Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2f36988-cd58-366b-be04-85d10baaf08d.roa
File:                     e2f36988-cd58-366b-be04-85d10baaf08d.roa (raw, json)
Hash identifier:          m4BiHRWSyAEg7+gyNkmFGJOE1aU6COc8RZR70bMzJ88=
Subject key identifier:   87:E5:CC:36:E6:8D:19:82:ED:3A:8C:24:91:A3:60:F2:10:5C:2A:A8
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584FD25BDE012717F0594045C700
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2f36988-cd58-366b-be04-85d10baaf08d.roa
Signing time:             Fri 13 Nov 2026 02:00:14 +0000
ROA not before:           Fri 13 Nov 2026 02:00:14 +0000
ROA not after:            Thu 11 Feb 2027 02:00:14 +0000
asID:                     11404
IP address blocks:        172.92.0.0/16 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d2:5b:de:01:27:17:f0:59:40:45:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Nov 13 02:00:14 2026 GMT
            Not After : Feb 11 02:00:14 2027 GMT
        Subject: CN=f6c9c327-415b-4534-94de-2d5811033ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:31:94:05:fa:f6:f7:48:56:f8:49:9d:28:
                    f5:3b:12:d7:9d:e7:92:38:56:51:de:b7:fc:9e:8d:
                    2a:7a:cf:0c:6e:11:67:c8:e0:aa:54:95:7b:98:f9:
                    07:14:7a:ba:c3:23:b8:11:82:45:0b:64:cc:64:35:
                    43:69:8e:33:51:fa:67:88:74:fd:46:d0:e3:87:96:
                    5d:c3:69:fc:6c:8b:6b:38:c7:3d:96:b8:cd:ae:8a:
                    0b:13:d0:6d:bb:5f:93:25:03:8e:4a:44:86:af:10:
                    4c:62:6c:51:1a:7e:f0:38:86:ca:84:69:26:70:7e:
                    1f:07:50:57:08:60:73:1e:f3:9a:24:33:d8:53:24:
                    11:48:ee:e6:0e:83:97:c6:8d:e7:2c:6c:de:ad:55:
                    a5:c1:32:cb:48:f3:1c:1a:a8:f5:96:b3:ca:30:f1:
                    56:0d:98:c2:15:26:1a:ce:1e:5b:90:21:38:3a:36:
                    73:09:c0:a2:dc:2c:39:7e:52:7e:bb:79:1e:66:b3:
                    81:4b:97:8f:18:b7:2d:ec:58:c4:8e:ff:01:38:9b:
                    2d:2b:da:f2:bb:9a:88:78:0a:58:3f:c2:96:17:04:
                    5e:82:6f:18:25:e9:72:e9:eb:1a:b4:8c:ab:ed:50:
                    4a:61:04:b5:fe:d4:52:5c:c4:d0:fd:a7:22:89:ab:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E5:CC:36:E6:8D:19:82:ED:3A:8C:24:91:A3:60:F2:10:5C:2A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2f36988-cd58-366b-be04-85d10baaf08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:b0:22:c2:a2:04:7e:b2:e7:16:e7:ea:8a:00:e7:82:34:
         16:4a:3a:c4:1e:88:d4:41:c5:f5:7c:0c:64:25:b9:ad:d4:93:
         38:76:6e:0e:ca:fb:d6:4b:41:b8:b8:3b:8d:50:36:67:46:20:
         dc:1b:57:fc:f9:cb:b0:da:0b:59:92:93:19:b8:10:86:ef:f9:
         fb:db:54:7a:a6:bb:ff:cb:8f:85:03:d5:f9:51:e5:f7:61:bb:
         ae:8e:19:35:33:9b:ce:b7:42:99:d0:94:be:16:91:d8:70:26:
         d8:18:9b:5d:20:e2:98:ed:75:7d:16:38:0e:9b:d5:8c:a0:cc:
         d7:c9:37:75:6e:7b:cd:fc:bd:0c:0e:94:71:1d:01:2d:39:3c:
         49:6d:bf:22:a0:d8:bd:c5:79:6b:b8:f3:07:5f:d0:2c:e9:19:
         55:6f:61:e3:b5:45:29:1a:36:41:c7:ce:63:c8:dd:d1:d2:db:
         96:91:82:32:dd:52:d2:ee:8c:50:f2:68:bf:71:fb:18:aa:44:
         f8:90:d2:92:56:d6:a7:6e:73:f6:75:2d:04:ef:45:a5:5c:4c:
         b1:a9:26:66:4c:a4:12:6a:b0:ed:cb:f2:60:95:aa:b3:e1:b3:
         dd:38:ea:b2:f4:66:6c:31:59:aa:93:10:46:80:66:76:02:79:
         91:a6:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:31:44 2026 by rpki-client