Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/8cb25926-3915-3675-a6be-38b45b26bd5e.roa
File:                     8cb25926-3915-3675-a6be-38b45b26bd5e.roa (raw, json)
Hash identifier:          iKq+7Xyb8UhocA2ZLN2y+tlf+nQaqw0V20CM+9FNViA=
Subject key identifier:   FC:DF:CA:E4:07:52:DB:BD:2B:5F:48:EA:EA:91:E6:39:8A:61:DF:98
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584F5E62D968AA5F655548538D80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/8cb25926-3915-3675-a6be-38b45b26bd5e.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     219427
IP address blocks:        134.202.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d9:68:aa:5f:65:55:48:53:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=afb285e0-8d32-4430-957f-853ac829d6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:84:1f:c7:c0:5c:12:27:56:fb:9d:26:6c:
                    fd:2f:d7:aa:48:02:3a:06:75:cb:15:ec:ee:45:0a:
                    c6:2d:4d:29:b1:4f:10:be:fc:cd:1f:bc:7d:8a:84:
                    7b:38:77:13:81:cc:06:ef:93:f7:5e:98:85:0f:5f:
                    75:42:fa:7d:73:40:3c:ab:62:ab:b7:15:88:1f:5d:
                    e9:fd:c4:7d:f1:92:05:a8:d8:fe:4f:91:66:25:20:
                    73:23:d5:5d:3a:b4:c6:46:00:9d:48:b1:89:c4:f3:
                    72:d3:06:fc:f8:17:82:07:60:d6:7c:71:f8:dc:99:
                    3d:20:c1:40:ef:5f:b5:46:ea:7b:02:45:e8:e3:79:
                    99:b7:31:26:42:65:d4:57:88:a6:84:bb:29:46:9a:
                    60:65:74:9f:44:e8:4f:c7:75:cb:ea:a8:2c:c7:59:
                    29:f2:c3:9c:90:ee:8d:71:22:04:c1:f5:b2:20:a0:
                    ce:18:13:5a:ae:4f:f3:28:9d:e1:20:53:b2:c8:73:
                    0c:a1:ba:ac:cc:31:95:6c:3c:45:d8:33:e1:34:b3:
                    0f:fc:23:d8:69:7e:90:0a:c7:1e:b6:1a:21:f0:d2:
                    e5:e2:48:2a:a6:05:17:9d:0b:00:73:1b:68:0d:1e:
                    48:33:30:c9:8a:64:7c:c2:6c:b0:1d:68:1e:ed:cd:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DF:CA:E4:07:52:DB:BD:2B:5F:48:EA:EA:91:E6:39:8A:61:DF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/8cb25926-3915-3675-a6be-38b45b26bd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ce:40:60:9c:65:41:2c:16:88:05:95:99:d3:7c:b0:11:4e:
         60:81:28:cb:99:32:0a:1d:d2:53:59:87:94:51:8b:46:26:fb:
         2f:db:c4:a6:6a:7e:ab:a0:2b:76:24:e8:d0:33:bf:57:b9:32:
         3b:8f:c2:d2:29:b3:fc:4a:3f:f1:ca:3b:1a:59:be:85:cd:56:
         bf:cd:8f:12:57:1a:e1:d4:20:2f:31:08:f2:64:4b:9d:9f:31:
         41:2d:8c:0d:14:85:39:0c:79:2a:e5:66:d7:b6:0d:08:b2:43:
         5d:03:1f:05:83:f3:1a:d1:6e:33:51:b4:47:d6:fc:43:40:d5:
         9b:e7:bf:af:6f:e7:33:a9:ad:44:9e:85:6f:75:98:aa:30:9b:
         5d:30:f8:11:67:ed:aa:05:01:c9:3d:57:9f:21:2d:04:9e:10:
         5f:b2:9d:cf:67:52:80:04:70:e0:ac:d4:49:e5:54:50:15:33:
         92:28:e2:9c:0c:75:87:e4:d7:a7:2e:c1:2a:e6:30:a6:b7:fe:
         dc:38:4e:6b:2e:a8:70:61:a7:0f:1d:b4:9a:dc:6f:4a:3a:b8:
         ea:32:4c:0d:46:8b:fd:be:df:ac:94:01:3f:25:00:e3:9c:cd:
         aa:30:b6:24:cc:61:c4:89:f1:46:d4:4c:e7:d2:dc:fc:27:bf:
         e6:2a:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:55:44 2026 by rpki-client