Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b841e665-b6e4-3827-8355-77cc86b4415c.roa
File:                     b841e665-b6e4-3827-8355-77cc86b4415c.roa (raw, json)
Hash identifier:          aIY3vv3KolEaHo88nK2Bc39mS7fD8QOa72BRr+dA+Rc=
Subject key identifier:   AD:CE:83:0E:AA:75:82:00:F5:7E:9A:AB:9A:D0:B1:96:D1:5D:D3:8C
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584F4973DF8D2E52890402A1ACC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b841e665-b6e4-3827-8355-77cc86b4415c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6643
IP address blocks:        199.36.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:df:8d:2e:52:89:04:02:a1:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7a96a8a1-30c2-4572-990c-b29537025de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:85:9b:5d:5c:9f:58:fd:c0:5c:cc:88:0f:
                    33:23:1f:dc:fe:de:e3:41:16:fd:73:52:21:e1:e5:
                    53:5a:b4:11:f3:a3:5e:6b:51:c4:be:e0:3a:bc:35:
                    4b:6b:62:a8:74:16:2d:e5:06:c8:43:37:bd:9a:88:
                    a0:aa:82:d5:4b:93:37:78:d6:6f:e0:f4:cd:87:49:
                    51:03:46:e7:42:cc:c2:5d:03:52:2f:43:d2:14:4e:
                    48:39:5c:87:cd:b1:13:e4:a9:89:a5:0d:6a:b1:86:
                    75:d4:95:9e:62:e6:ff:6f:17:6d:31:59:2b:51:30:
                    24:00:6b:28:88:69:e0:b3:26:f0:45:e3:52:5d:69:
                    39:a4:73:a8:70:b3:99:5b:c5:ff:86:c4:ee:69:88:
                    9c:59:11:dd:1a:44:22:c1:56:f3:6d:56:3d:ed:ea:
                    d7:9e:92:b5:8d:3c:8d:2e:c9:cc:a9:93:e2:f2:a7:
                    e3:75:ac:95:af:36:15:32:9f:21:d3:52:18:8b:f5:
                    2a:17:7f:24:f4:7d:7b:0a:7d:1c:65:08:bb:c0:80:
                    17:2f:eb:c0:92:ea:4a:6e:9c:4c:af:7b:0d:42:47:
                    d4:50:02:cb:99:8b:16:ea:53:8d:35:91:56:62:39:
                    96:70:7c:21:1a:3d:18:55:3b:ba:b1:3a:73:55:27:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:83:0E:AA:75:82:00:F5:7E:9A:AB:9A:D0:B1:96:D1:5D:D3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b841e665-b6e4-3827-8355-77cc86b4415c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:47:3e:a7:b0:42:ec:fe:13:f3:4d:34:f2:71:0d:e3:db:f5:
         00:98:f5:95:e8:e3:22:2f:d8:20:71:c7:f6:bd:06:83:76:4d:
         a4:8e:07:94:ec:23:a5:54:9d:49:d3:13:28:5a:ae:df:0f:13:
         f2:7b:23:50:18:cb:66:10:c8:2d:fa:cd:1f:78:46:d8:d6:39:
         be:88:bd:08:c3:17:f8:21:e7:6f:0b:9d:2b:5d:4f:5e:a3:6c:
         23:d6:69:ce:9e:ef:3e:01:e3:00:a9:48:73:db:3d:f6:cd:9c:
         66:42:a8:10:10:02:0e:ae:9f:64:fd:de:b3:f3:69:7f:78:76:
         33:a2:1a:aa:8b:a1:54:4c:dd:be:7a:54:0e:2a:72:6c:d7:9f:
         a9:0c:76:fd:40:13:26:6d:ca:4a:36:3c:a8:fb:fc:f2:fe:9e:
         48:c6:0e:5a:8c:e1:a7:e3:78:54:a4:25:54:14:c1:59:da:e1:
         3a:fd:c4:70:91:49:25:2f:51:7a:29:87:b4:73:7c:89:50:92:
         dd:04:d0:e3:19:5e:7e:52:70:3b:43:85:ba:e3:34:3d:d7:a2:
         d2:bb:28:5d:97:4d:ca:0f:1c:fc:a4:97:42:53:a8:f3:9f:1e:
         e8:2c:38:08:67:b1:9a:76:9d:df:db:5f:5a:fa:c4:48:1d:71:
         a9:e5:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:00:06 2026 by rpki-client