Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
File:                     36766eed-ee8a-3083-8823-23777bfe75b3.roa (raw, json)
Hash identifier:          iz4VUeeNrvJhwPrEKH4qKCA3TTXsdaqh/QwBCijj5u8=
Subject key identifier:   21:8C:68:AB:68:1F:FC:3E:A8:AE:4D:9E:03:CD:00:FD:78:75:EA:E9
Certificate issuer:       /CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Certificate serial:       010D0C9F4328584EE7BCA15A7097D893A28C3F80
Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        209.160.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a1:5a:70:97:d8:93:a2:8c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=9474a7d7-49e7-4182-9aee-02bc461242f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:d7:c7:cc:be:4c:5e:ac:26:2e:23:c8:fa:
                    62:2b:09:22:70:fb:93:56:f3:94:7f:53:30:39:dc:
                    3f:b3:11:09:c0:38:dc:35:a9:c8:d9:8e:95:06:0c:
                    08:ca:b7:df:68:2a:94:3e:39:1d:35:4c:04:81:a0:
                    d1:b7:a9:8d:64:17:37:d1:7c:bd:c2:11:fb:9e:b0:
                    e1:33:c4:39:f9:78:29:6f:5b:96:3c:dc:7c:81:e7:
                    93:e3:17:ac:dd:63:38:e5:99:c2:af:8e:22:9d:5d:
                    7d:87:6a:49:10:dc:76:65:f3:34:b9:b0:31:68:f7:
                    ea:d8:ec:0b:9f:e6:c7:28:b2:36:5e:03:f2:5d:c8:
                    d2:8c:4a:27:a2:dc:1e:b4:c8:ef:92:06:cf:ae:fd:
                    ff:c7:1f:75:9c:dd:4a:ff:cb:ef:e0:87:58:35:d2:
                    d2:92:e6:67:c9:cb:8d:43:98:07:0a:e0:56:11:fd:
                    76:3e:fc:e2:a8:55:96:f6:db:7f:81:e4:b3:6c:06:
                    a8:85:79:b8:67:97:ce:ec:e1:e8:98:d5:31:90:c6:
                    31:a5:ea:bb:bc:1b:86:46:ec:68:39:7c:d9:6b:e0:
                    2b:02:64:77:c4:5e:d5:2d:c6:7f:00:86:57:f0:95:
                    9f:d4:33:c1:44:b6:55:09:e5:e8:3d:78:1a:fb:04:
                    2c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8C:68:AB:68:1F:FC:3E:A8:AE:4D:9E:03:CD:00:FD:78:75:EA:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl

            X509v3 Authority Key Identifier:
                keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8d:0c:c3:a9:94:3e:b2:14:82:9d:fc:43:95:d3:96:28:29:
         f1:88:c0:90:83:08:59:bf:ad:82:b7:ef:73:f6:fd:64:61:f8:
         95:21:57:1a:94:32:14:4a:46:53:45:1f:5c:b5:be:af:18:3e:
         75:69:47:b5:4a:10:18:55:91:4c:13:df:43:fc:5f:19:47:34:
         a2:c5:c8:1b:c7:52:c4:07:88:dc:53:0c:ec:b5:d6:6d:35:ba:
         b7:a4:11:c8:85:20:98:0b:85:51:08:dd:d2:75:e7:46:75:58:
         4a:22:04:de:e7:bb:79:70:d6:3a:ca:24:28:88:be:a2:d2:a1:
         07:62:a6:9e:04:b5:e2:be:e9:d5:78:f2:34:3d:05:08:cb:9d:
         1e:2f:0a:cb:1f:67:c6:6a:2f:0e:4c:05:8f:fb:0f:0b:62:94:
         ea:07:06:75:3c:6a:d1:1a:07:90:f5:bf:eb:f7:73:6d:b0:dd:
         21:52:5b:1a:ae:9c:31:2b:67:f5:83:69:84:78:ef:a9:1a:4d:
         a3:73:14:35:cd:3e:c8:85:34:33:d9:83:92:6d:ae:e6:12:6b:
         c2:b6:c4:f3:8b:e6:e0:cc:b9:dd:12:26:4d:74:fd:b1:f4:e9:
         23:4b:2b:a3:8c:7c:5d:7c:fc:5e:84:dd:a7:4c:d0:13:26:92:
         e4:31:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:45:35 2026 by rpki-client