Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa
File:                     087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa (raw, json)
Hash identifier:          6BvfuExnEc3l0ycs+5XGRdMVjD94OBkK6eNAvlNp2e0=
Subject key identifier:   D7:81:22:B2:75:E0:90:D3:4C:15:96:31:5A:4A:3C:33:2D:45:06:92
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584FA85E13E5AC0AC2CB9BC98B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     20940
IP address blocks:        184.29.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:13:e5:ac:0a:c2:cb:9b:c9:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=d9139968-5f08-4671-81f6-64fa58301bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:fd:13:a7:5f:86:a7:8d:ad:d6:80:ea:a8:
                    6e:f0:7c:61:3c:4f:ca:18:a3:35:40:e7:4e:54:e4:
                    69:09:28:c1:1a:79:e3:9b:c0:7b:7f:f5:cc:43:4b:
                    d5:c3:26:95:6d:05:bd:db:96:c4:20:6f:3e:78:2b:
                    09:27:3d:41:ec:ae:0e:33:0e:9d:40:90:39:16:31:
                    ac:51:f2:14:d1:69:ec:00:e9:9e:15:4e:a1:39:8c:
                    a7:29:08:ae:18:87:81:8c:38:4f:83:67:c5:31:16:
                    28:9b:8c:b2:c6:88:14:29:2e:75:92:39:88:37:ed:
                    9d:ad:43:46:6b:c1:6b:08:7d:c8:24:60:90:2c:2e:
                    fe:7e:6a:d9:5c:41:90:06:2f:89:c9:f2:6a:76:e7:
                    f7:ed:5e:9d:4e:15:2a:2e:6a:96:85:a0:95:a6:cc:
                    33:0e:2c:d4:4e:71:de:31:b3:8c:d9:67:f6:5e:eb:
                    99:db:d3:9f:80:df:bd:a7:44:b4:f7:a4:49:b1:75:
                    2e:6b:20:43:ea:41:72:96:2d:22:4a:67:c1:07:80:
                    2d:e9:8d:a1:d8:f0:6c:2c:5e:58:7e:fb:11:52:68:
                    00:57:d0:f4:62:a9:bb:40:97:f8:d5:07:bf:1e:ea:
                    1b:7c:e0:66:90:55:19:b2:24:42:4c:4b:44:d7:cc:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:81:22:B2:75:E0:90:D3:4C:15:96:31:5A:4A:3C:33:2D:45:06:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/087548bd-68ab-3c4c-a0c3-eb28e2d4e047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:de:a3:39:33:90:e3:27:97:fd:eb:a4:c5:d0:61:c2:22:
         da:07:6f:25:4c:42:5e:12:59:8a:31:7a:c1:a0:33:7a:a4:99:
         1b:87:1b:3f:8e:f2:93:75:4b:ab:23:e0:8e:fb:d3:fc:db:db:
         8a:8f:9a:08:26:3f:b2:98:74:5e:36:9c:4a:6f:f1:41:07:bc:
         32:f0:9c:12:1d:9e:e2:c1:b4:a0:42:a6:9b:0b:4a:b5:4e:1f:
         4d:9b:9b:5e:2f:51:07:d9:cc:66:44:a1:ec:fe:e6:86:07:2d:
         20:77:d5:38:46:f9:e6:34:a6:23:72:3c:d0:55:78:56:88:8b:
         ba:7c:1d:1a:e8:ac:e7:a4:e3:c4:18:7e:70:a2:a0:00:3f:64:
         f4:21:bb:9c:fa:0a:3c:17:de:27:5f:ce:d1:06:be:3e:2f:93:
         28:e3:e6:76:92:4b:98:6f:2a:62:05:2c:d3:a5:db:63:b7:08:
         30:f2:3a:3f:c0:e7:8c:de:8f:21:d8:ea:fb:18:46:5a:64:d9:
         66:0a:f1:ad:0b:42:9a:75:33:95:7e:ca:62:f6:b8:42:b0:63:
         ba:1f:98:41:a9:58:69:d4:72:ed:95:b1:e8:a4:e1:c2:33:77:
         55:82:46:59:f2:80:dc:94:f7:4e:ba:26:57:b5:1a:ec:5a:9c:
         76:63:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:47:29 2026 by rpki-client