Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/492e6c6c-7802-3943-8a4d-ab30c8b451ab.roa
File:                     492e6c6c-7802-3943-8a4d-ab30c8b451ab.roa (raw, json)
Hash identifier:          20Bhsu6+J2C9hX3cE6nCdH4E6PWU6M/MH9RY120x2KQ=
Subject key identifier:   2A:B7:11:1A:D1:0F:EF:1E:6A:D3:9C:A5:00:45:53:4F:6E:8E:E1:C0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F53DF6F82C91FAAAD6F14EC00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/492e6c6c-7802-3943-8a4d-ab30c8b451ab.roa
Signing time:             Mon 28 Sep 2026 18:37:44 +0000
ROA not before:           Mon 28 Sep 2026 18:37:44 +0000
ROA not after:            Sun 27 Dec 2026 19:37:44 +0000
asID:                     62904
IP address blocks:        170.130.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:df:6f:82:c9:1f:aa:ad:6f:14:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 18:37:44 2026 GMT
            Not After : Dec 27 19:37:44 2026 GMT
        Subject: CN=978f91f5-80ae-47ab-8148-7864a97cdff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:2b:1d:18:bc:34:cb:66:a7:37:ad:0d:8c:
                    83:22:80:ad:61:2c:8e:bf:ab:87:b6:36:8b:fa:ec:
                    7f:9c:a5:bd:25:20:94:9e:a2:af:29:6e:c1:2b:b2:
                    7a:01:e1:61:be:70:52:b7:75:3d:95:ee:38:12:eb:
                    f4:1c:22:de:a2:0f:e4:fa:b5:32:e3:75:5e:47:30:
                    ad:08:15:86:73:f3:90:9e:e5:c5:28:21:50:ec:39:
                    35:c8:56:ef:d1:76:fa:24:bc:2d:5c:34:86:68:91:
                    70:44:0f:3b:b0:15:92:df:f9:3f:5b:c4:34:d5:f1:
                    10:75:e3:08:1b:99:7e:f8:4e:90:a1:d4:92:e0:69:
                    e6:e8:35:07:be:bf:b4:f3:1e:67:d1:9d:00:bd:c1:
                    48:a3:15:53:bd:5e:be:5e:cf:10:3c:b2:31:d4:b0:
                    ce:e6:49:c6:48:26:dd:e5:35:9d:73:35:15:22:c7:
                    90:3e:d5:af:08:de:d0:66:6a:10:af:f4:ef:41:c5:
                    95:ea:21:dc:4d:1d:2a:de:a4:73:08:17:33:11:10:
                    a0:e9:c8:f8:4b:3d:7e:99:05:7a:75:30:c7:0a:c5:
                    f9:88:aa:8b:be:34:9f:c3:41:f5:a0:a8:a0:cc:f0:
                    bd:75:6d:59:f7:21:87:9a:fc:b5:53:ee:67:3c:f4:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B7:11:1A:D1:0F:EF:1E:6A:D3:9C:A5:00:45:53:4F:6E:8E:E1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/492e6c6c-7802-3943-8a4d-ab30c8b451ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:d9:fb:cf:ad:5a:66:1c:d3:9b:04:c9:c1:83:fa:3a:23:8a:
         5f:6f:d0:55:51:d4:1b:48:0e:c8:61:d9:3c:19:3d:9b:af:18:
         c6:0d:74:09:0e:dd:75:e8:8c:55:b7:12:02:58:31:93:57:4e:
         c9:bc:d0:d0:59:47:83:30:9a:db:65:c6:66:b3:cc:3b:dc:e0:
         39:16:ae:04:64:14:56:e3:c1:d3:04:e4:91:a3:4a:b0:0d:67:
         d3:b2:b2:41:be:49:1b:bc:9b:11:98:94:18:a4:15:20:99:2d:
         1e:23:8f:cd:a7:1b:4c:94:65:dc:d6:b0:58:0a:0a:6c:05:62:
         80:2d:e9:e1:2e:9f:9c:ee:f5:91:b7:9d:c0:94:aa:19:27:6e:
         3a:7a:bc:be:91:ac:ec:49:cb:25:a8:2a:c6:59:66:84:d3:8d:
         90:d6:fb:37:b2:26:d0:22:be:a2:9f:ca:8f:d1:8d:51:b6:42:
         e7:e0:61:2c:73:54:c2:b5:62:59:a1:95:f1:74:71:38:ac:b9:
         76:78:12:63:8f:ec:56:e0:e8:d5:20:2f:95:8e:86:2c:e6:bc:
         1e:9e:81:fc:60:c9:90:4b:c2:b8:b2:cf:77:f8:f7:e5:c8:96:
         93:07:98:7a:60:a6:e6:59:c1:5d:24:66:5f:79:13:40:9c:b7:
         65:28:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:15 2026 by rpki-client