Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/91a68696-0616-37b3-b063-a6004ad6efe4.roa
File:                     91a68696-0616-37b3-b063-a6004ad6efe4.roa (raw, json)
Hash identifier:          uQoGVY+ZliBySR6ZWcfH+6QE6rBSE6sjWyv3qu0t3EY=
Subject key identifier:   6B:B2:9E:2F:67:AF:FE:07:26:EA:64:34:E7:68:18:55:4C:15:FE:A0
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F7E696DC7104072DFF7482000
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/91a68696-0616-37b3-b063-a6004ad6efe4.roa
Signing time:             Wed 14 Oct 2026 00:19:44 +0000
ROA not before:           Wed 14 Oct 2026 00:19:44 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     40934
IP address blocks:        159.48.186.0/24 maxlen: 24
                          159.48.187.0/24 maxlen: 24
                          159.48.188.0/24 maxlen: 24
                          159.48.189.0/24 maxlen: 24
                          189.25.44.0/24 maxlen: 24
                          189.25.53.0/24 maxlen: 24
                          189.25.59.0/24 maxlen: 24
                          189.25.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:69:6d:c7:10:40:72:df:f7:48:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct 14 00:19:44 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=bb740de7-a3dc-4a0f-98c6-1e00101a4172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:e6:fb:5a:5b:c0:53:aa:34:e3:ea:55:9b:
                    ca:e9:3a:a5:8b:fd:db:7a:d9:01:fc:83:d7:f9:ad:
                    d7:ab:d8:1d:63:5e:b4:d5:c9:0f:cd:93:32:6f:2a:
                    48:39:f2:06:50:67:37:45:3d:38:a4:14:e7:37:d7:
                    fe:5d:e8:ac:92:0a:2f:c5:66:0d:f8:98:f8:e0:95:
                    9d:78:70:29:f3:1f:5a:b3:01:6d:34:61:05:c0:f4:
                    b4:3a:04:7a:22:77:3b:e4:38:f7:b6:5a:6f:72:11:
                    a8:da:4f:87:f0:5c:82:be:3b:52:d6:e5:7e:c1:30:
                    8c:d5:b8:cc:95:c1:f0:cc:6a:57:21:a9:f1:6e:6c:
                    76:07:69:9a:9c:eb:a8:c7:df:7e:72:40:b0:73:9e:
                    84:9c:38:34:1a:1d:78:a7:09:e3:65:d0:be:1c:2e:
                    45:68:b0:0b:e4:d5:03:cb:e0:4f:e6:ca:f2:51:a1:
                    2b:3b:2a:a1:c3:55:7a:1b:7c:9e:36:b4:6d:c2:e6:
                    e2:67:3d:cf:c6:24:47:91:fd:98:83:4e:b1:0e:e2:
                    e6:9d:70:19:ac:16:ee:82:4b:c3:7f:57:a3:8e:98:
                    92:a1:f0:e0:d5:a6:15:ed:ce:b7:aa:59:a0:2e:bb:
                    36:cd:e0:a1:35:b8:19:40:06:35:56:07:d4:20:4b:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B2:9E:2F:67:AF:FE:07:26:EA:64:34:E7:68:18:55:4C:15:FE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/91a68696-0616-37b3-b063-a6004ad6efe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.48.186.0-159.48.189.255
                  189.25.44.0/24
                  189.25.53.0/24
                  189.25.59.0/24
                  189.25.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:b0:60:bd:d5:9c:59:b3:05:b5:ea:98:4b:c4:e3:4d:fb:
         60:3e:73:6f:63:63:24:59:66:b4:b8:74:6f:e0:b1:8a:aa:fe:
         2a:53:d0:42:3d:57:e9:4b:6c:82:79:25:7b:cd:f2:21:d9:b5:
         37:15:40:a5:0c:c1:f6:d4:f5:c3:1a:36:51:e7:e9:35:80:f6:
         2f:23:fe:93:93:c2:a4:4a:fc:d7:67:8f:fb:eb:b9:c1:6c:43:
         09:ef:69:79:5f:d7:10:04:11:c9:84:bc:56:91:07:7d:61:9d:
         76:49:43:d7:07:1b:76:6f:3c:f7:d2:db:43:01:52:fa:d0:1d:
         36:44:ab:35:2c:d8:b4:0a:0a:57:88:58:13:f3:e2:00:00:56:
         40:a6:1b:4b:63:d4:24:3e:ca:cd:cd:20:22:e2:c1:02:4f:e0:
         b5:34:d4:66:82:8e:af:48:68:c5:a5:01:94:bb:ca:c1:bf:dc:
         66:10:ca:4e:7f:95:a6:83:8c:5b:5f:10:bf:7e:9e:44:5b:62:
         d1:6a:9c:fa:bb:e5:b9:aa:8f:f1:87:4f:6e:d5:2f:ea:95:4b:
         92:e3:21:26:a7:4c:c1:74:b9:f1:92:b7:23:bc:fd:01:ee:8f:
         1b:2c:06:9d:5a:b5:3b:15:7b:d5:25:ef:b0:9f:c7:ac:af:c8:
         90:dd:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:16:30 2026 by rpki-client