Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
File:                     1dc07208-ca23-362a-a20c-22d013df9b70.roa (raw, json)
Hash identifier:          liilDNdSuOb6u4bQ9Gmubi/dM4UPxGGzR1QWph5P+d4=
Subject key identifier:   7E:AC:64:57:6B:F3:29:DF:04:CA:4E:50:03:BE:C4:31:91:76:B7:E5
Certificate issuer:       /CN=68f1635e-5871-4108-b726-e99a09258e31
Certificate serial:       010D0C9F4328584F5E62D1EF144BDF21CCCC9400
Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     33510
IP address blocks:        204.126.156.0/24 maxlen: 24
                          204.126.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d1:ef:14:4b:df:21:cc:cc:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=c0773971-492a-4b40-bb1f-12e484358a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:4e:42:a3:57:71:eb:10:25:7a:8e:43:00:
                    d9:32:b5:91:87:c8:f4:37:4e:87:fe:c7:e1:2b:1d:
                    0d:88:64:a9:d2:fd:52:ff:d9:38:77:c5:30:b8:89:
                    97:4e:ae:db:8c:88:3a:c9:33:2e:08:a9:29:94:01:
                    98:26:90:91:ba:a5:8b:23:e9:04:5a:c4:56:86:e4:
                    c0:ee:09:40:8a:e5:24:64:2a:a7:0b:45:0b:78:73:
                    b8:e4:ad:96:37:cc:86:00:2a:37:61:8c:b9:d9:75:
                    c3:66:25:b4:a7:41:94:02:e0:c1:92:49:50:84:27:
                    04:a4:66:98:36:67:3d:87:a2:01:e5:6c:b3:47:d7:
                    ba:eb:ea:84:3b:9e:8b:e8:e3:d2:1f:07:19:93:98:
                    b3:a7:28:23:3a:7a:74:ec:47:61:07:b9:b6:cd:1d:
                    e1:8f:fc:e2:9f:c0:58:d0:e5:43:b9:51:7d:27:5e:
                    fe:4b:da:2e:fd:65:f7:3e:db:12:8b:e4:6f:eb:cd:
                    de:5d:71:0d:d1:75:6d:c6:19:a3:53:fa:0e:a1:85:
                    85:9f:2e:64:99:ba:ae:73:be:b3:41:d8:bc:3c:c9:
                    74:a6:22:6e:e5:25:40:65:63:c6:30:c0:12:07:1d:
                    57:48:0c:7f:42:62:0b:1f:a4:b2:eb:72:4e:4b:97:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:64:57:6B:F3:29:DF:04:CA:4E:50:03:BE:C4:31:91:76:B7:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl

            X509v3 Authority Key Identifier:
                keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:53:ca:36:0c:ba:c7:02:d5:6e:f0:ce:63:b5:ba:0b:dc:18:
         cc:dd:f9:0f:be:d3:b7:7e:24:21:d4:62:98:17:eb:f0:0c:38:
         6e:16:71:2c:7c:b5:3c:5e:9c:5a:1e:f8:f2:c8:15:e5:e1:05:
         09:90:84:b6:7c:a8:55:f7:01:07:ec:47:f3:74:7b:90:24:c1:
         e6:09:75:82:91:8f:8c:4c:19:09:ad:be:94:de:a5:ae:ef:2f:
         6f:54:ff:ad:65:ea:d3:0f:2d:d0:8d:47:6b:b4:4e:c6:e2:27:
         0a:7a:b6:05:48:63:be:b3:cb:2e:66:ac:55:86:76:68:c5:e3:
         34:d9:c6:18:b0:a1:d6:11:e0:3c:01:24:47:be:db:9a:a6:05:
         0c:c8:48:d3:99:82:1e:6b:f9:de:08:86:31:16:89:0f:81:62:
         4d:83:77:a5:8e:46:a2:e5:5e:bf:9d:2f:d8:35:af:88:b7:99:
         ea:70:ef:6b:b3:4d:65:09:59:40:20:f7:92:c6:af:c2:ee:04:
         12:80:4e:c6:5e:72:17:14:f6:37:b9:65:3b:e3:e6:e1:ef:74:
         93:20:ac:40:d6:54:ab:28:e6:c0:56:e6:6d:49:c3:a6:f4:a2:
         7e:41:21:e6:f4:c7:f9:05:13:7f:f2:98:1b:b4:be:66:e0:0e:
         eb:aa:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:35:30 2026 by rpki-client