Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
File:                     a61681db-9c2d-39f4-ae56-91f2600f6136.roa (raw, json)
Hash identifier:          wuBfi2Kgd7enR0YctSajplgBjKus0SET9RcMkmbPd/Y=
Subject key identifier:   A3:23:19:23:BB:E4:C4:48:CE:40:45:05:9B:3D:60:49:EC:60:61:2E
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584F4973CC0109E7AB21B0582100
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     262287
IP address blocks:        198.145.67.0/24 maxlen: 24
                          209.20.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:cc:01:09:e7:ab:21:b0:58:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a73dfacc-a9ae-4a2b-bb72-99b4d94550a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:7f:bb:ec:3a:53:7a:bd:f6:73:1c:d4:9b:
                    37:0d:65:5a:db:33:fd:1b:6d:db:10:0c:9c:45:40:
                    23:60:3c:fe:0a:f1:a2:2c:dc:93:c5:b3:ae:a6:59:
                    8a:17:2b:89:3b:8f:05:dd:93:44:a2:42:2e:58:58:
                    67:c7:2f:02:b3:46:c0:a1:2c:58:db:5f:1d:6d:90:
                    9c:73:9f:0b:1e:ba:bc:13:60:e5:0a:c8:b8:f9:a6:
                    27:ba:29:ea:06:6a:88:b2:42:32:34:73:f4:e9:3e:
                    fc:7e:9d:c7:fe:80:90:82:0b:5f:08:e3:02:2c:e5:
                    6a:01:88:00:4b:90:f3:63:91:79:a9:b7:6b:4a:71:
                    87:53:40:3e:49:a8:e6:1d:f0:b2:c4:c5:fb:77:70:
                    49:af:7e:e2:cf:83:03:7e:00:d8:e8:08:3e:26:40:
                    27:14:c1:3e:f4:20:de:45:b2:78:8c:36:32:c4:c7:
                    07:9e:a7:33:de:e7:0c:3e:91:86:21:3f:34:45:13:
                    fc:13:96:b5:01:a0:7a:29:5d:37:d4:e1:16:ba:8f:
                    45:57:ad:63:ca:92:7d:34:9f:46:54:aa:e4:7a:9b:
                    b1:08:f1:9e:80:55:e2:80:95:ce:81:78:ac:48:9b:
                    ff:8e:da:0a:8f:8c:47:84:54:0b:c1:8b:5d:da:11:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:19:23:BB:E4:C4:48:CE:40:45:05:9B:3D:60:49:EC:60:61:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.67.0/24
                  209.20.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:dd:68:25:b8:4d:43:6c:68:d0:d2:37:a9:39:cc:27:f5:68:
         63:43:c3:37:fc:11:ec:1a:d5:ac:a6:a4:23:f1:08:27:b2:e1:
         13:b3:a8:cb:7c:d2:e3:70:e4:45:f7:d3:da:97:6a:ac:6b:7a:
         99:a8:41:41:b9:93:51:62:5a:c5:11:eb:e3:04:d3:09:63:18:
         3b:ec:85:e9:2c:b4:3e:46:05:4d:b6:e8:9c:59:a0:73:4c:46:
         f0:06:be:69:d2:06:d5:91:0d:4f:db:2a:e3:da:22:ee:20:8a:
         77:fa:37:a6:98:04:c5:9a:f7:37:7a:0d:80:67:dc:2d:b1:2b:
         4c:6a:ea:28:cd:c8:a5:29:ab:f0:0b:19:b7:7b:13:3d:6e:08:
         a7:1e:76:e5:3f:26:fc:62:dc:56:72:93:34:09:bf:22:d7:9b:
         00:48:01:85:e9:71:ac:a5:db:ca:be:26:d5:54:fd:ea:32:f6:
         59:3a:1e:3c:3d:09:83:b3:2c:49:9a:43:2b:cb:9e:b9:cb:b1:
         46:ea:66:05:bc:ee:60:47:e3:62:14:12:a3:2b:de:79:9f:72:
         e1:e8:6b:d0:5b:72:45:3b:d2:d0:d8:ab:05:74:44:fc:e5:05:
         77:ec:ec:2d:a8:f3:1f:90:ad:bf:01:85:fb:84:5d:90:30:df:
         26:8f:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:39 2026 by rpki-client