Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa
File:                     9a380ce2-8038-318b-a975-39bee35aa94f.roa (raw, json)
Hash identifier:          7dB4wGcKpniIwc3tzXd2XRsYTvB9T1u4x1+LIQAOYsA=
Subject key identifier:   82:F3:51:9D:86:46:29:AE:51:C0:9F:4B:31:B5:B8:6D:47:8F:84:73
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584F3CE28F7BE7EE6FD366990000
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22653
IP address blocks:        104.238.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8f:7b:e7:ee:6f:d3:66:99:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=4b3760f4-c1be-4d2d-815c-97ec32d91bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:89:25:5e:d9:17:0e:2e:31:af:5e:72:92:
                    a7:79:8f:86:97:e0:3b:3b:b2:87:1f:bc:9f:6d:b6:
                    87:ac:7a:4c:bc:21:e5:94:7c:c2:ec:9d:79:a3:6e:
                    d3:b8:ae:b2:5a:dd:23:fd:4a:ec:51:9a:24:e8:70:
                    2d:b9:9b:45:61:b0:bc:35:fa:0e:93:0d:6c:55:b0:
                    51:f4:fa:f7:d0:da:17:7e:d1:a3:4c:08:a6:42:70:
                    1c:eb:d9:00:2a:ff:02:e4:56:31:28:da:89:40:9b:
                    ae:04:f0:26:d8:8e:ac:e1:93:ff:7e:6d:c8:68:7c:
                    b7:46:53:8a:10:2c:d2:ca:94:e4:e6:56:7b:38:2d:
                    22:bf:57:e5:b9:80:2d:58:7e:d4:93:54:e6:04:e5:
                    24:46:3e:1a:f6:d6:54:9c:29:ce:b8:6c:4e:cc:19:
                    11:e2:53:e9:74:37:27:94:f6:4f:e4:22:f5:2b:ce:
                    3c:04:29:75:77:cd:95:e6:02:17:7d:d1:2b:82:48:
                    be:6a:e5:f3:ba:ed:b8:36:e5:6d:f4:20:26:71:b8:
                    85:04:ed:dd:40:ed:fb:da:21:97:4f:65:ad:98:28:
                    8b:e1:fa:5c:5d:81:f3:44:14:b5:63:b0:fa:a9:21:
                    94:82:2d:50:e1:44:c7:33:55:a3:70:7b:09:69:92:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:51:9D:86:46:29:AE:51:C0:9F:4B:31:B5:B8:6D:47:8F:84:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:45:76:74:74:2f:7f:f7:bb:af:c1:10:7e:a2:1c:40:53:37:
         d9:30:f6:e5:c0:84:2a:d2:2b:6d:de:ee:ab:03:76:b4:80:2b:
         d1:84:3c:d6:94:bd:4d:b8:e2:a2:80:f0:21:bc:1b:33:12:20:
         90:4d:b9:23:64:10:b2:9a:cb:be:4d:30:9c:76:ee:cb:15:99:
         c3:12:14:2b:19:8c:08:42:21:62:c9:1a:88:4a:ee:d7:a5:87:
         c0:40:41:9f:03:69:ba:b8:03:41:55:c3:f2:bc:0d:c8:5c:a5:
         ac:cc:8a:41:60:a1:5a:24:40:da:66:36:d2:0a:f8:d8:c5:a1:
         f7:66:f5:93:86:cd:d7:95:bf:8d:64:b6:ae:68:c7:27:93:70:
         ec:99:aa:32:af:ed:e4:00:62:08:ae:42:cd:fe:c5:56:be:9d:
         75:5e:8e:91:0e:44:cf:30:da:8f:2c:95:3e:26:47:12:00:1e:
         76:3c:b5:75:cf:4e:0e:6a:2f:b9:c1:a6:6e:bf:da:62:5e:f4:
         c7:79:97:16:bc:9c:b4:fe:51:50:d2:18:33:69:82:38:42:d1:
         6d:47:e8:cb:a0:b5:a7:e4:96:29:25:72:df:ec:c7:a8:f6:c3:
         bb:61:ca:6d:0b:33:4e:17:3b:84:68:c5:54:d4:fe:2e:b6:e8:
         03:fb:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:06:39 2026 by rpki-client