Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa
File:                     a20e51f0-690c-37b2-93d6-e0013362f971.roa (raw, json)
Hash identifier:          tft6IQnqsp2V3p9xPRhpw4EiLW0vtisXDTSI183KL/A=
Subject key identifier:   09:FC:26:5C:88:8B:5C:C2:CB:6E:1F:7C:F9:08:4D:26:A7:76:5E:8E
Certificate issuer:       /CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
Certificate serial:       010D0C9F4328584F71ED7C1830380C00855EA780
Authority key identifier: DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     46433
IP address blocks:        162.255.96.0/24 maxlen: 24
                          162.255.97.0/24 maxlen: 24
                          162.255.98.0/24 maxlen: 24
                          162.255.99.0/24 maxlen: 24
                          162.255.100.0/24 maxlen: 24
                          162.255.101.0/24 maxlen: 24
                          162.255.102.0/24 maxlen: 24
                          162.255.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7c:18:30:38:0c:00:85:5e:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=bcc984c0-8f80-49ab-ab00-54840da7ec9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:7a:50:fa:bd:f4:fe:52:c8:ae:89:cd:a2:
                    78:ce:1c:ed:ca:c9:e8:7e:3f:44:6f:25:14:ca:27:
                    6a:7c:9f:3a:39:29:6d:ec:08:3d:13:d4:39:08:0e:
                    cb:2d:18:75:52:2b:ec:c1:d0:94:41:ae:38:ed:7c:
                    4d:1e:59:b5:17:06:c7:48:75:54:37:00:ba:35:f2:
                    7f:4e:71:6f:c2:1b:64:32:a0:e9:5f:c5:de:d0:25:
                    b2:79:ce:6f:28:89:f6:8b:57:33:a7:03:fc:6b:1c:
                    29:89:ea:0a:f1:f5:4f:83:ee:fb:ec:3a:5e:0b:2a:
                    67:be:7a:1e:50:0b:3a:44:ef:5c:cb:80:71:0b:db:
                    f2:a0:c3:18:66:33:fb:20:96:2c:be:e5:a3:b9:a4:
                    11:6b:7b:f2:a2:47:b3:4c:5c:46:dc:00:06:c2:d2:
                    84:58:49:a1:52:f0:59:4a:89:06:a5:ba:69:3f:29:
                    ad:fa:2c:d9:12:26:64:0d:0c:0c:08:4e:ae:5e:c9:
                    b7:fb:bc:a5:d8:10:f3:94:92:53:39:4f:ea:d3:b9:
                    c3:33:0b:43:60:b8:ed:14:0f:10:57:96:b6:63:ef:
                    28:35:69:88:10:8a:11:9b:07:d7:f5:4f:b3:1f:6f:
                    92:f6:cc:b6:20:40:1e:b9:ab:c9:88:9c:28:43:a5:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:26:5C:88:8B:5C:C2:CB:6E:1F:7C:F9:08:4D:26:A7:76:5E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl

            X509v3 Authority Key Identifier:
                keyid:DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:6f:8b:ff:28:0b:7d:b6:ef:63:66:9b:73:0a:34:7b:57:
         d9:1f:de:4d:af:7a:bc:22:07:ef:e7:49:b7:56:ba:3f:e4:26:
         38:ae:eb:5c:8e:c0:10:e6:df:3c:4c:47:78:f8:e4:80:fe:c1:
         20:1b:93:5c:6c:91:1b:46:8f:09:46:7f:91:60:68:4e:6b:d4:
         41:51:84:2c:c1:79:33:1e:4a:3a:b0:b8:9f:a4:0d:a8:93:b1:
         35:a7:b9:ea:52:0f:6b:01:29:a1:f0:34:f0:61:40:0f:a1:f6:
         05:97:92:71:0b:24:49:6c:b4:12:c0:fe:75:02:30:33:14:3a:
         87:50:12:e0:29:36:be:7b:f2:37:04:8a:d4:e0:ff:ca:79:56:
         2e:20:5f:29:7f:c0:c8:ce:55:57:7c:72:57:b5:aa:06:b5:b3:
         de:d0:65:f9:80:55:b8:55:35:5c:41:7b:7b:3f:00:6e:d5:23:
         22:5e:fe:17:e0:3a:87:01:45:e0:6f:78:0f:f0:42:d3:c1:34:
         2e:fb:8e:69:39:04:2b:41:99:ab:51:64:d4:a0:14:ae:b8:86:
         74:50:f8:2a:c5:57:62:5e:0f:21:0c:77:38:cd:2c:f8:11:12:
         0f:b3:7d:01:3c:6f:1e:94:a7:a2:56:36:0d:ce:e5:28:d6:bf:
         76:c7:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:25:44 2026 by rpki-client