Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/d73d5130-b175-3424-9613-7aa84a352c90.roa
File:                     d73d5130-b175-3424-9613-7aa84a352c90.roa (raw, json)
Hash identifier:          f2+bys7lUq6trvZTP2dB2SPqOkrO35MFDRAkKnU7YWM=
Subject key identifier:   72:63:3F:0A:6C:A9:FC:B1:92:D1:3F:1E:0B:1C:BE:62:B2:35:F0:9F
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584F4975A77813C67145834BEC00
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/d73d5130-b175-3424-9613-7aa84a352c90.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54103
IP address blocks:        206.246.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:a7:78:13:c6:71:45:83:4b:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2ad00f0f-5051-4bb8-b21e-460253a6e4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:01:4a:dd:63:7f:47:7e:05:e0:92:d1:1f:
                    55:72:63:97:c6:ec:c7:bc:05:2a:b8:6c:de:f3:62:
                    90:b7:0c:17:7b:88:07:6c:7a:01:d9:06:e2:17:d4:
                    95:26:ef:92:87:85:68:28:6d:7e:58:8f:8f:91:0d:
                    83:c6:1b:d0:3b:5d:5b:dd:59:81:15:7f:8b:45:a1:
                    e9:df:69:cb:7d:14:3a:ab:ff:db:bc:72:40:0b:81:
                    06:bf:f2:aa:5f:eb:4a:51:95:f4:64:53:f3:6f:18:
                    31:66:bb:22:fc:ca:5b:19:1e:0d:d3:f3:7e:d5:5c:
                    a8:29:f0:76:55:4c:86:4d:1b:7b:f2:ba:c5:4c:55:
                    c2:5d:dd:09:e2:6c:0b:a1:c5:8a:2b:e7:34:27:18:
                    33:c4:f0:a5:35:da:31:b1:b4:e8:cc:55:7c:45:89:
                    33:bb:6a:d8:b6:92:40:3a:91:8a:df:75:e4:9d:1f:
                    16:79:0c:04:1e:56:8a:8f:16:11:2c:44:f7:7d:7c:
                    4c:0e:3a:6d:0f:35:43:52:4f:22:8d:7c:00:3b:36:
                    3f:56:35:d2:c5:98:e0:5e:0a:33:9b:33:b8:87:4a:
                    85:ae:34:b6:45:8b:60:ef:39:35:01:ed:99:f1:4e:
                    f6:45:4d:3f:e0:5f:4b:f7:2b:cd:2e:99:66:7a:e0:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:3F:0A:6C:A9:FC:B1:92:D1:3F:1E:0B:1C:BE:62:B2:35:F0:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/d73d5130-b175-3424-9613-7aa84a352c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:1b:6d:2c:5e:25:72:75:dd:29:8f:76:37:0b:41:13:e8:
         80:de:13:98:ad:04:e0:8d:b8:58:05:22:d0:c7:d0:2c:85:b0:
         9a:04:41:41:b2:2e:c1:ef:76:48:a3:fe:e0:b2:f9:c3:6d:f6:
         3f:87:95:e3:a0:2f:3b:01:2e:bc:6f:eb:8c:91:36:4a:a5:43:
         85:7c:6f:f4:d5:3d:38:00:6d:65:3b:47:a9:13:3c:db:36:28:
         29:9e:24:7b:a7:08:d6:03:9a:c6:fe:40:41:fa:97:e2:30:9d:
         92:29:31:34:86:02:33:d1:10:ca:75:15:a1:a9:90:9a:42:ee:
         17:a5:c9:fe:a2:1c:50:2c:1b:51:79:e5:6d:84:f6:3c:e5:84:
         a4:b8:b0:26:59:04:ad:36:13:9e:09:a5:6b:29:e9:8b:e6:ff:
         13:e9:73:b9:03:51:7b:3c:0f:bc:c7:41:ae:aa:37:83:25:d5:
         f1:00:b8:34:1f:e7:a1:a9:ad:89:4b:0f:02:1b:80:9b:ad:5b:
         0c:59:d2:4f:18:0e:5e:e0:d7:7f:92:95:8f:3c:d4:82:46:e2:
         bb:b1:8d:0d:3f:1b:2c:11:a4:7a:75:1b:bb:e2:c2:e1:51:fe:
         d3:68:02:17:cc:f0:9c:2c:e3:ad:22:33:9f:bc:aa:7d:d3:f6:
         b7:e0:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:39:34 2026 by rpki-client