Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa
File:                     1469698d-5721-3dc4-a71b-77c9af5be168.roa (raw, json)
Hash identifier:          K2MLSa3CKkDbhPnliLOga2hwiU7EH1RBS/oqV4whcCg=
Subject key identifier:   8D:E9:EA:2B:93:4C:C4:C4:E7:28:7E:0E:C2:EF:DC:95:AA:54:CA:9D
Certificate issuer:       /CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e
Certificate serial:       010D0C9F4328584F497471A43050109283E93FC0
Authority key identifier: 8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     49683
IP address blocks:        172.82.64.0/24 maxlen: 24
                          172.82.65.0/24 maxlen: 24
                          172.82.66.0/24 maxlen: 24
                          172.82.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:71:a4:30:50:10:92:83:e9:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7cd912f5-959f-409c-abcf-1e847b3c95d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:66:3b:dc:fe:3b:fd:ee:b6:78:c5:89:be:
                    98:b0:41:10:99:8b:34:13:4e:30:94:45:45:1d:cd:
                    cd:56:f5:61:4e:bb:8b:0a:be:a5:64:22:3f:b3:ec:
                    c3:ab:d1:be:46:2c:c4:e8:b8:dd:37:ab:ab:45:cf:
                    29:19:9a:f5:76:28:85:e2:5d:83:11:05:91:b8:d1:
                    c3:de:59:6a:0d:8f:01:ea:25:65:a5:f9:71:9c:3a:
                    e7:47:f9:b3:35:2d:4a:e0:e7:c2:e9:3a:76:04:2e:
                    fc:32:3f:a4:48:1d:e7:78:f1:39:7c:93:e6:a5:4a:
                    c9:66:9d:d7:65:93:59:12:f0:fe:30:37:00:63:3b:
                    6b:e3:0e:4f:94:98:48:42:82:1b:4a:2e:08:70:2f:
                    a1:9b:d8:e0:c7:31:1a:7f:2e:02:5e:38:57:69:ac:
                    d3:fd:76:1c:8c:03:2d:f7:a0:af:30:5b:78:1b:60:
                    d7:c2:6b:69:ae:36:17:63:5e:2b:32:b8:38:d1:65:
                    60:89:2c:32:70:c9:eb:99:13:62:c6:49:06:70:dd:
                    21:c1:ac:a3:3a:d1:de:ac:dd:8f:07:83:6b:4e:d3:
                    ae:41:a9:8c:83:e3:3e:62:60:1d:3f:35:85:71:f4:
                    a7:b6:42:7d:67:79:4b:17:f0:3f:bd:c4:05:1a:f6:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E9:EA:2B:93:4C:C4:C4:E7:28:7E:0E:C2:EF:DC:95:AA:54:CA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:7b:be:98:14:8d:57:f6:d8:70:22:f2:4a:03:dd:f9:a6:76:
         a5:6a:5e:82:f9:ef:24:4e:b9:c3:2f:97:9a:61:03:6d:2e:95:
         88:c0:dd:65:e6:4a:09:96:53:04:10:0b:ab:e1:47:2d:85:7b:
         b3:86:f9:bf:ea:f8:0e:a4:89:ed:e7:93:b6:63:26:11:6a:56:
         ea:22:16:53:1d:85:b9:ec:5d:14:fa:a4:63:41:3c:74:8c:46:
         57:89:09:0c:a4:3f:95:90:d0:9a:e4:1d:6b:df:56:ac:4f:e7:
         70:22:e8:13:68:33:da:72:06:c0:cd:f0:f6:7f:38:34:98:2a:
         fe:28:96:5c:49:f6:58:da:e3:6d:24:f0:92:05:00:5a:29:56:
         7a:d3:51:01:74:b3:1a:c5:dd:ec:a4:d0:fe:c0:27:02:81:eb:
         a6:44:54:ae:5b:51:a2:c4:8f:ab:f4:02:40:81:b3:25:75:e1:
         79:a2:d8:87:5a:06:56:20:8d:7d:dc:5f:1b:9f:67:64:a2:56:
         d7:14:a9:05:8b:81:9b:4a:1a:d1:b9:ff:50:dd:44:21:3d:c1:
         38:56:a5:11:78:4f:b0:e2:23:4e:e3:13:fe:58:25:90:d2:06:
         64:7c:86:c8:a6:e1:94:f9:8f:84:45:35:35:b1:1c:f1:f4:79:
         db:e0:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:24:56 2026 by rpki-client