Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa
File:                     4f616f41-a307-318d-bfe2-bea18e4babef.roa (raw, json)
Hash identifier:          /KHF5tAuXgB/qfc5rguMNJjhks12JvNuz57/4Pven0g=
Subject key identifier:   56:F2:AD:78:F9:B2:A1:55:06:C3:34:9E:5E:BA:28:B9:64:8B:50:0B
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F4328584F498709BABA2EABA97D49B000
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26037
IP address blocks:        204.209.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:09:ba:ba:2e:ab:a9:7d:49:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ec0cf8f7-0513-4ec5-96f2-dc51a160907a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:75:95:3b:45:a5:5b:90:0f:16:07:5b:de:
                    f8:f8:99:e8:14:b1:95:6b:11:ad:c7:af:e2:89:5a:
                    2d:86:3b:90:a5:1c:78:4e:32:4b:97:96:18:d6:6a:
                    90:1c:c2:74:b8:29:e7:44:7b:7c:33:d9:f1:74:13:
                    bf:05:d6:9d:17:21:38:bd:fa:78:5d:29:39:9a:4f:
                    30:d8:21:ef:52:ae:28:b9:29:13:9e:23:ac:40:6e:
                    25:bf:cd:13:d1:49:d3:6a:90:70:ac:d4:27:0c:ea:
                    42:e4:32:41:db:39:16:bd:9a:1f:94:03:62:d3:a5:
                    ed:bb:87:3f:41:f3:53:4f:5e:65:9d:a6:52:b0:87:
                    44:c6:b3:14:b2:11:a1:26:06:74:87:ca:67:2a:97:
                    24:4e:0c:a8:7d:36:72:c5:12:f6:15:8d:fb:88:9d:
                    7f:70:fb:51:00:6e:b0:0f:e1:80:63:9a:83:52:ad:
                    0e:94:dd:61:a8:0c:58:d2:7e:38:16:c5:0c:31:a4:
                    de:3a:d9:76:c6:6f:51:5e:6b:27:61:f5:35:d3:6e:
                    6c:bb:7b:8a:a1:dc:20:3a:dd:de:88:c6:90:79:27:
                    2d:5f:d1:db:e6:8f:c7:85:14:d3:2b:21:a8:63:a2:
                    19:07:c6:de:91:c4:ff:d9:f5:2d:4c:91:8b:fd:23:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F2:AD:78:F9:B2:A1:55:06:C3:34:9E:5E:BA:28:B9:64:8B:50:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:48:a2:e4:5c:88:c4:ad:01:8b:4e:d8:8a:02:87:41:e1:22:
         1e:71:92:d7:ec:61:8b:72:40:df:3c:37:cb:cd:05:41:d3:43:
         59:ca:29:09:f9:98:b9:0b:6c:ea:f3:1c:f5:45:3d:5c:53:ac:
         9b:5c:14:11:05:88:eb:c9:40:7b:97:2d:d3:55:7e:e9:87:4d:
         ab:41:66:8f:e5:6f:35:06:00:33:70:0d:cd:cd:e5:d2:45:c2:
         f2:bd:63:05:c1:3b:78:39:36:35:e5:ab:e5:c0:ec:a8:2c:00:
         f9:15:fb:87:f0:88:70:90:ca:be:50:77:54:74:90:82:52:8c:
         79:89:2f:c6:7c:5a:e2:f4:ef:81:f9:f9:ac:e9:03:6b:3e:22:
         9e:22:56:19:0b:f8:11:7b:0c:98:da:c3:2e:0f:50:eb:4e:88:
         ae:8a:c7:0d:f1:e3:64:5a:14:c5:27:47:e8:3b:d1:a3:ba:37:
         2a:64:71:94:3a:b7:90:7d:d7:f1:19:74:e6:2a:aa:8f:ad:97:
         fe:56:24:e8:01:ae:63:cb:40:c2:69:1d:7d:0a:a4:de:51:9d:
         f5:9f:10:93:85:75:c3:fc:ad:77:26:69:b7:18:28:0f:38:a0:
         ba:17:17:49:4b:d9:97:9d:d8:df:46:52:43:bd:85:13:d6:1f:
         e2:4d:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:30:49 2026 by rpki-client