Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa
File:                     69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa (raw, json)
Hash identifier:          HrWBVt05Wy7n6AUQ+RXvTrkkL2PLKnrUKXCSQfe1IZk=
Subject key identifier:   66:26:30:67:0B:C2:89:04:44:CD:0E:32:1E:2B:66:13:6C:C0:A7:C4
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F4328584F43DD7D51C0C05C6B48163740
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     213954
IP address blocks:        104.245.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:7d:51:c0:c0:5c:6b:48:16:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=26933f5f-ec4a-4a4d-ab83-ebe9988a7494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:cd:31:15:48:15:8d:a5:f8:aa:94:b0:5e:
                    7e:9a:f7:12:a2:c0:e5:3c:81:8e:39:db:cb:26:a9:
                    15:aa:e7:28:f6:83:6d:e2:2b:d1:eb:54:9d:21:8f:
                    5e:5c:a0:ba:86:67:10:0d:00:c9:40:c6:c2:33:af:
                    fd:67:45:94:ab:4f:26:71:da:0e:e7:c4:c0:9e:1e:
                    2a:1e:0a:3b:58:36:07:2b:d2:13:b2:19:04:c2:9f:
                    77:06:b4:3d:f0:f0:79:12:65:eb:04:2e:60:f4:0e:
                    41:dd:3e:b7:41:6a:0f:dc:98:6d:62:33:0c:f3:93:
                    7f:c4:a5:80:cb:4f:7f:f2:0d:97:1a:c6:ab:38:0f:
                    08:1a:50:dd:9c:12:28:ae:88:73:4b:6a:84:30:d1:
                    08:67:1d:fb:9d:62:fc:16:31:93:2b:0f:62:ef:c7:
                    a2:0c:40:e2:b9:5a:5b:81:b3:fe:ad:a9:4e:4c:67:
                    a6:51:14:07:ea:3f:af:30:60:c1:cb:1e:09:70:a7:
                    91:ce:c5:ee:f7:3d:bd:93:9d:da:55:b9:25:45:fb:
                    0b:1b:87:ea:2a:08:0c:78:1f:4a:1e:2a:44:b5:9b:
                    f5:bc:7b:53:2b:02:35:e1:3c:26:0c:db:49:90:a2:
                    8d:cb:36:88:63:35:75:e6:ba:b9:84:3f:bb:b1:a3:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:26:30:67:0B:C2:89:04:44:CD:0E:32:1E:2B:66:13:6C:C0:A7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8f:b9:36:67:fd:b9:c5:56:9a:17:45:60:84:1b:fa:13:eb:
         eb:ab:8c:ed:9c:e1:e4:64:9c:bd:9e:83:f0:4a:99:49:da:4d:
         3b:54:3e:a6:a0:c4:ad:c4:f2:5f:3f:5f:5e:1e:d2:27:91:45:
         08:56:20:79:48:68:94:39:13:5f:4e:ad:f2:cd:91:69:15:5b:
         cb:1c:29:c4:b4:62:ec:10:11:84:b1:c9:c3:e3:bd:bc:15:2e:
         f1:8c:d9:e1:0b:cb:5d:11:00:f4:5f:a1:44:c8:ce:04:d8:d2:
         f6:32:20:28:fb:10:82:ef:7c:f8:11:c7:08:a5:70:c3:45:11:
         a6:a3:ca:b4:34:3b:aa:7c:57:0a:53:2e:e3:c4:85:ef:aa:ca:
         80:62:a3:70:21:9a:85:47:0e:36:8d:73:36:85:66:4d:0c:fc:
         65:c8:3f:0e:95:79:a0:2a:4c:f9:ae:c8:ae:71:c5:58:50:51:
         c1:18:aa:75:2d:de:7e:9f:9d:dc:42:18:db:29:ad:05:2b:a7:
         5a:ec:07:27:6b:52:51:b5:23:c1:32:c1:ed:23:9d:b1:31:94:
         dc:3a:73:12:72:36:72:b3:eb:58:00:29:0d:4d:d1:72:d9:d4:
         cd:04:59:e6:34:56:6f:00:55:59:22:4d:26:23:f7:1d:ee:48:
         0e:ac:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:17:03 2026 by rpki-client