Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa
File:                     b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa (raw, json)
Hash identifier:          /Hf5rwcPZu/JLlIff7UERmJkyD0tqjB/hHHS1vprb3U=
Subject key identifier:   05:7F:7B:18:84:28:3C:32:B2:6D:92:B0:61:C9:A0:05:5C:D0:E1:9C
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584F7A4D8F2967EB4F27BA056A00
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     25649
IP address blocks:        199.187.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8f:29:67:eb:4f:27:ba:05:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=b61da81f-d7e3-49b5-b29c-4ab7610c5611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:bf:64:1e:e6:18:07:1d:8c:52:ce:43:34:
                    b8:37:9f:12:cb:2a:ac:c8:7c:e6:76:34:40:06:a5:
                    40:07:7f:85:2d:05:1e:8d:34:e0:f7:f1:e4:3c:3b:
                    7e:66:67:7a:e6:08:cd:5b:cc:a2:af:b7:fc:a8:5a:
                    ac:8d:33:1d:d5:fa:c8:51:98:f1:29:64:7b:29:8e:
                    fd:8a:bc:69:56:c3:e2:73:8a:9f:b0:74:dd:fe:06:
                    a4:73:81:b0:b4:3c:54:79:96:01:a8:a4:98:15:17:
                    42:92:30:b7:6a:48:9f:28:21:c9:f8:d6:3f:d1:6c:
                    6e:87:33:c3:0f:63:b9:92:1f:c7:bc:d4:fb:21:02:
                    a2:b3:82:71:04:ee:9b:6f:23:3d:b9:a0:07:1b:8a:
                    bb:a5:c4:90:87:16:bf:9a:58:40:b0:61:ae:87:ff:
                    a2:5c:f4:1a:cd:f5:dd:c8:b8:76:41:57:87:83:ae:
                    82:58:b2:2d:4e:13:c2:bd:d5:18:03:3c:26:26:d4:
                    69:ce:82:f7:6d:5c:5b:2d:58:2e:a0:e8:9b:52:14:
                    33:29:3c:d4:3b:01:53:4e:dd:cc:00:e2:9c:8b:b9:
                    ff:d8:1b:91:cf:db:fd:49:28:ad:06:68:54:e8:ae:
                    7c:07:2c:89:d2:ca:d4:05:26:04:ea:e0:b5:45:05:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7F:7B:18:84:28:3C:32:B2:6D:92:B0:61:C9:A0:05:5C:D0:E1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:7c:44:0d:10:59:c0:51:cb:14:f4:05:77:7c:cb:f2:2b:
         1e:11:52:51:90:0c:5e:28:f8:05:15:fd:9b:2b:53:29:c9:37:
         17:be:77:51:c2:36:7c:42:9c:53:d3:6e:da:78:c3:b6:0f:d0:
         9c:21:b2:b9:2e:7e:db:bb:db:6b:23:dd:ac:2a:af:7e:df:17:
         a6:1d:0a:b0:a8:c6:49:49:6b:71:5e:cf:38:73:85:3a:09:d7:
         34:df:15:cb:12:d4:ac:27:6a:3e:5f:c8:7a:84:f1:99:02:46:
         48:b1:c9:72:a6:7a:97:46:3e:03:1a:7a:ce:25:f7:3d:11:04:
         52:3e:20:80:e7:51:e4:6f:5d:a4:0b:11:01:33:91:9a:9c:8c:
         84:ef:78:ec:58:0c:27:15:2a:a4:fd:25:8c:cb:84:f3:5c:8a:
         ec:59:90:55:cc:63:87:75:28:33:12:c8:e3:c1:e5:e4:49:00:
         19:f8:1d:02:aa:7e:83:5e:0c:04:13:3b:56:88:75:b9:27:5b:
         66:f5:da:ca:69:51:5b:38:1b:6e:b4:2d:9c:33:c8:7c:fd:b2:
         86:01:b5:33:21:f7:fa:8b:fe:6c:f7:ca:71:03:14:92:43:ab:
         8e:a3:04:43:2f:0d:59:a1:85:8d:8a:72:c1:7d:27:d5:19:d5:
         fd:1f:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:16 2026 by rpki-client