Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f79cf700-a635-34fd-b580-98cdd803fab7.roa
File:                     f79cf700-a635-34fd-b580-98cdd803fab7.roa (raw, json)
Hash identifier:          aES6KjhgDWEcnMqA8LW6VPQ+gjcsDqVrv0PE7CezF+4=
Subject key identifier:   57:67:A7:EA:6E:F2:27:46:20:A4:01:AE:CE:5C:D6:7F:22:85:71:6C
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584F498A7E340DF3A4F53D19A480
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f79cf700-a635-34fd-b580-98cdd803fab7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32016
IP address blocks:        162.211.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:7e:34:0d:f3:a4:f5:3d:19:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=022e0ab6-52d9-4b38-abeb-1aa11214fa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:fc:fa:bc:38:28:f4:92:ae:04:5f:5f:56:
                    a0:1e:4d:46:68:4f:0d:f8:8b:43:3c:1b:6e:e5:7e:
                    21:ed:d0:9f:81:ea:93:d3:f6:e2:5d:68:68:7d:69:
                    06:32:6f:40:0b:f7:16:4f:20:89:57:4f:e3:97:a4:
                    32:42:1c:cf:39:73:40:75:bf:59:21:08:9e:f3:90:
                    e7:04:0e:de:f0:ed:28:1f:47:41:55:fa:e7:50:ea:
                    fe:3b:99:4d:83:87:16:a6:08:75:ee:a2:73:f8:a0:
                    a0:bc:5a:15:7c:dc:0e:3b:6d:e9:40:35:5f:4b:20:
                    8d:cb:1c:de:2e:99:31:19:c8:01:62:af:28:e4:e2:
                    ce:59:14:ac:c8:31:c8:4b:78:65:cd:7a:99:2f:de:
                    6e:de:3c:7a:17:1f:7d:7f:12:a4:f5:cc:25:99:67:
                    46:ed:81:88:b4:6b:e5:b1:a7:90:3a:32:fc:25:a3:
                    45:e9:9f:2d:57:25:4a:bc:cd:3e:9c:f3:f3:84:2e:
                    89:da:a7:d1:39:07:ad:ed:7c:79:81:16:fd:aa:df:
                    10:c0:40:44:9d:3a:da:84:e1:b7:84:d9:85:88:6a:
                    9c:1f:51:a6:51:47:22:c6:4d:6a:b4:1e:07:87:93:
                    3e:1e:19:a0:ed:67:08:b1:a1:c7:37:ef:fb:1f:92:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:67:A7:EA:6E:F2:27:46:20:A4:01:AE:CE:5C:D6:7F:22:85:71:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f79cf700-a635-34fd-b580-98cdd803fab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:02:b6:59:e0:99:8e:e2:90:b4:42:55:df:96:77:15:ac:18:
         6d:03:4e:b2:62:5b:e9:53:f0:33:5e:c4:ab:2d:9c:a1:2d:67:
         03:52:30:df:38:57:42:b6:f6:15:43:8f:1a:15:64:b0:09:fc:
         47:7d:de:80:62:d7:dc:43:da:24:c9:1b:3c:45:2d:d1:20:0f:
         eb:bb:1e:8c:c0:57:0e:c6:38:4f:a5:d5:91:1c:4b:47:ee:d3:
         56:9d:b4:87:f6:19:e7:76:71:fc:8d:69:25:41:9a:8a:63:fd:
         51:38:5b:4a:52:03:5a:a0:94:e6:f8:97:26:4a:9d:93:4b:79:
         d2:5c:87:be:2f:ae:7c:be:29:e6:d4:7a:54:a1:96:55:6a:5b:
         1b:71:11:cc:cd:43:38:74:0e:1e:6e:26:9e:df:97:ca:67:1c:
         1f:71:a1:df:09:a9:1e:76:03:1a:2c:ee:25:ac:fb:41:98:16:
         5a:54:30:22:df:31:f2:f7:56:8e:82:bf:93:3a:51:d8:ce:55:
         66:79:c5:0c:2c:b1:3a:b0:48:ea:1f:02:2d:ea:dd:a0:ee:dd:
         15:85:e8:02:98:9c:5c:78:61:49:52:4f:0a:2e:b9:e9:43:8f:
         02:54:5f:ae:dd:26:95:35:fc:d0:4a:9d:e0:d4:a0:86:1d:e6:
         2e:da:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:47:57 2026 by rpki-client