Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
File:                     da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json)
Hash identifier:          XX85jBNA3D+6XEnyjRqw8/76EfyPMsGW6Mw4R8Y0BKY=
Subject key identifier:   64:A2:8D:EE:96:61:07:94:13:7C:C3:6A:E6:89:0C:DE:C9:77:E9:45
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584F4975B440C12F17BB3AF33400
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     202013
IP address blocks:        198.161.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:b4:40:c1:2f:17:bb:3a:f3:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b1291dca-28e6-4851-8450-65824ba04850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:fd:76:75:fd:78:88:7e:16:c9:81:d0:ca:
                    b0:4f:40:93:8f:73:5c:f7:f0:ec:f0:f2:0e:f8:de:
                    09:49:61:e1:b5:3b:25:55:80:f1:33:23:ca:a1:36:
                    c3:63:ac:f1:43:33:e6:61:f3:a6:5e:f1:9a:0b:2b:
                    da:b5:13:9e:fb:62:5c:3a:d3:00:1e:15:0d:4a:2a:
                    64:0f:eb:02:ca:ab:ee:5c:65:6b:13:75:b7:d7:fa:
                    8f:c2:2c:32:f1:e7:c9:16:d3:d3:34:30:0f:76:f1:
                    c4:02:78:04:f8:eb:c7:82:7d:49:ad:84:a5:2f:d3:
                    8d:a7:c7:cb:10:e8:18:31:8c:b4:6a:0c:d4:6c:5f:
                    7c:0e:99:b8:a6:66:d4:02:a0:fa:4d:97:80:12:c2:
                    a0:28:e7:42:6a:73:03:3a:d3:22:15:fa:bd:ed:1f:
                    c2:f9:06:80:7d:9c:64:e7:f5:41:27:61:9e:2c:dd:
                    34:2e:d8:fb:5c:8d:a6:37:b3:e5:a9:e8:3b:78:11:
                    5d:a6:8f:8c:60:e7:a4:86:b6:01:6a:86:8e:fc:2c:
                    b8:3b:b0:b2:3a:c4:1f:84:3d:a2:04:b0:31:d1:fa:
                    e6:df:a9:b4:34:6a:73:e0:ef:75:0b:67:f0:be:bf:
                    9e:5b:2a:72:ec:09:46:38:95:fb:f9:ce:3f:2f:3b:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:8D:EE:96:61:07:94:13:7C:C3:6A:E6:89:0C:DE:C9:77:E9:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:53:76:b3:e8:2b:5b:12:d2:17:11:76:e7:8e:43:3a:35:
         d7:68:0f:00:59:c9:5a:77:ab:30:c0:cb:4d:64:b3:6e:78:df:
         7c:15:25:4b:c2:7d:da:c6:d3:52:01:71:1a:63:68:a2:16:9a:
         f5:c8:17:92:5d:ab:0b:a7:7b:c2:14:1a:09:14:f0:9d:fe:5e:
         74:f6:8b:2e:9d:43:c6:e1:2e:9b:46:a2:04:1b:03:b4:c6:b8:
         e8:be:ea:9b:d0:17:7a:39:c8:3b:d5:75:81:45:53:9a:f3:3d:
         ff:d1:86:29:46:01:db:b5:3d:81:25:00:26:e4:ea:33:b3:9d:
         72:d7:10:53:05:a6:e1:3e:cc:4b:33:f0:b3:ff:50:2c:f8:cf:
         4a:df:4a:64:d4:47:38:9b:78:f1:48:22:d5:de:b2:46:0b:2b:
         71:a0:67:46:2c:bb:61:dc:12:ee:5b:b6:75:94:01:23:92:ed:
         e8:30:54:1d:60:0d:16:ab:b0:e3:ba:b6:f8:61:25:23:9a:41:
         47:ba:3b:d4:8f:31:07:9d:17:7e:f8:b8:05:a5:45:3c:2c:e4:
         7e:95:85:6e:1e:2b:a8:be:ab:7a:5d:77:9c:bf:cc:18:7b:d6:
         83:cd:82:a4:43:ec:76:19:f4:fc:2b:18:b1:de:4a:4e:26:8f:
         36:65:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:58:35 2026 by rpki-client