Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/7f6ac057-dd9f-3478-a3a4-f5b9924e8ddd.roa
File:                     7f6ac057-dd9f-3478-a3a4-f5b9924e8ddd.roa (raw, json)
Hash identifier:          COHuwm/1VexfquAdEIylyp46LxjbPeyGWnNfGVFECgs=
Subject key identifier:   25:AE:26:18:19:46:D5:51:2B:37:6D:F8:EB:F3:BE:16:C1:88:57:16
Certificate issuer:       /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Certificate serial:       010D0C9F4328584F4857EDA61638751187503A80
Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/7f6ac057-dd9f-3478-a3a4-f5b9924e8ddd.roa
Signing time:             Thu 24 Sep 2026 15:30:49 +0000
ROA not before:           Thu 24 Sep 2026 15:30:49 +0000
ROA not after:            Wed 23 Dec 2026 16:30:49 +0000
asID:                     58026
IP address blocks:        128.254.228.0/22 maxlen: 22
                          142.248.196.0/22 maxlen: 22
                          162.245.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:57:ed:a6:16:38:75:11:87:50:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
        Validity
            Not Before: Sep 24 15:30:49 2026 GMT
            Not After : Dec 23 16:30:49 2026 GMT
        Subject: CN=911f9240-7926-46e1-b537-c53541df4e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:52:b6:2a:a6:13:da:e4:e2:fe:74:69:9b:
                    29:ec:fa:a3:f6:d8:ad:c8:78:b1:0b:01:e4:5b:e0:
                    e1:b7:1c:50:20:2a:3f:e0:b6:99:05:55:3e:04:d8:
                    ca:87:ad:7c:76:bd:9e:d7:0e:26:94:c9:a9:56:59:
                    da:34:9b:3e:f2:92:29:82:51:72:ce:bf:3e:28:4a:
                    95:f3:b9:2f:d3:60:ef:7b:79:80:7d:d3:3b:c6:b5:
                    91:b0:17:39:da:02:8d:68:6e:7e:b3:9c:99:af:10:
                    24:e5:46:e0:a4:c5:f1:33:41:9f:d3:57:89:fd:7c:
                    b1:cd:00:67:a4:f5:d7:61:b2:5f:0f:0f:9d:89:4a:
                    2f:dc:d1:90:7e:98:6f:76:7c:aa:3c:9a:d9:5b:29:
                    f7:d8:d5:a1:35:5d:58:68:7e:71:df:ed:9f:40:e5:
                    c3:77:49:f1:78:e7:6a:fe:af:56:44:56:6a:8a:4b:
                    56:ab:ed:2f:09:ef:f9:fe:2c:e4:57:57:92:84:92:
                    83:50:1f:fe:22:52:8a:fa:8a:8d:07:f6:04:2f:1c:
                    5f:e3:70:65:d6:4d:52:e0:19:8b:d7:41:a1:ea:7b:
                    0b:5e:89:f0:f5:17:65:fe:45:f4:12:ac:95:e5:35:
                    88:f4:e8:fd:fc:a0:be:9e:52:df:91:68:41:8b:3e:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:26:18:19:46:D5:51:2B:37:6D:F8:EB:F3:BE:16:C1:88:57:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/7f6ac057-dd9f-3478-a3a4-f5b9924e8ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl

            X509v3 Authority Key Identifier:
                keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.228.0/22
                  142.248.196.0/22
                  162.245.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:da:19:ea:92:c5:a9:7a:11:8d:35:f9:7f:03:ae:d7:88:64:
         e9:83:45:28:ee:4f:5a:1a:8e:91:36:ed:bf:c4:ca:17:7d:a4:
         4c:07:44:d9:28:3e:45:38:9d:8a:37:f3:8b:d3:e6:c3:50:32:
         ca:c6:f1:1c:c4:92:d4:3c:cf:f0:da:5c:fc:ca:1b:5c:62:a6:
         4e:df:1a:d8:91:7b:d3:d6:2f:6c:c3:87:3c:23:af:c6:29:b6:
         e9:2c:90:e9:75:c5:48:de:ca:42:51:d3:84:f6:ce:43:f6:a4:
         25:95:fe:d8:91:8e:d1:f6:fb:7f:bf:0b:81:de:9a:51:95:08:
         91:3f:77:85:fd:f6:18:bb:78:00:6d:84:cf:45:9a:ce:69:f3:
         4e:ad:a4:67:e7:84:d1:a4:04:57:e0:b1:1d:59:10:34:f7:4e:
         91:c0:b6:41:da:1b:89:9b:f0:56:bf:54:b3:57:93:86:67:e6:
         f7:6b:f2:bb:30:68:ae:9e:4f:e3:47:6d:0a:6a:c1:fe:90:f9:
         63:94:00:6f:aa:f7:4a:f0:a4:c9:03:14:fb:19:ca:0f:a8:31:
         3c:50:9e:61:b7:c9:46:88:5e:f2:00:ec:5e:ec:71:ea:d3:13:
         81:5d:37:e9:3f:48:68:a5:e0:bc:cd:5d:89:9f:db:7c:02:f0:
         a3:92:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:36:54 2026 by rpki-client