Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a9d7d8e2-7499-3d59-8e04-430a9d943e13.roa
File:                     a9d7d8e2-7499-3d59-8e04-430a9d943e13.roa (raw, json)
Hash identifier:          M7y7pMAuWI9CWalnBPWmEmdYJ0VlV/OXdXnYeClbQAs=
Subject key identifier:   E3:1C:32:B1:D1:08:07:18:8D:1C:D8:AF:69:BC:C5:15:5A:95:FB:A5
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F655D66E3E656DF14191EC700
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a9d7d8e2-7499-3d59-8e04-430a9d943e13.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     32099
IP address blocks:        65.118.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:66:e3:e6:56:df:14:19:1e:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=24530651-cda2-48f8-9785-f8ef11717d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:7f:98:e7:c0:67:a9:f9:18:1e:a2:8b:eb:
                    7c:24:22:f9:f3:04:16:03:20:78:4f:ba:ca:0f:29:
                    95:de:a5:62:31:9f:46:35:d6:3d:ec:71:d1:a9:9f:
                    b7:5e:e0:57:3f:d6:22:82:59:08:ba:85:e0:e8:ed:
                    ab:88:66:64:6a:56:27:4f:81:1a:91:6c:4b:8f:65:
                    a7:6c:0f:fc:a4:1c:d0:ff:16:12:4e:0c:57:f0:2b:
                    23:a2:18:7e:55:c2:9d:5f:69:eb:be:05:02:20:47:
                    1d:ca:c5:ad:fc:e5:eb:02:56:bc:47:0d:c5:5a:c5:
                    f2:4b:8c:b4:24:db:83:cb:ee:0d:63:45:59:d7:55:
                    c4:c9:5c:89:c9:3b:31:03:69:e3:c4:f1:59:ee:b8:
                    55:8c:ea:05:d6:08:cd:80:4a:4d:2b:65:65:59:00:
                    bb:5e:50:f1:ba:b1:d2:0e:bf:cc:66:9e:9a:47:b2:
                    e8:d3:c4:8f:3d:6a:3c:62:10:e6:3c:e4:a6:02:26:
                    3b:0b:bd:7b:df:5b:ad:cf:66:7e:82:d2:25:7c:cb:
                    b8:1a:5b:cb:c3:c8:98:ca:a6:eb:1c:b4:b6:9a:2b:
                    96:2b:47:0d:48:4a:3b:10:af:2e:d5:91:7a:24:cf:
                    69:1d:52:d8:d4:ca:ef:b5:e0:02:ca:ba:dd:15:d3:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1C:32:B1:D1:08:07:18:8D:1C:D8:AF:69:BC:C5:15:5A:95:FB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a9d7d8e2-7499-3d59-8e04-430a9d943e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.118.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:4a:2c:2a:a3:b2:bf:69:22:e1:26:a5:5f:74:da:51:01:
         b5:df:d4:1a:bd:d5:81:f3:9c:dd:c8:74:64:98:4a:28:d9:ef:
         29:d1:ce:e2:0c:db:93:a3:10:36:dc:30:96:f9:b0:c6:8e:2d:
         7d:dd:d5:55:9a:1b:f4:ce:1c:3c:bf:5e:84:5d:59:f6:e9:c3:
         d2:75:d0:c7:69:ae:f1:e6:03:b7:bf:41:68:4b:8f:c7:bb:49:
         0b:ce:58:d7:7e:74:f0:15:b5:25:9c:fc:c6:66:07:f7:be:9d:
         39:b2:0c:ab:ec:79:77:f1:eb:63:25:22:07:5a:7a:6c:46:2d:
         4c:be:97:3f:c0:4a:ed:d6:59:be:02:56:7f:86:b2:12:cb:b7:
         37:a3:b7:73:34:6b:6c:0e:a8:4e:2a:49:b5:ce:21:ca:48:e0:
         bc:48:69:58:bc:43:97:e1:83:0b:9a:66:38:4b:0c:a2:3a:e3:
         7c:53:c6:37:56:58:05:4a:f1:f1:c5:e0:45:69:7f:ee:4d:8e:
         97:0e:cc:eb:04:ce:e0:89:07:52:62:e7:89:ac:f8:74:72:04:
         32:f4:8b:9b:f8:83:ff:2a:54:ad:ae:b7:08:75:6a:0f:28:55:
         fe:7f:de:21:86:21:97:2a:40:d2:94:42:5c:15:ae:2a:e9:fd:
         b8:d9:3b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:12:27 2026 by rpki-client