Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/10f0219f-6a70-352f-a8ee-673ad94142b1.roa
File:                     10f0219f-6a70-352f-a8ee-673ad94142b1.roa (raw, json)
Hash identifier:          +LGZlm0S5S3rArObDBSrd1UmagVtWpuGDJmp2Tfz+Tk=
Subject key identifier:   A0:45:E4:84:5A:3D:2E:9E:DE:69:56:BD:C1:70:BD:CF:A5:32:07:E2
Certificate issuer:       /CN=0aa6c86a-9161-4e12-ae02-d04b278fb03f
Certificate serial:       010D0C9F4328584F9E87F30F826746000073E800
Authority key identifier: FE:1A:A9:32:98:CE:BC:BD:16:E0:B0:4E:B7:CC:05:E0:64:25:64:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/10f0219f-6a70-352f-a8ee-673ad94142b1.roa
Signing time:             Sun 25 Oct 2026 12:27:05 +0000
ROA not before:           Sun 25 Oct 2026 12:27:05 +0000
ROA not after:            Sat 23 Jan 2027 13:27:05 +0000
asID:                     212238
IP address blocks:        134.49.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/0aa6c86a-9161-4e12-ae02-d04b278fb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/0aa6c86a-9161-4e12-ae02-d04b278fb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:87:f3:0f:82:67:46:00:00:73:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa6c86a-9161-4e12-ae02-d04b278fb03f
        Validity
            Not Before: Oct 25 12:27:05 2026 GMT
            Not After : Jan 23 13:27:05 2027 GMT
        Subject: CN=6075ef0e-1cd1-4a33-98f5-6e98bc0e4f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:3c:be:1b:e3:49:60:19:85:fb:b0:e1:c4:
                    e8:4c:6f:b3:a7:92:a4:bc:e3:9b:28:b8:a3:3d:eb:
                    c6:75:d6:c4:ac:a8:77:ee:e7:11:64:83:2b:8e:47:
                    96:87:7f:34:9b:0f:5e:5e:c2:22:b8:0b:cf:9e:c7:
                    e6:ad:d9:fa:05:3e:cb:76:e5:c1:0b:fd:08:6d:39:
                    90:35:3b:c7:77:af:e8:a7:b7:3e:42:bc:e9:05:e2:
                    75:fc:bb:27:37:dd:26:9e:38:7b:e4:97:21:d7:66:
                    51:c1:6e:84:7e:43:b8:21:2a:ff:b7:0d:89:22:16:
                    e1:0e:d2:5d:2d:86:46:0d:c7:2f:f3:f4:fc:3e:d6:
                    e0:26:dc:d7:41:6e:30:d0:e5:ce:77:04:91:96:d2:
                    8d:e7:dc:b3:ec:a5:3e:86:44:91:cc:4d:e0:87:67:
                    9a:2a:02:59:f8:86:f6:62:92:36:52:88:65:fa:6c:
                    59:90:b7:a8:f1:bf:48:75:08:78:9d:0f:6b:8a:82:
                    d5:9e:aa:22:e1:d1:d6:6f:07:4b:bb:3f:43:c3:ab:
                    12:e9:ce:3d:84:c0:d8:5c:7d:cb:a0:68:91:e4:04:
                    0d:a3:fe:05:7c:88:91:ff:7d:fa:1c:e1:c9:62:8e:
                    c8:ca:ca:75:f1:13:d7:38:5a:84:5f:2a:14:56:e2:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:45:E4:84:5A:3D:2E:9E:DE:69:56:BD:C1:70:BD:CF:A5:32:07:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/10f0219f-6a70-352f-a8ee-673ad94142b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f/0aa6c86a-9161-4e12-ae02-d04b278fb03f.crl

            X509v3 Authority Key Identifier:
                keyid:FE:1A:A9:32:98:CE:BC:BD:16:E0:B0:4E:B7:CC:05:E0:64:25:64:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0aa6c86a-9161-4e12-ae02-d04b278fb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:87:59:b5:62:fa:ea:01:e1:7a:cf:34:48:12:79:a3:8d:66:
         96:6d:43:dd:cb:68:a1:9e:ff:03:37:a4:d3:60:f4:82:84:f1:
         de:f7:a2:47:f9:8b:91:63:57:6a:58:75:ce:c2:1e:06:cb:18:
         f8:64:1d:9a:f2:07:64:7e:4d:48:fb:1d:fe:f3:74:72:e5:e4:
         eb:45:c1:c3:8a:23:62:45:4b:8b:55:51:32:e0:f9:a9:0f:b1:
         ca:d7:73:df:70:b2:cc:69:1d:4a:e3:47:46:dd:f3:c0:82:13:
         20:fc:59:43:ff:f8:a5:6b:22:49:52:52:b7:01:8f:39:99:cc:
         b5:67:ed:30:94:9f:0c:55:2b:04:72:98:ec:58:cf:ce:ec:6c:
         de:bd:9b:02:d9:03:12:ee:58:c3:09:5e:33:9b:17:6a:44:52:
         c7:ce:f5:0a:db:71:0e:1e:5d:be:be:27:71:02:cf:47:d7:7a:
         eb:06:da:00:a6:f7:6e:a9:e8:3d:13:e1:29:27:ce:9e:4a:82:
         dc:29:71:f6:19:be:1c:dd:a6:97:8b:17:9f:58:71:2e:00:46:
         7b:06:6b:be:ba:e3:bd:db:6e:3b:6a:7b:a3:53:08:d5:2a:24:
         9b:26:dd:f2:5a:68:a9:b6:03:5c:af:66:ee:6b:01:ec:7e:1a:
         e5:9e:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:15:57 2026 by rpki-client