Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/17341178-41be-3c9f-91bd-f081430c9015.roa
File:                     17341178-41be-3c9f-91bd-f081430c9015.roa (raw, json)
Hash identifier:          8oq5cMKKc2OKcBXKVEgFkk5wc+HEP+1dHsI9h33fspk=
Subject key identifier:   65:DA:E4:4C:06:29:B5:B0:8B:F5:A3:6C:67:CC:BE:8C:FC:52:E6:28
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584F02422EC37BC189225193AE00
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/17341178-41be-3c9f-91bd-f081430c9015.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     19107
IP address blocks:        216.234.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2e:c3:7b:c1:89:22:51:93:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=5681eaeb-060c-496d-9311-51b72f26b92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:7c:66:f1:87:cd:3f:2a:27:0b:87:f9:3c:
                    8b:c5:d0:e6:bb:a8:92:d3:67:5a:a2:de:13:d5:b3:
                    f6:3d:fa:ea:d7:20:c2:98:a7:b4:9a:74:c1:0a:f2:
                    dd:81:06:da:6d:b8:93:77:42:09:33:3a:2f:c9:66:
                    93:7b:f5:e0:15:7d:05:bb:7d:cd:35:77:90:3e:66:
                    10:a7:de:bd:2e:43:35:41:5f:9a:65:d3:74:54:ec:
                    ab:de:e5:c5:0d:73:51:39:21:fa:ae:15:f7:6e:01:
                    e1:e3:23:34:b9:13:fa:a9:45:e1:a4:ba:c6:a4:5e:
                    01:0e:dc:ab:e8:16:ed:98:9d:39:66:16:e8:ab:27:
                    65:ad:a4:37:35:88:02:2b:9f:b7:ff:f0:bf:79:27:
                    38:e7:0d:1e:04:3f:7f:ae:9f:f1:87:13:42:a6:f1:
                    23:86:41:d3:1c:2c:e3:30:d1:3b:00:06:94:b2:a4:
                    f9:e9:90:07:35:a7:b9:bc:f6:03:95:37:af:b8:52:
                    fe:77:8e:9d:3a:c3:70:07:8b:12:3e:e6:cc:20:a6:
                    46:a0:0f:34:ff:ba:52:ba:dd:4c:db:18:aa:6b:1f:
                    3d:68:50:8b:44:2d:d4:3e:0b:b7:2f:ce:d6:d4:d2:
                    b8:3f:9c:de:8f:0d:00:b6:2c:12:ea:b4:70:81:8d:
                    fd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:E4:4C:06:29:B5:B0:8B:F5:A3:6C:67:CC:BE:8C:FC:52:E6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/17341178-41be-3c9f-91bd-f081430c9015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:db:7a:0f:9a:73:06:04:0e:dc:98:66:be:4e:a2:9b:17:ca:
         62:64:87:4d:c2:7f:a1:12:1a:40:c6:6c:d4:5b:69:e3:c4:2a:
         52:ca:c7:d3:22:7f:8e:ba:5d:fe:f1:bc:8d:93:5b:e5:88:39:
         02:65:3c:a1:c1:34:85:94:91:9b:0c:f0:4e:47:fe:8b:b1:12:
         bd:f5:c3:48:5e:80:01:bd:5f:dc:00:7c:2c:9e:44:de:04:db:
         68:ae:31:55:1d:6c:1d:87:9c:32:9d:b0:8c:6f:0a:d5:73:2e:
         ec:88:8c:50:39:20:70:dd:15:be:ba:a9:d9:d8:ea:a1:21:4e:
         ab:99:9b:e5:07:f4:c3:59:3c:18:6c:a1:ac:0e:16:a3:c5:a8:
         09:4e:d8:6c:fa:83:d8:6f:c7:ac:29:22:4a:e2:c9:75:82:7c:
         19:de:cf:65:3f:33:ab:47:9b:99:1f:c4:32:33:67:2a:0a:a0:
         dd:31:7b:75:48:9a:3d:fc:6f:72:45:8a:cf:81:5f:8c:6a:8d:
         c4:d4:bc:38:71:fe:50:bd:15:79:53:bf:db:53:d8:30:2a:e7:
         e2:59:32:2a:ba:3b:21:5a:6c:d6:fc:fb:7c:b0:83:e6:34:b2:
         e7:d9:22:c3:f5:7d:a0:a0:cd:eb:98:8c:fc:40:18:7c:e5:25:
         4e:62:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:32:35 2026 by rpki-client