Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/1df05a0a-dc3f-3274-ad38-b92a0f744678.roa
File:                     1df05a0a-dc3f-3274-ad38-b92a0f744678.roa (raw, json)
Hash identifier:          oEGnzEObHpKcC1u3+vztWu/XmBJcMp58FyQDo+3W2KM=
Subject key identifier:   AF:C8:6F:7C:8E:F5:C0:20:6C:8F:B1:3F:DC:DD:05:E4:82:29:AA:A2
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584F2ABD126E36BA5E93E8EC7040
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/1df05a0a-dc3f-3274-ad38-b92a0f744678.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     398705
IP address blocks:        167.94.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:12:6e:36:ba:5e:93:e8:ec:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=e1ae45d9-69a5-491c-9a16-a79e4a65297b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:83:6e:37:c3:39:af:e0:06:9f:e9:98:86:
                    21:d9:de:01:1e:fe:22:27:22:1f:a8:bd:52:ad:13:
                    40:c6:08:76:a7:2c:a5:a8:df:6b:13:48:3a:7d:b1:
                    96:8c:a5:4c:92:40:9a:68:e8:8f:17:c6:95:91:dc:
                    38:c4:f6:68:db:23:f1:92:b8:d6:44:33:ea:e3:e8:
                    d5:53:2c:ec:a2:ff:d4:31:5b:56:e5:30:f2:4b:d0:
                    c0:d8:76:79:87:5f:28:8f:d8:27:4f:40:ca:15:e0:
                    4e:45:71:57:8b:b9:cb:28:60:7d:51:0d:5e:b5:58:
                    a3:c0:92:fe:4c:a9:10:e5:6c:c3:80:68:c1:2e:66:
                    0f:2b:3d:96:42:f2:00:a4:7e:ad:59:ee:21:06:43:
                    7b:30:53:89:74:2b:9f:59:6c:5e:27:28:44:ff:c4:
                    65:56:93:9a:58:ba:60:11:39:6c:c2:56:b0:dc:5f:
                    d3:d9:b7:2e:ee:af:1f:0c:f0:aa:91:81:b1:54:0a:
                    da:33:ea:30:c9:6b:05:35:ce:1d:a5:b3:15:3d:45:
                    fd:f4:a7:53:73:5b:af:e6:f6:75:c0:57:f3:e3:98:
                    ad:e6:38:e3:b2:ae:23:02:12:e4:13:af:dc:91:d0:
                    39:2d:d8:65:40:f8:4e:fc:a7:bc:f5:1d:ec:94:53:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:6F:7C:8E:F5:C0:20:6C:8F:B1:3F:DC:DD:05:E4:82:29:AA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/1df05a0a-dc3f-3274-ad38-b92a0f744678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:cb:7c:9d:0d:23:35:2b:62:a6:41:b6:a2:b5:6c:28:64:
         e7:aa:58:a4:69:16:81:e7:24:38:2c:1a:24:fc:b9:e9:15:94:
         b2:d1:b5:4f:45:2b:db:64:54:6a:b0:62:6c:12:da:65:5b:5f:
         45:9d:36:ba:6d:27:6f:cb:2a:eb:a9:32:1f:84:07:dc:ee:6d:
         5e:4b:2a:77:e8:49:9c:cf:af:25:4e:9b:5c:2b:55:d0:12:ce:
         44:83:fb:7d:77:62:dd:42:e4:a2:59:6c:89:8f:52:3f:87:37:
         cb:79:9f:7e:85:3c:ef:9c:52:88:46:d3:c7:00:e0:0f:4b:bf:
         a2:ae:8e:c5:90:92:ab:3f:a9:a1:88:44:84:fb:1e:77:22:b9:
         4c:51:ca:55:0f:a0:61:d5:a2:8f:21:e7:e1:ee:86:79:8a:19:
         01:88:67:7c:c4:2f:45:e3:2b:c0:98:f1:b1:47:47:ed:7f:53:
         64:2d:0f:db:d5:4f:55:bb:9f:40:8e:7e:de:e3:f9:09:09:16:
         ea:47:f3:af:09:68:77:73:9d:1f:5c:5c:3c:9f:b1:7e:f0:67:
         a6:dd:d0:12:33:91:ba:d9:2c:92:39:bb:de:2e:cb:11:74:e0:
         67:11:8c:70:95:56:1d:e2:b1:36:da:74:12:9a:32:1a:be:f6:
         ac:c4:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:40:06 2026 by rpki-client