Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/68ac186a-0f51-3986-908f-653c0bba85a9.roa
File:                     68ac186a-0f51-3986-908f-653c0bba85a9.roa (raw, json)
Hash identifier:          1UGLgXsutVmFj+lS+p82fjSw6miypWEFhlUmXHOJNV8=
Subject key identifier:   BF:37:DE:D6:A0:89:92:69:35:7F:A4:8B:6F:B2:C1:D5:A8:72:18:DF
Certificate issuer:       /CN=1407f58d-27a8-42a5-b73e-1fe35081c6df
Certificate serial:       010D0C9F4328584F542E1229E9474F9816390B80
Authority key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/68ac186a-0f51-3986-908f-653c0bba85a9.roa
Signing time:             Mon 28 Sep 2026 21:16:11 +0000
ROA not before:           Mon 28 Sep 2026 21:16:11 +0000
ROA not after:            Sun 27 Dec 2026 22:16:11 +0000
asID:                     32586
IP address blocks:        173.45.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:2e:12:29:e9:47:4f:98:16:39:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df
        Validity
            Not Before: Sep 28 21:16:11 2026 GMT
            Not After : Dec 27 22:16:11 2026 GMT
        Subject: CN=6dc986ed-0e7a-45ce-bea0-5bfb2ab27bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:8f:0e:63:2f:ed:fd:ac:dd:65:d7:5e:f3:
                    d9:35:bb:d1:a8:03:83:df:2b:06:53:12:de:98:b1:
                    39:ec:0e:88:33:60:29:d1:24:8c:05:15:d1:6e:7b:
                    d8:0e:03:b7:3c:d9:47:1e:2e:d8:bb:d3:89:bd:a2:
                    cf:ef:a4:e3:e0:ca:43:4b:bb:f9:0a:aa:f3:34:80:
                    d8:5f:71:28:a9:48:4d:d7:34:f8:db:2a:7e:de:e9:
                    77:ca:40:48:02:7f:55:59:89:16:4d:96:c2:e2:8e:
                    60:ce:a0:19:82:41:60:fd:82:50:40:75:ea:38:d2:
                    96:d6:0d:65:e2:2e:67:af:34:e5:68:64:10:5e:89:
                    42:ba:84:d8:3d:49:11:fc:ed:35:5a:9a:f0:93:a1:
                    c3:fe:a3:78:66:40:08:c8:6f:78:06:4e:28:17:7b:
                    df:cb:3b:5a:6d:b5:5d:ea:6a:bc:d1:ad:24:6d:e2:
                    51:58:4b:f7:80:07:c4:44:0f:53:46:cd:42:12:1a:
                    21:ab:d8:57:ee:1d:1f:18:ef:b6:2d:bc:4e:70:76:
                    20:03:66:89:a6:c5:4e:9f:c5:24:f1:e2:88:8c:1e:
                    3d:4b:e8:36:08:d3:12:ab:96:01:82:48:d1:b5:44:
                    ad:fb:3b:4e:aa:ae:c1:1d:62:f5:99:37:b3:d0:aa:
                    40:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:37:DE:D6:A0:89:92:69:35:7F:A4:8B:6F:B2:C1:D5:A8:72:18:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/68ac186a-0f51-3986-908f-653c0bba85a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl

            X509v3 Authority Key Identifier:
                keyid:A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.45.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:01:3f:04:86:bd:87:5a:af:9f:eb:55:b3:4f:f7:1a:5d:97:
         a7:e4:15:78:25:88:4f:2c:f5:fa:8e:3f:86:2f:d4:ea:ef:0c:
         85:63:18:23:ec:14:98:e4:ee:d3:7d:0f:be:fe:14:df:e1:82:
         95:50:1b:7c:0a:31:ea:ca:0e:e5:e4:05:4b:ce:a0:3c:97:56:
         1c:ab:84:fd:53:ed:72:e3:ef:92:22:f8:a7:38:83:01:fa:af:
         03:19:cb:e3:a8:e0:d6:12:5e:96:b8:d2:79:22:c8:15:b6:5c:
         65:ab:87:3a:9f:0b:80:3e:c9:b4:fe:a2:f2:b8:c7:63:21:92:
         a5:d1:45:04:03:6d:91:3a:6e:28:32:8d:1e:66:ea:40:bc:71:
         81:a2:0a:c6:73:cf:1f:3d:34:91:9f:4f:c4:63:3c:c1:3a:f4:
         de:00:c7:54:2f:68:7d:5f:ce:18:10:71:f4:5d:47:e3:df:bd:
         75:52:64:3b:c1:d1:c2:55:aa:70:0c:6d:dd:0e:d6:1e:57:00:
         6a:c3:06:14:85:d0:b6:aa:21:50:e5:70:69:eb:40:50:38:be:
         60:53:8c:ce:45:5f:84:0d:e8:1e:50:6c:39:e6:f2:a7:d1:f2:
         92:2e:01:1b:05:c1:de:c9:e5:6f:ea:83:2e:fd:ef:1f:2f:d4:
         07:66:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:28:31 2026 by rpki-client