Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1ff62767-1e8c-3b8d-bd1d-8e9d17b3c5a6.roa
File:                     1ff62767-1e8c-3b8d-bd1d-8e9d17b3c5a6.roa (raw, json)
Hash identifier:          RfxigClq65wvtPuC7pC+94Juy7Dd66kkhNzgyzIOgh4=
Subject key identifier:   66:55:C6:C7:60:D9:AE:8E:22:5D:38:7E:6F:5A:DB:17:3B:D8:B8:2A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F53DF281161F0F9243C2A9A80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1ff62767-1e8c-3b8d-bd1d-8e9d17b3c5a6.roa
Signing time:             Mon 28 Sep 2026 18:37:11 +0000
ROA not before:           Mon 28 Sep 2026 18:37:11 +0000
ROA not after:            Sun 27 Dec 2026 19:37:11 +0000
asID:                     62904
IP address blocks:        170.130.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:df:28:11:61:f0:f9:24:3c:2a:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 18:37:11 2026 GMT
            Not After : Dec 27 19:37:11 2026 GMT
        Subject: CN=9134125d-ede0-4154-96b6-704291dd79e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:9c:55:0d:93:89:03:a5:89:c5:c8:c1:af:
                    a3:05:2b:ed:a9:f0:ba:93:70:04:94:28:f8:6d:4f:
                    9f:aa:11:f2:b1:1f:77:e6:d5:b5:eb:b1:b8:dd:cf:
                    6e:1c:17:66:8b:3f:b4:e4:f5:e8:14:ff:e1:b0:99:
                    2f:0a:1a:68:1b:9a:7a:85:86:fe:8b:45:e2:34:67:
                    88:f7:16:b9:40:d9:ce:8e:c7:62:82:19:e9:a8:ae:
                    17:ec:25:44:3c:a9:da:78:ba:bb:4b:78:2c:0a:20:
                    6c:91:e2:f9:d9:37:e6:98:a9:63:75:d8:f0:f6:9c:
                    f9:93:af:dd:1b:b3:4c:7e:40:c8:2a:d0:6f:33:41:
                    46:de:09:22:e1:bd:82:5f:21:58:fb:38:99:38:96:
                    bf:71:24:36:89:15:3b:d8:0c:d4:22:14:98:69:20:
                    ef:65:96:b3:be:39:dd:71:7e:bf:86:00:63:aa:70:
                    4b:17:5e:37:4a:91:26:a7:8b:db:72:91:0a:a8:36:
                    a0:1d:a4:80:0b:17:d2:d7:a7:ff:d7:d0:b3:34:3a:
                    e2:f1:52:aa:54:53:f1:67:51:3e:72:4e:b7:86:6f:
                    26:0b:be:d9:01:e2:fa:3f:39:1b:c2:b1:ce:76:e4:
                    11:a7:70:72:af:38:9a:5e:6f:82:e8:29:79:ad:b3:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:55:C6:C7:60:D9:AE:8E:22:5D:38:7E:6F:5A:DB:17:3B:D8:B8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1ff62767-1e8c-3b8d-bd1d-8e9d17b3c5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:db:fa:84:99:2b:9c:46:ea:1e:84:76:03:d0:89:c9:f4:90:
         27:f2:f3:9b:e3:99:bf:d4:c1:4b:15:d3:af:c9:46:15:bb:2d:
         0f:1d:f3:ca:5a:b0:ce:d7:d5:ed:d9:60:6e:57:1b:66:cc:5d:
         3a:a8:2e:94:6f:a7:6c:14:5e:2b:5a:95:7a:8c:ef:82:aa:11:
         f9:4f:1a:f8:9d:03:e3:28:16:e7:c2:ac:2a:ef:26:9a:ab:f3:
         44:f4:09:d7:f8:57:b8:ff:23:74:0b:8a:76:27:71:d7:bc:ce:
         1a:64:89:3b:25:c4:b8:25:7d:30:0a:51:d0:9f:14:a2:7f:5e:
         bf:85:f0:e5:d3:c5:6b:00:4d:f1:9f:af:dd:33:d8:a8:1a:90:
         1f:70:50:78:7f:95:8f:f6:5a:57:d0:f3:75:c9:ed:86:1f:49:
         a5:01:4a:70:ed:d8:e8:e7:51:ad:5b:eb:25:a7:de:e7:b2:90:
         ed:52:42:98:0b:c4:a1:b4:0a:c7:34:d0:47:85:32:df:04:32:
         4a:70:ec:38:df:a1:8a:01:de:ca:b9:d1:38:6b:5a:36:b2:b0:
         7d:5a:dd:36:a1:de:ac:ea:27:97:e1:c6:8c:3d:41:db:5b:7b:
         eb:1d:b0:b9:af:f8:92:3d:11:a3:c2:61:b6:7e:65:44:6b:16:
         e7:08:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:01:44 2026 by rpki-client