Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa
File:                     86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa (raw, json)
Hash identifier:          Zyxigk1ENBt6Ud2cha3Nn8uNct1KNHudq9vznwociEI=
Subject key identifier:   8D:88:8B:4F:47:27:94:EA:5D:94:21:91:FE:2D:0C:30:B3:8B:81:D8
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584F024228C0FCD84C8D078D7800
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     19107
IP address blocks:        216.234.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:28:c0:fc:d8:4c:8d:07:8d:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=ba9a22ed-75a2-4176-974e-57e9224dcd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a1:4c:27:bc:86:0d:f3:d8:9c:28:1b:e4:a9:
                    75:5f:9a:d9:3a:e1:68:80:39:6d:3b:43:ea:30:e4:
                    cb:b8:6a:d4:02:c1:4e:36:52:f6:a2:c4:89:17:66:
                    ae:1a:51:44:b1:9a:87:a5:fe:79:35:7c:d6:5e:c3:
                    41:b3:0d:2e:a1:2e:fc:17:a2:c3:21:11:63:b9:96:
                    0a:5a:1e:bc:3e:40:8e:a4:51:67:b3:5c:f3:cf:12:
                    e7:4c:19:94:06:e8:8b:4f:0d:1c:e0:92:dd:ca:10:
                    44:29:79:86:65:bb:0a:b8:e4:69:73:9b:86:88:48:
                    91:2f:e1:89:9d:25:17:c8:7f:c6:f8:e1:85:2a:3f:
                    b4:34:5c:2f:b1:28:9d:07:11:a6:c4:b2:e3:0e:bf:
                    75:38:39:35:09:de:bf:b1:5a:8a:b6:36:ec:1d:37:
                    46:e6:86:bd:df:bd:c2:5c:20:a7:d6:77:41:ed:a4:
                    40:3c:34:0a:27:bd:92:c8:4a:a0:25:e2:49:48:f3:
                    ff:05:d8:4a:68:bc:53:c0:c9:55:32:e6:cc:1b:19:
                    75:c4:7e:6b:14:fc:86:27:2f:cf:81:7d:2d:97:74:
                    aa:d4:9b:cc:94:d5:a8:51:f3:3b:c5:68:a1:27:52:
                    5c:e5:e8:30:1a:15:97:96:04:6e:74:c4:df:dc:f1:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:88:8B:4F:47:27:94:EA:5D:94:21:91:FE:2D:0C:30:B3:8B:81:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e2:21:89:fd:d1:6a:29:01:02:0c:92:4f:c2:a6:a4:70:26:
         f4:04:3a:5b:c4:e1:65:70:d5:fc:1e:bd:4c:d7:5b:d8:e8:79:
         f6:30:5a:b4:34:f4:42:11:71:32:79:0a:bd:50:9c:cb:a1:b4:
         c7:11:f0:6f:13:2d:3a:4c:1b:b5:86:e8:b4:b6:f4:bc:10:eb:
         92:7c:f5:34:b0:71:1a:61:cf:f2:82:b1:f1:be:8e:36:bd:6b:
         3f:5a:46:2f:d6:9a:23:7f:62:42:6e:11:80:6c:51:f7:3b:07:
         5e:e5:68:80:59:e8:f1:57:e3:44:38:06:40:af:4c:64:1e:b3:
         b6:d7:2a:f1:db:14:90:3a:65:ff:61:1c:b8:12:d7:4c:cf:25:
         8f:af:16:2c:ef:cb:4d:a8:83:ee:b2:61:4d:3e:cc:15:18:c4:
         43:60:09:cf:ed:fd:81:6f:fe:9e:05:99:4e:aa:7e:6b:e5:ef:
         7e:2a:60:90:8e:77:f9:7a:f8:27:5a:20:ed:3e:b6:2b:30:eb:
         cb:37:8a:b2:bd:7d:69:98:7e:37:da:a8:4d:f7:a5:b8:ef:1a:
         6c:ab:4b:b7:bf:92:b4:ec:52:5c:47:45:d4:4d:32:2b:a4:ce:
         69:e2:13:65:22:59:dd:4b:f0:71:fd:9e:2b:da:86:b3:31:0d:
         9d:ae:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:27:29 2026 by rpki-client