Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa
File:                     44317ae9-344d-3b8c-9ed1-37939fb83b58.roa (raw, json)
Hash identifier:          +iOkIttZ1Laq3Zsx2E+OoPnCvw2at2jaoMo5PIxgoWw=
Subject key identifier:   F6:24:D7:53:25:CF:B4:7F:3D:B7:31:8E:BB:5B:69:1C:DF:A8:0B:8F
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F4328584F9BCDEE762D2B7DEA89CD4980
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     16276
IP address blocks:        40.160.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:ee:76:2d:2b:7d:ea:89:cd:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=185f0cee-8eaf-4375-a236-3fb01c974e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:b5:ca:12:06:02:37:f8:b3:d8:4f:f7:93:
                    16:01:51:f7:46:bf:cd:cc:bd:2e:2d:ea:18:9f:09:
                    9c:93:3d:8b:6b:c4:79:d2:21:2f:7c:40:36:a3:a6:
                    2b:d6:d1:54:8f:aa:e0:49:3c:9b:5a:a7:47:08:e4:
                    0a:7f:6d:9d:44:ad:45:d6:1e:f2:82:44:82:72:8c:
                    ac:47:7a:03:22:de:4a:cc:47:78:af:41:53:dc:25:
                    97:66:4b:ac:74:e0:a7:c8:2f:8f:39:93:0e:7d:3f:
                    0b:0f:23:ac:ec:18:8b:bc:18:29:a6:63:3a:16:40:
                    50:a9:dc:c7:f8:4a:5a:2b:11:2b:ba:c6:55:28:af:
                    91:03:c1:b4:33:3e:28:01:57:fb:e3:0a:db:80:16:
                    d1:e1:4c:4e:67:92:51:94:69:51:56:5f:92:ed:f8:
                    7f:dc:40:23:b2:78:f0:69:08:af:87:d8:01:ef:96:
                    e2:c6:42:a3:09:18:c2:5f:be:5c:0a:48:4b:a2:cb:
                    8b:1a:e2:45:ec:c4:14:e2:f7:eb:ce:98:a2:28:db:
                    7d:f4:d1:86:17:d3:0e:d9:b1:2b:1d:f7:6d:71:49:
                    25:6e:df:94:8a:87:c7:2e:78:a0:b9:a4:46:2f:5e:
                    a9:45:26:41:5e:e1:97:6e:0b:a8:cb:27:79:a9:58:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:D7:53:25:CF:B4:7F:3D:B7:31:8E:BB:5B:69:1C:DF:A8:0B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.160.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:86:e7:a8:49:0f:fd:94:71:ed:d4:85:70:14:40:46:9f:
         6e:c2:42:3d:30:08:00:a3:97:04:fe:ad:1b:c1:64:15:ae:77:
         96:3a:63:23:a3:1a:8c:46:ae:54:ad:11:11:48:40:c7:cc:54:
         2f:cd:6e:7a:b1:2c:ab:4a:4e:c0:b8:a1:e5:36:57:6a:b4:8f:
         02:f5:6d:96:33:d1:af:14:db:ff:be:c4:0d:68:da:67:97:ef:
         9b:1d:77:76:80:27:dc:3f:3b:0b:9a:25:14:4f:c1:e2:3b:48:
         29:45:39:04:74:8c:69:3e:6d:d2:6b:4e:03:c0:3d:bf:bf:a7:
         2b:9e:b5:50:e6:6d:0a:7f:85:c3:27:20:2a:2b:de:da:28:35:
         98:a8:ae:c5:3d:7b:96:28:e6:4a:ba:89:3d:93:8b:83:73:12:
         14:64:c5:b2:a6:2b:f3:ab:46:14:53:b8:43:f3:76:34:37:d3:
         36:b7:84:85:59:67:f8:32:b9:a1:0c:cd:1f:cb:25:f8:13:08:
         40:9e:f7:43:ff:8d:50:0d:cb:9b:5e:e7:05:85:f3:b5:b9:ad:
         9c:65:91:67:2b:6e:f4:55:66:bc:41:25:2e:75:09:e0:1c:de:
         a6:7a:04:1b:1f:d8:5e:04:b0:5b:68:2f:2d:d0:48:28:c0:22:
         09:8e:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:25:37 2026 by rpki-client