Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa
File:                     0cff3be4-0a87-36be-9260-19d9a164f049.roa (raw, json)
Hash identifier:          MXjMk6+VxsjFf0pFt6IZRg5dfKnK5cCs2MUZxZFSKjc=
Subject key identifier:   9E:B7:07:37:10:B8:13:7D:63:29:88:C8:58:C8:3A:E1:1A:D8:29:50
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584F5A32D197BAF01978AA639880
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     22079
IP address blocks:        64.186.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:d1:97:ba:f0:19:78:aa:63:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=62997d6a-0d02-426c-8251-10f4a60004ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:eb:d2:35:38:ff:e1:55:3b:27:23:01:ae:
                    92:63:57:c7:f4:f6:0b:fa:25:77:22:ad:51:a4:b1:
                    c1:a1:ad:e3:59:69:24:95:61:e4:d3:a3:0a:4e:47:
                    fe:d5:f5:5a:f8:57:23:ca:ed:74:48:17:3d:94:4b:
                    5e:94:66:bd:2a:ab:71:75:87:60:17:f6:ef:d9:37:
                    4f:5e:d8:e1:f0:90:bb:28:0a:5b:bb:1e:7f:2b:35:
                    36:77:3b:0d:d9:0f:de:0d:bd:bd:60:9b:82:5c:6a:
                    88:21:a5:5f:8f:30:ea:c2:31:25:e7:d0:6c:36:87:
                    98:f3:10:58:81:44:31:f6:f2:01:20:99:05:b2:5a:
                    10:e5:0c:38:ce:f7:ab:46:b9:94:67:6a:f9:08:da:
                    61:61:04:8a:85:c6:18:ec:83:d5:56:98:9c:22:19:
                    c8:e4:74:24:5b:5e:eb:91:6f:53:06:eb:ad:c5:07:
                    d2:e9:88:41:eb:02:6c:dc:09:d7:2b:3f:0d:4d:29:
                    01:68:25:62:37:0d:e2:3b:91:bb:06:c7:a6:56:95:
                    3b:fd:2f:3b:0a:08:1f:45:b2:bc:d1:3a:7b:e4:d0:
                    3a:f0:22:e1:07:9e:ad:f4:93:9c:1d:71:a7:3b:be:
                    0b:8e:78:56:b8:ad:b2:93:c4:93:d2:e7:07:4c:29:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B7:07:37:10:B8:13:7D:63:29:88:C8:58:C8:3A:E1:1A:D8:29:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:43:e0:98:95:c3:d8:4d:d2:46:48:3b:8d:ad:50:7f:f3:92:
         c3:04:db:a3:6e:40:53:b6:f5:6f:89:96:64:81:cf:b2:91:7f:
         d2:44:60:c2:89:0c:47:52:3a:90:68:e3:8b:f3:0c:43:5f:18:
         38:0a:99:23:f2:fc:dc:c3:bf:f3:a2:98:29:63:6b:01:c7:fd:
         f3:d8:03:41:0a:f5:4e:91:5b:ff:c5:26:83:a3:84:71:bd:a7:
         c2:60:67:81:8f:7a:fc:a3:78:1d:bb:0c:ed:e7:eb:38:82:17:
         53:a8:b6:31:09:c4:f5:b5:22:4e:f6:c4:87:97:b8:d3:3d:ad:
         52:04:be:e7:03:30:33:de:44:14:8b:b2:31:c9:05:a2:c9:3b:
         12:8d:2a:d4:91:b9:a6:8a:d2:1f:ef:50:0c:0d:1f:1e:3d:cf:
         9e:5a:98:a7:96:72:64:dd:c5:a5:9f:c9:0a:12:f0:d9:94:87:
         33:57:3b:7c:15:84:f4:e3:8a:d2:5d:87:5c:7a:e0:a0:1e:e8:
         7c:98:9d:a7:8d:ff:26:d8:86:25:94:a3:d3:7c:cf:26:c0:ca:
         91:c8:0a:f0:c7:c8:05:46:49:ab:46:eb:d6:bc:4a:4c:7a:d1:
         25:79:bb:46:c2:91:fe:9a:e4:14:4c:55:41:39:65:98:6a:f9:
         85:62:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:52:29 2026 by rpki-client