Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa
File:                     3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa (raw, json)
Hash identifier:          k1YTKLwcpfOQxETLfz8TFJE2/iQPMoTasZU2ocbbgiE=
Subject key identifier:   72:23:2A:E7:1A:DE:1F:28:44:A0:FB:84:C4:50:85:19:A4:54:9E:4B
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584F6C5852541BC130672C18DD00
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     36549
IP address blocks:        162.249.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:52:54:1b:c1:30:67:2c:18:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=ac4cfc71-33f2-4c03-aa70-1dc24226f25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:d2:72:14:07:23:35:59:31:c3:6c:35:49:
                    b2:d2:02:c6:15:ae:7c:b1:80:64:1f:4e:33:99:48:
                    ee:75:e0:78:76:97:3c:e7:99:70:e1:c8:2f:21:09:
                    bc:a4:05:a0:a3:f6:a4:23:86:0a:be:dc:48:b3:0b:
                    2e:79:be:04:fa:b9:1c:0b:05:d1:e4:15:13:4e:42:
                    61:90:9d:c4:73:d6:ac:0a:4f:0c:de:be:2b:ee:d8:
                    f0:38:ad:b2:92:eb:78:1c:e5:95:2d:30:cf:b3:ab:
                    6f:aa:04:59:1b:52:81:ba:19:99:05:9a:73:3e:70:
                    0d:70:86:a4:6a:fb:de:7d:89:28:4d:e8:14:ed:80:
                    32:98:6b:93:0f:36:66:dd:4d:2e:28:25:42:82:61:
                    bb:c7:5f:1b:0d:32:ee:ff:ad:4a:c2:f1:b2:78:90:
                    e5:19:fd:11:73:6d:6d:a3:ab:84:e1:31:c8:54:ef:
                    25:bb:54:91:11:9c:31:4e:ba:80:af:72:5f:71:a8:
                    3f:1e:1e:11:f5:71:8e:82:25:48:e3:59:ea:80:47:
                    36:46:bf:cf:4f:78:fb:4c:65:1c:ff:0e:3d:ca:42:
                    b1:94:4c:90:0c:1d:31:99:c5:eb:5e:ad:24:e1:5b:
                    c6:38:4d:76:8c:73:ce:84:a0:6d:d4:50:0a:00:90:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:23:2A:E7:1A:DE:1F:28:44:A0:FB:84:C4:50:85:19:A4:54:9E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b8:89:11:1c:23:b2:37:9c:6b:d6:68:f2:b0:16:fb:f7:e7:
         c0:a4:d0:a5:b5:80:bd:8b:4b:c1:51:78:a7:71:30:9c:0b:3f:
         c0:f5:8f:f4:bd:22:15:04:4b:00:61:bf:5f:d6:27:83:b4:07:
         84:da:75:18:8b:53:a2:3f:be:7b:50:22:57:3a:81:52:40:89:
         60:2f:0d:d2:97:67:45:aa:c9:0c:1d:53:ff:9d:23:6b:f3:09:
         cd:d7:59:41:ce:43:60:04:1e:2c:06:ee:37:ee:0b:ff:f0:19:
         4b:de:c9:d1:4f:24:6b:8f:2e:c2:26:c8:09:a5:1d:2e:41:6f:
         be:8e:4f:95:f1:16:2a:6b:b5:96:05:89:5b:f0:fc:e7:e9:35:
         bb:c7:3e:5e:a2:34:c0:f0:e4:fd:e1:a9:45:e9:3f:1e:ec:c3:
         79:15:44:53:cb:bc:fe:8b:28:84:40:c9:20:27:66:fc:aa:1d:
         bf:ca:b8:ce:ca:7e:f7:bc:c3:13:8b:34:56:03:55:51:31:63:
         6f:0f:6b:08:09:e9:8f:71:ae:88:2d:1d:29:11:bf:ae:3a:6c:
         87:11:7e:fa:e1:d7:3d:9d:8e:33:66:19:46:6d:3b:5a:0a:ee:
         92:a9:14:d7:21:78:e9:4d:a2:94:5d:18:ca:5a:e1:27:7f:b6:
         06:df:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:29:35 2026 by rpki-client