Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8/1192b9ca-5f2c-3ab1-9481-802a890aa919.roa
File:                     1192b9ca-5f2c-3ab1-9481-802a890aa919.roa (raw, json)
Hash identifier:          UZ9rD2j4OgwA+UF+Od4Ru6OmXDY4zsOQHHwqMHkZM/o=
Subject key identifier:   37:6C:23:0C:E2:9C:EF:01:EB:17:48:7A:91:88:B9:D5:8B:02:F0:B1
Certificate issuer:       /CN=e2b96da3-ad39-4589-9de0-ca0d389b32b8
Certificate serial:       010D0C9F4328584F67714768B19101BC735F8980
Authority key identifier: F2:7A:44:C4:81:DE:26:8F:30:F3:26:D2:C8:80:24:79:02:AF:EB:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8/1192b9ca-5f2c-3ab1-9481-802a890aa919.roa
Signing time:             Mon 05 Oct 2026 18:51:57 +0000
ROA not before:           Mon 05 Oct 2026 18:51:57 +0000
ROA not after:            Sun 03 Jan 2027 19:51:57 +0000
asID:                     11900
IP address blocks:        66.175.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8/e2b96da3-ad39-4589-9de0-ca0d389b32b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8/e2b96da3-ad39-4589-9de0-ca0d389b32b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:71:47:68:b1:91:01:bc:73:5f:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b96da3-ad39-4589-9de0-ca0d389b32b8
        Validity
            Not Before: Oct  5 18:51:57 2026 GMT
            Not After : Jan  3 19:51:57 2027 GMT
        Subject: CN=bb5245fe-d60e-4e41-ab28-0d4fc4bebb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:83:e6:1b:8d:c8:d3:e5:1b:e1:88:3d:3a:
                    b3:30:7a:8c:a4:a4:36:e5:32:2a:7b:4f:c1:06:eb:
                    3f:cb:60:64:fb:7b:80:35:b0:40:c0:a1:5e:eb:9d:
                    5f:c3:3b:fb:8c:ef:eb:6a:e6:3e:7c:22:b1:f5:c8:
                    43:10:e3:23:e2:bf:82:90:d1:69:8e:43:51:3c:95:
                    9d:2c:99:60:a6:57:6a:81:46:e2:7e:b2:52:ef:4a:
                    b7:35:97:a0:ae:c5:7b:bd:a3:2f:e4:4d:bd:a4:e8:
                    84:6c:68:0e:cb:aa:a7:bd:79:35:52:22:04:15:35:
                    56:50:aa:d4:da:00:75:49:07:bf:ed:07:77:0d:24:
                    f3:86:97:35:f3:55:be:7f:36:d0:b1:60:46:f4:70:
                    7b:fe:9e:b2:3e:18:c0:9f:d3:91:33:f3:f8:de:79:
                    1e:1c:cb:fd:18:66:9e:26:ff:6f:51:e6:d6:c0:58:
                    20:f8:7e:eb:9f:5f:a3:81:ad:de:1c:21:64:42:99:
                    e7:15:7a:c6:fe:90:96:95:fb:d3:c5:94:96:2c:b4:
                    6e:f3:a3:a3:f4:47:85:1f:d2:c9:55:85:a4:c7:13:
                    6d:52:a8:83:64:01:d5:59:04:fc:92:64:cd:de:46:
                    c7:46:76:40:c9:d1:5c:9f:09:ec:e3:73:7f:09:b3:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6C:23:0C:E2:9C:EF:01:EB:17:48:7A:91:88:B9:D5:8B:02:F0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8/1192b9ca-5f2c-3ab1-9481-802a890aa919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8/e2b96da3-ad39-4589-9de0-ca0d389b32b8.crl

            X509v3 Authority Key Identifier:
                keyid:F2:7A:44:C4:81:DE:26:8F:30:F3:26:D2:C8:80:24:79:02:AF:EB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e2b96da3-ad39-4589-9de0-ca0d389b32b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:68:f2:ad:01:c1:f6:1a:af:5b:fd:25:b7:20:3e:6e:5c:31:
         4f:59:79:6b:df:19:1d:2c:07:0f:4d:9e:b0:38:c7:77:f9:05:
         67:10:9d:12:3b:7c:86:ae:ad:e1:df:e7:11:e8:ee:c4:80:29:
         58:ac:9a:3d:ba:50:be:26:d0:6b:48:ff:46:db:e4:b1:50:da:
         4c:1e:d8:1c:1e:6f:05:c2:4a:23:e8:2c:9e:ee:9c:25:6a:1f:
         1f:49:ce:80:55:8e:fa:cb:6c:90:54:df:55:28:a9:41:76:aa:
         48:27:52:c8:38:55:94:4c:2c:21:7e:00:dd:33:26:ec:52:7c:
         74:a1:21:25:ff:7b:b1:82:e4:b1:c7:3c:4b:2e:af:52:01:57:
         e9:75:07:81:52:61:90:5f:b7:3a:17:06:52:ac:23:ec:72:a1:
         cc:d0:38:75:95:c2:db:f6:75:74:2f:fb:5f:de:8e:94:a4:f5:
         00:57:5e:f4:57:f6:a7:c0:75:ea:7c:8e:20:54:a4:25:14:e3:
         af:40:dd:57:aa:a8:85:f2:9a:c1:c6:90:34:8d:0f:55:4f:86:
         6c:24:46:a4:7c:cc:9a:29:99:11:b2:fc:3d:10:af:35:c1:02:
         d3:85:07:c1:f5:0e:31:08:86:95:cf:89:c4:d3:7a:97:c7:36:
         4c:20:2b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:53 2026 by rpki-client