Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cdd490b8-fb9b-3a9d-9696-2e8f5d8c8582.roa
File:                     cdd490b8-fb9b-3a9d-9696-2e8f5d8c8582.roa (raw, json)
Hash identifier:          8cwX+ScODKSInNY5iy3xlawaEQTsBK4rEixTax1jaiA=
Subject key identifier:   4A:60:AC:F9:8F:B2:C0:B0:99:9C:43:70:04:84:26:31:2F:FA:C8:82
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F53E1262D3218B275F611A300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cdd490b8-fb9b-3a9d-9696-2e8f5d8c8582.roa
Signing time:             Mon 28 Sep 2026 18:41:11 +0000
ROA not before:           Mon 28 Sep 2026 18:41:11 +0000
ROA not after:            Sun 27 Dec 2026 19:41:11 +0000
asID:                     62904
IP address blocks:        170.130.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:e1:26:2d:32:18:b2:75:f6:11:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 18:41:11 2026 GMT
            Not After : Dec 27 19:41:11 2026 GMT
        Subject: CN=31615e14-d5c4-4a1d-9f4b-8ecb796b4d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:be:fb:72:93:93:78:30:50:78:89:c8:40:91:
                    74:ef:54:9f:14:9a:46:5a:f9:7d:50:ac:0f:4e:a5:
                    7a:35:22:76:03:06:54:63:b1:d4:60:51:5d:de:05:
                    21:2e:86:40:a0:c0:ef:5e:c4:15:74:10:89:35:7e:
                    37:c5:07:1c:37:e4:0a:07:16:e1:54:0b:4f:22:d7:
                    9d:5e:c1:7e:ed:d0:d6:ad:da:cd:ef:3c:d6:58:ee:
                    69:a4:e4:85:39:4b:a8:39:c8:d8:fc:a9:11:ae:12:
                    56:b1:b7:8b:d8:cb:33:18:6c:32:69:cf:75:b4:9c:
                    09:00:e1:3a:a7:84:d6:a5:20:d3:ed:82:79:e1:99:
                    18:72:51:99:c7:96:c3:1d:ec:0e:ac:e0:1c:56:87:
                    29:1e:e4:10:66:b7:09:71:88:8c:ff:a2:f4:2f:25:
                    01:b7:54:dd:54:b6:ac:ad:ca:c0:01:75:17:37:b7:
                    c3:f2:42:56:60:45:43:6d:a6:8f:73:db:bf:c1:47:
                    8e:8c:d1:56:0a:aa:cb:60:0f:57:2a:2a:b4:5d:b3:
                    3a:37:fb:e6:5b:2e:1c:79:ff:ec:76:72:85:31:93:
                    20:3b:19:f3:ab:1f:82:bd:90:bd:87:a2:46:8a:8f:
                    c1:52:3f:d0:b7:92:dc:0d:63:a3:7d:89:9c:53:28:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:AC:F9:8F:B2:C0:B0:99:9C:43:70:04:84:26:31:2F:FA:C8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cdd490b8-fb9b-3a9d-9696-2e8f5d8c8582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:d3:cf:0e:37:e6:27:52:fd:c6:a4:26:fd:93:f4:4f:d8:
         c3:9d:08:85:aa:6b:a8:e2:46:d0:b1:a3:c2:1c:d9:cd:57:52:
         8a:99:04:9f:2e:73:1b:f6:0c:b5:32:6b:63:6f:95:c5:e0:fe:
         8b:85:c3:19:07:f5:8f:85:75:13:bd:49:9a:3d:57:60:19:7e:
         1a:48:2b:57:6e:66:7a:4e:94:26:35:2d:4f:9f:fa:6d:1c:8b:
         e4:4b:28:c5:f9:6c:dd:18:8c:da:aa:d0:e5:90:29:73:2f:db:
         82:2d:a1:ab:46:29:9c:85:a0:e7:68:60:42:67:ac:77:3a:79:
         10:63:3a:29:1c:5a:30:2a:2a:b1:81:24:58:4c:9b:87:23:bb:
         30:13:10:21:b6:a4:9c:47:cd:ce:fc:a0:e8:63:5b:4f:37:d0:
         e7:b8:fd:87:64:8b:50:e0:67:54:99:7b:2d:38:1f:2e:8b:6e:
         1f:86:9d:c8:4a:48:c5:53:67:97:f9:77:3b:53:f1:a1:c0:0a:
         b4:ad:18:eb:b5:3d:aa:64:bc:d1:c9:b9:e3:fc:27:ef:e5:52:
         c8:5c:68:22:bf:20:0d:fb:ab:c2:5b:a2:29:04:fd:67:eb:65:
         1d:9f:63:24:20:aa:1d:0a:2f:8d:90:d0:ee:0d:fb:47:55:22:
         fd:58:89:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:16 2026 by rpki-client