Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
File:                     00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa (raw, json)
Hash identifier:          29lu4z9iljf0UZQQsMS4i6PzRZGuqZqKTHOvcvqBfLI=
Subject key identifier:   71:E5:FB:7A:2A:04:82:75:C2:CA:77:79:E1:40:57:CD:4E:6B:CF:F4
Certificate issuer:       /CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
Certificate serial:       010D0C9F4328584F49741000760269838F661900
Authority key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17120
IP address blocks:        204.81.0.0/16 maxlen: 18
                          204.82.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:10:00:76:02:69:83:8f:66:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=95cd5697-fd16-4719-98b0-6bc9d2ddaa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:bc:5c:1f:dd:2d:6e:31:0e:f3:1d:8c:9e:
                    ce:d9:ed:b1:c1:0d:f3:2c:9e:58:67:ba:04:d9:50:
                    78:8e:7c:39:0e:fd:da:bd:45:99:25:37:f3:5d:4b:
                    e5:14:eb:10:48:04:0e:ac:aa:a7:65:48:4d:f1:ec:
                    f6:50:e9:2c:ec:1e:d3:0f:94:76:f0:13:cf:da:64:
                    4b:7b:e4:8f:0f:fd:cd:d1:79:8b:5b:16:27:0e:01:
                    c8:26:f6:fe:08:a8:f2:0a:ed:77:9d:f2:85:a3:2f:
                    ab:99:35:51:f9:77:85:7b:3e:92:fd:03:2d:71:fc:
                    d4:e4:55:e9:e3:df:23:95:a9:1e:ba:f0:02:d2:0e:
                    b8:83:6a:55:62:17:c1:3b:95:37:f1:7b:32:05:0e:
                    de:3b:57:a8:f1:af:0b:69:02:23:d2:29:8a:fd:e3:
                    1b:a4:ee:1e:6a:65:e7:9c:df:b7:5b:0a:16:79:89:
                    d7:fb:1b:75:74:7f:5f:d9:42:5f:4e:a0:55:df:af:
                    34:0c:f0:2d:be:12:ab:3f:e2:4c:3f:22:c4:26:1e:
                    63:65:4e:7b:fa:6a:bf:0f:82:b7:5a:7b:5a:34:5a:
                    cf:92:91:6d:ae:69:32:47:2f:1a:91:7e:7c:28:d7:
                    9e:f7:21:51:6f:35:db:a2:a7:84:65:28:7d:61:8f:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:FB:7A:2A:04:82:75:C2:CA:77:79:E1:40:57:CD:4E:6B:CF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl

            X509v3 Authority Key Identifier:
                keyid:07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.81.0.0-204.82.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:a9:96:e0:b6:1f:b4:c8:e9:7b:29:ec:2f:4c:fc:76:bb:
         41:a1:fe:0e:37:50:85:b1:18:57:a9:18:ce:37:0d:3b:65:32:
         96:d6:da:36:92:53:df:cc:7d:ed:92:c9:0d:ac:a7:75:31:bf:
         8b:3b:a2:30:54:49:52:18:38:78:a8:38:da:07:18:51:33:15:
         be:e2:80:d5:23:a1:86:ae:8a:a9:ef:52:99:3f:68:7a:20:2c:
         61:86:95:bb:fe:8e:08:63:d4:a9:d2:79:11:18:5d:ac:45:85:
         e5:7f:73:4f:e8:7e:ee:5f:6b:df:31:71:fe:55:8c:84:8f:d3:
         3c:65:c2:8e:13:24:b3:ff:99:7c:f9:73:e5:12:e9:49:d9:48:
         61:65:ca:6c:6a:8e:ad:63:5f:13:9d:c9:6f:7d:32:9e:fe:3a:
         75:d7:7f:89:ba:f6:e4:3b:ee:1a:d9:66:41:83:91:59:fd:22:
         08:25:19:0e:1a:93:a4:35:c8:e4:41:0a:52:2b:7b:c7:1f:99:
         29:f1:aa:bb:4e:a7:97:f5:4a:b0:b3:b7:22:42:c0:74:da:2c:
         8a:4d:5b:d4:75:0c:da:ab:e4:37:82:29:4e:22:f6:d2:9b:a2:
         f7:97:ae:07:05:59:28:d1:97:3a:da:f3:d8:4d:27:ac:09:c8:
         72:a5:e3:8e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdBAAdgJpg49mGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJlNjc4YjgtNzRjYy00YTY3LTg3MDAtNWEwN2Y1YzIw
ZjYyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTVjZDU2OTctZmQxNi00NzE5LTk4YjAtNmJjOWQyZGRhYTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntO8XB/dLW4xDvMdjJ7O2e2xwQ3zLJ5YZ7oE
2VB4jnw5Dv3avUWZJTfzXUvlFOsQSAQOrKqnZUhN8ez2UOks7B7TD5R28BPP2mRL
e+SPD/3N0XmLWxYnDgHIJvb+CKjyCu13nfKFoy+rmTVR+XeFez6S/QMtcfzU5FXp
498jlakeuvAC0g64g2pVYhfBO5U38XsyBQ7eO1eo8a8LaQIj0imK/eMbpO4eamXn
nN+3WwoWeYnX+xt1dH9f2UJfTqBV3680DPAtvhKrP+JMPyLEJh5jZU57+mq/D4K3
WntaNFrPkpFtrmkyRy8akX58KNee9yFRbzXboqeEZSh9YY9odwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHHl+3oqBIJ1wsp3eeFAV81Oa8/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmU2
NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVjMjBmNjIvMDBkNWY0NDYtNjMxNy0z
ZGJjLThhNzQtOGYwMTE4ZWY0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJlNjc4YjgtNzRjYy00YTY3LTg3
MDAtNWEwN2Y1YzIwZjYyLzZiZTY3OGI4LTc0Y2MtNGE2Ny04NzAwLTVhMDdmNWMy
MGY2Mi5jcmwwHwYDVR0jBBgwFoAUBxWh2CkL4WJTdvQMO+NEhe6M0YowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3
ZjVjMjBmNjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAwDMUQMD
AMxSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFysqZbgth+0yOl7KewvTPx2u0Gh/g43UIWxGFepGM43DTtl
MpbW2jaSU9/Mfe2SyQ2sp3Uxv4s7ojBUSVIYOHioONoHGFEzFb7igNUjoYauiqnv
Upk/aHogLGGGlbv+jghj1KnSeREYXaxFheV/c0/ofu5fa98xcf5VjISP0zxlwo4T
JLP/mXz5c+US6UnZSGFlymxqjq1jXxOdyW99Mp7+OnXXf4m69uQ77hrZZkGDkVn9
IgglGQ4ak6Q1yORBClIre8cfmSnxqrtOp5f1SrCztyJCwHTaLIpNW9R1DNqr5DeC
KU4i9tKboveXrgcFWSjRlzra89hNJ6wJyHKl444=
-----END CERTIFICATE-----
Generated at Thu Oct 1 10:44:32 2026 by rpki-client