Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5/53bb8035-37dd-3bc0-bfcb-0b7a6f615e6c.roa
File:                     53bb8035-37dd-3bc0-bfcb-0b7a6f615e6c.roa (raw, json)
Hash identifier:          tgRLp0PsqbUlDnib+ed2KPMYHYDLioZe0yR11TcADsA=
Subject key identifier:   0F:A8:86:4C:C4:24:AE:2A:1F:64:D0:AB:D3:02:11:89:0E:7C:A1:CB
Certificate issuer:       /CN=4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5
Certificate serial:       010D0C9F4328584F24B268C1A83D076A96D13E20
Authority key identifier: 11:B0:E8:E1:C3:94:E4:DA:BC:02:58:7B:B2:0E:8C:6A:64:42:80:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5/53bb8035-37dd-3bc0-bfcb-0b7a6f615e6c.roa
Signing time:             Fri 11 Sep 2026 21:04:01 +0000
ROA not before:           Fri 11 Sep 2026 21:04:01 +0000
ROA not after:            Thu 10 Dec 2026 22:04:01 +0000
asID:                     32766
IP address blocks:        67.218.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:24:b2:68:c1:a8:3d:07:6a:96:d1:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5
        Validity
            Not Before: Sep 11 21:04:01 2026 GMT
            Not After : Dec 10 22:04:01 2026 GMT
        Subject: CN=29e6322f-f3c7-4154-9c42-fbe81941a1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:e6:17:70:bc:9d:5a:33:b5:bc:fc:88:01:
                    5e:21:87:23:63:47:4c:3a:d3:50:25:b2:db:04:61:
                    f7:ca:2e:fd:40:f3:4e:79:3a:d7:37:e7:14:8a:2c:
                    2f:a4:88:67:3b:79:2d:ed:65:7e:75:54:b7:71:b3:
                    d3:4c:92:02:e4:8f:78:26:d3:fa:c5:10:3b:b2:0b:
                    6a:a0:75:5b:aa:49:b4:60:6a:bb:09:99:6f:2d:dc:
                    fa:cd:91:a1:ce:8c:aa:33:a8:bf:45:7f:49:1b:26:
                    7c:cb:79:54:eb:e9:f8:e3:08:11:bb:26:36:7f:b1:
                    93:8b:d7:fa:65:1c:fc:52:9e:be:cc:54:23:49:3d:
                    84:2c:24:be:84:75:37:ae:36:c3:bc:e8:9a:cf:af:
                    75:31:90:da:8a:10:1c:40:d4:86:55:39:c7:0b:82:
                    75:14:e7:fc:c3:a5:3a:86:b8:e7:27:43:e9:d2:09:
                    0e:bc:b9:f6:95:4f:aa:7a:f2:43:27:e0:58:1b:0e:
                    41:93:d5:86:25:89:fa:db:27:ea:1f:8d:42:fe:e5:
                    76:41:b7:65:45:59:97:f3:bd:4d:93:9a:40:19:87:
                    cc:45:e8:9f:7b:a3:d4:ff:f6:ca:50:49:88:b5:ae:
                    e8:2f:3b:7a:cc:31:ed:b2:69:2d:c0:10:e1:65:8b:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A8:86:4C:C4:24:AE:2A:1F:64:D0:AB:D3:02:11:89:0E:7C:A1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5/53bb8035-37dd-3bc0-bfcb-0b7a6f615e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5.crl

            X509v3 Authority Key Identifier:
                keyid:11:B0:E8:E1:C3:94:E4:DA:BC:02:58:7B:B2:0E:8C:6A:64:42:80:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4138d1f8-adec-4a4d-be6e-4f1ca6eb11c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:2a:ba:be:f3:4e:f4:6b:66:5d:b9:ff:4a:b3:4f:bd:d0:4b:
         32:bf:a5:66:00:81:d9:a8:98:76:24:07:03:e8:cf:c3:11:12:
         66:91:69:dd:9b:76:4e:07:3a:cb:47:5b:96:41:19:f9:6c:48:
         eb:3d:90:ca:81:80:9e:7a:95:d7:fa:42:5b:52:3e:a3:12:84:
         1b:7e:6b:f5:21:78:c3:d4:69:49:8c:33:ac:aa:bb:05:85:38:
         1c:f6:fc:6b:a0:94:25:6a:16:d9:ae:e8:6e:36:6c:60:2a:85:
         fc:f2:7c:1e:16:75:89:65:18:9c:14:6e:05:80:63:ed:4b:c8:
         23:7a:1d:e8:a8:38:c9:ef:11:07:45:53:a6:d6:bb:15:cf:1b:
         cf:ac:c3:ed:c4:3d:45:d9:aa:9c:dd:79:52:ff:a9:d8:8f:d3:
         dc:6f:43:17:62:a3:c9:5a:25:1c:d1:ec:55:d4:63:c2:34:ba:
         4e:20:05:46:12:a8:d9:89:81:44:9c:db:97:e1:a6:a7:d9:98:
         03:d0:6f:07:09:d3:52:a0:ad:04:aa:2d:16:1a:c8:a1:51:f6:
         50:98:a4:f4:cd:ce:f1:c8:ce:8e:3c:f1:ef:26:aa:55:93:5d:
         d4:e1:c2:9e:dc:8e:10:7b:70:dc:04:6f:c1:bd:88:f1:5c:1f:
         f7:ab:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:41:21 2026 by rpki-client