Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa
File:                     e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa (raw, json)
Hash identifier:          Wqnvwke2Vc9E0DIk5MQ9iiMNmc3pqJIlWNzDVkBC5dM=
Subject key identifier:   73:60:2C:4D:77:2A:6D:69:56:7E:15:3F:E1:CD:D6:69:52:5F:1E:11
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F4328584F6F22E0D7BD116937A1558190
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     40028
IP address blocks:        162.252.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e0:d7:bd:11:69:37:a1:55:81:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=51dd2b29-2584-4c37-9ff7-aa729a1dab7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:51:fc:57:8e:d9:1c:37:9a:b8:35:9b:77:
                    17:3a:4c:c7:99:7f:2a:40:4d:5e:64:07:3b:b3:86:
                    f3:cf:2a:08:3d:af:5b:a5:d9:8c:f4:fd:63:17:ee:
                    5b:9f:e1:0c:4b:98:70:2d:4c:79:fe:d9:20:0a:5e:
                    d6:a5:3b:42:2e:cd:09:69:3e:cb:84:6b:5c:60:e7:
                    f9:99:b3:f5:21:54:12:55:25:6c:f1:b9:ca:a5:d0:
                    55:cb:c4:25:6e:00:20:9a:1b:8e:9d:11:84:4b:d2:
                    27:fb:e3:a7:f6:f6:cc:32:9e:83:a6:f5:fd:20:a6:
                    25:5a:30:77:47:e4:d3:41:e1:4e:4c:ea:42:15:5a:
                    0f:ca:58:de:cd:5c:ac:85:49:09:39:5a:5a:5d:50:
                    9e:d9:ea:ef:64:d2:00:e3:bd:4a:17:f9:55:aa:d5:
                    4d:98:ef:58:07:88:d7:2c:1f:a3:5b:ac:5a:a1:e1:
                    93:91:e1:1c:ac:b3:a1:5f:73:ce:2a:4a:ba:28:a9:
                    2f:77:cb:58:fe:c7:a3:36:29:88:b6:6e:8c:e1:60:
                    b0:fd:bf:93:05:f9:f2:32:fa:3d:65:4e:54:0e:61:
                    5f:89:65:df:51:93:76:b4:28:ac:16:ff:60:88:a6:
                    10:45:32:dd:d3:62:91:3d:c9:77:3d:da:84:9f:f5:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:60:2C:4D:77:2A:6D:69:56:7E:15:3F:E1:CD:D6:69:52:5F:1E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:12:d1:59:09:c8:bc:43:aa:a0:74:44:45:66:8a:c3:1a:1e:
         43:ef:3a:cf:3d:3a:61:0b:d2:ec:29:a8:be:7a:80:d3:7d:74:
         e2:1c:bd:72:21:91:ff:bb:94:d7:53:1b:ed:75:dd:6b:0c:65:
         16:ae:91:ad:8c:24:f2:24:b7:50:a0:b1:55:b5:22:5c:f2:e8:
         0f:a7:71:98:20:ba:2e:e6:7a:84:65:27:df:51:57:85:08:aa:
         f4:15:19:78:fc:6d:aa:f9:8a:90:b0:d0:91:24:f8:9f:6b:89:
         d4:86:b4:96:2f:be:f4:c1:8b:0b:10:5f:fd:11:58:a6:fd:b2:
         ca:b3:be:fc:cc:63:76:73:ce:a1:6a:09:b6:ab:15:63:c9:b7:
         f7:f7:ce:e9:1e:07:c9:4a:91:e3:cc:57:e2:c8:01:be:18:c9:
         12:4a:64:75:14:ea:f2:81:fe:aa:f8:c4:83:a5:fa:48:1d:c2:
         45:bb:cc:8c:08:30:dd:70:1b:b3:e3:55:97:b2:be:6e:4a:bb:
         5e:28:53:fe:26:58:be:37:33:84:08:e6:e4:b5:03:21:d9:db:
         b0:57:d4:6d:90:e6:ec:e4:e5:ff:c8:90:cf:dd:e3:8b:21:3f:
         52:fe:84:49:a4:a3:b2:f8:a8:5e:65:8e:93:0b:94:2c:8a:01:
         75:90:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:09 2026 by rpki-client