:9c:11:32:c7:b5:39:
         e6:02:7c:8d:6d:0e:4e:3b:ed:a9:4e:bd:01:40:e6:87:2d:a6:
         a0:f1:ca:b8:17:38:1f:99:0b:2a:35:6e:77:b1:10:ee:0b:b9:
         07:cb:0b:fe:12:da:29:fc:09:0a:62:c8:77:d5:ad:e7:71:ba:
         a1:73:04:8e:cd:4e:fe:d5:59:ba:04:27:50:0c:3c:42:4c:da:
         e4:45:75:c3:36:52:a3:e3:23:f3:00:be:07:36:54:f3:5a:de:
         4f:fa:b5:7b:ce:07:dc:c1:54:2a:1d:d9:69:a7:60:9f:8e:a9:
         d0:a0:c0:da:df:4b:10:7d:e6:51:3b:42:a8:61:23:da:d3:4c:
         7c:c8:89:62:09:50:c9:8d:12:2e:24:46:d7:54:b1:23:6a:81:
         48:2c:d8:98:7d:e2:ce:9f:1c:91:71:98:1b:a4:ea:32:e8:39:
         6a:3c:24:59:cb:66:04:fe:55:9b:9e:46:54:01:07:a3:99:c6:
         b5:6e:df:71:57:04:dc:1b:5c:2c:07:18:a8:83:04:ac:85:81:
         b1:07:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:29:59 2026 by rpki-client