Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/d6b8b633-b19a-344a-88b6-d7dad8651a6f.roa
File:                     d6b8b633-b19a-344a-88b6-d7dad8651a6f.roa (raw, json)
Hash identifier:          ottuGGjfoKLyFi6lTn4JyftUDSd/h4eB8nH9K6IFMKM=
Subject key identifier:   3B:15:65:1E:CB:D6:BA:A1:08:5E:27:92:E5:4B:D2:32:D9:A1:19:A1
Certificate issuer:       /CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
Certificate serial:       010D0C9F4328584F498AAAEED8A4DE270D8BD900
Authority key identifier: 02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/d6b8b633-b19a-344a-88b6-d7dad8651a6f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        64.72.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:aa:ee:d8:a4:de:27:0d:8b:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9e8b1b50-3424-43c6-9f77-5cf0263d6ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:1a:31:f5:d7:5a:a1:99:63:3c:7d:cc:2e:
                    b5:07:3b:5c:f9:20:0b:4c:f0:db:0b:18:ca:00:e3:
                    32:93:bd:ad:72:1e:2e:c6:0c:4a:00:eb:b8:96:c4:
                    8b:d4:1f:dd:bc:57:8b:b3:ad:e3:e9:43:5a:7e:d6:
                    bc:f4:b2:7d:a7:95:aa:7f:fb:9e:43:4b:72:e3:4a:
                    b0:4c:65:76:6e:4a:6a:45:83:65:0b:f5:de:46:f1:
                    65:6d:f2:59:e6:9d:c7:95:b3:4f:18:63:24:f2:cc:
                    d3:f9:60:81:6f:44:73:6a:08:3f:11:77:63:61:ce:
                    c0:10:68:6f:9c:41:a0:9a:ce:d3:d3:fa:67:c7:52:
                    f6:c8:0a:b9:4f:7e:b9:e5:46:bf:9a:96:67:79:18:
                    14:aa:4e:8a:83:a4:a2:0b:40:9d:dc:b1:e8:8e:6c:
                    d5:6f:24:3d:52:d8:35:e1:72:b9:7b:70:ba:73:f8:
                    a4:86:2b:c6:a6:97:50:3b:e3:29:76:f1:31:45:15:
                    f4:08:46:ea:38:89:59:df:9b:b2:be:b3:30:54:1c:
                    ac:c5:32:f5:a1:7b:8b:c2:67:2b:e5:eb:56:a3:d9:
                    03:c7:3a:43:c2:14:c1:56:1f:22:b7:63:c7:89:40:
                    b4:95:24:36:9b:47:b9:18:64:f4:73:ae:93:0c:7c:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:65:1E:CB:D6:BA:A1:08:5E:27:92:E5:4B:D2:32:D9:A1:19:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/d6b8b633-b19a-344a-88b6-d7dad8651a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl

            X509v3 Authority Key Identifier:
                keyid:02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f0:43:41:1d:64:0b:aa:35:fd:a7:e4:2f:69:81:14:88:4b:
         2d:2c:bf:9e:a4:4b:fc:37:50:29:de:1d:ad:38:49:08:c7:c9:
         29:0c:2d:dc:8a:2f:9f:d8:b0:1a:27:70:ae:60:dc:a1:84:da:
         6f:b8:eb:ec:91:5c:14:7d:80:8e:cf:fc:91:b6:54:8b:fd:e4:
         82:75:62:d8:6b:65:d4:dc:ea:ef:dd:d6:a2:0f:f0:65:af:58:
         3a:df:a6:43:d3:dd:4c:e6:74:0b:76:dd:bc:f5:15:a8:33:ba:
         30:27:5b:57:a9:0a:45:26:e0:5d:cd:c5:42:8c:b5:43:87:7f:
         32:cb:05:ca:64:f1:5c:e0:bc:69:09:50:b5:db:90:98:f2:3a:
         30:25:79:75:ac:cc:5c:ed:07:a8:c9:8e:d7:26:c9:6a:b6:ad:
         c7:30:5b:3c:44:c2:08:1c:a6:f2:43:9e:f5:07:9e:04:57:2e:
         93:68:1a:cc:c5:62:c9:9d:54:16:0c:6d:7d:11:4c:88:a8:9b:
         57:67:8b:40:97:d3:6c:40:fa:2e:9d:10:36:39:d7:16:c5:44:
         32:77:2e:ed:3a:8c:34:9f:a1:72:18:b5:41:0b:a0:c1:b1:98:
         27:b4:72:16:c4:b8:22:9a:c1:21:20:3a:d9:17:99:7a:ab:10:
         fd:1e:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:27:28 2026 by rpki-client