Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa
File:                     c601183c-c50b-3996-a472-3386d4586ad1.roa (raw, json)
Hash identifier:          rt4MFj83E4DaSnMIDWuefT+YKC8ELI5EJJQRYZ5Q8io=
Subject key identifier:   37:56:62:7D:1A:32:02:6B:A6:E2:89:3D:2B:00:78:6E:D3:82:37:DC
Certificate issuer:       /CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
Certificate serial:       010D0C9F4328584F1CC7A03D10543F1BECE98040
Authority key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     54070
IP address blocks:        205.211.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a0:3d:10:54:3f:1b:ec:e9:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=a6b326c8-30f9-498a-9ecf-ea86b9c57b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:3d:d3:3a:c5:84:eb:52:18:29:82:1d:f9:
                    5b:cc:30:a6:79:dd:58:0c:7b:88:b0:8a:11:af:3c:
                    fd:5e:fa:d1:bc:ae:29:e3:bc:37:b0:8d:48:f9:d7:
                    a6:10:8b:34:23:2b:20:31:4c:f9:65:07:c6:f9:bd:
                    11:39:b6:6b:c5:83:81:36:40:f0:dd:70:4a:8f:f4:
                    8a:88:b0:b5:18:54:36:ef:ee:ec:3f:16:02:2e:f5:
                    8c:e1:ea:3e:fa:c0:b1:7a:3e:12:82:e7:53:99:2c:
                    d7:21:c3:45:e2:0c:72:46:8d:7c:82:29:3c:e1:bc:
                    bd:cf:c0:29:ae:a8:b1:87:92:27:87:f0:a7:82:e8:
                    8b:8e:ab:74:9b:14:da:1f:00:2f:61:e2:a7:6d:7a:
                    2b:2a:26:15:fc:33:cf:da:4b:f1:b1:87:77:4b:4d:
                    b5:3f:bb:f0:f9:a9:f0:d0:ef:2f:32:95:1b:19:4a:
                    9f:cb:b3:e5:60:9f:71:6f:61:72:ea:e0:d6:ff:d5:
                    fd:df:9c:e4:27:6a:59:cf:fb:57:ad:0b:ba:ee:67:
                    92:07:b1:57:20:fa:bb:64:52:a2:75:91:a1:d4:59:
                    c2:91:2a:85:8a:e1:70:fb:76:e8:fc:a1:6f:f2:b8:
                    11:31:8a:55:73:9a:46:79:d0:3f:78:92:36:c8:9d:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:62:7D:1A:32:02:6B:A6:E2:89:3D:2B:00:78:6E:D3:82:37:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c601183c-c50b-3996-a472-3386d4586ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl

            X509v3 Authority Key Identifier:
                keyid:67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4f:8d:0b:f5:05:52:e7:22:39:b4:4f:6b:92:0f:79:ef:b6:
         de:17:e1:5a:67:ed:5f:c9:f0:ca:77:37:32:e7:d6:ee:b2:06:
         99:b0:c2:a1:a4:2c:1b:52:1f:94:b9:89:7b:71:a1:3a:92:5b:
         05:08:a6:16:67:21:c8:03:c8:76:18:9f:20:99:6d:2d:cc:93:
         8e:f8:27:21:0a:c1:75:eb:fa:e4:61:0b:3b:9a:98:bb:7a:4f:
         aa:ed:a8:94:c1:1a:a3:40:74:6c:81:df:12:57:48:6a:2e:55:
         8c:80:24:59:66:5e:54:36:02:f2:56:e9:8d:46:45:44:d3:8f:
         ac:46:c2:0c:ea:e1:a4:66:54:c5:f5:a9:b2:f9:6f:af:86:99:
         9e:5f:b7:5a:48:10:b1:68:d3:c4:13:6a:97:aa:ec:4a:85:3c:
         8a:8a:a4:2a:e9:ed:f6:41:48:f2:60:8b:b0:ea:10:03:e8:24:
         10:6c:13:80:24:b8:02:21:e2:eb:70:6e:8f:78:93:30:7f:04:
         70:e9:18:c1:bf:1a:8b:b9:aa:74:c7:e8:b9:81:22:b0:9a:5b:
         d7:99:64:d3:60:0c:56:7c:31:73:22:6d:b9:17:89:4f:69:2e:
         0d:f8:02:6c:75:58:25:9e:bc:47:ec:48:01:7a:2f:c4:4f:4d:
         51:f1:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:51:43 2026 by rpki-client