Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
File:                     2c883102-0a5b-37cd-a9ed-16c74a21870f.roa (raw, json)
Hash identifier:          Dd0oTCv0zgjg31KL4vt/gutbsJB4Y9aC6gjUI+lrePo=
Subject key identifier:   8B:86:A2:1F:4D:FD:22:C2:E6:19:7D:9C:8E:DC:43:2A:B4:4D:62:F9
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584FAB28A77B1D75DA9BE4ADF380
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     2572
IP address blocks:        207.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:a7:7b:1d:75:da:9b:e4:ad:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=7dfdc3d1-1635-42e4-a50c-22807e2f9363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:8c:36:15:a2:43:85:4b:d7:c7:f9:fe:ac:
                    17:1e:7e:3d:bf:6d:2a:79:d2:dd:19:e2:22:8c:56:
                    b9:ba:b5:2f:c8:5a:e2:98:de:b5:15:04:61:ee:e3:
                    db:6d:69:ec:60:af:36:a1:67:b5:8b:38:c7:42:36:
                    97:f3:12:18:c3:bc:0e:90:4f:42:36:e7:79:59:0c:
                    2d:1c:24:c3:55:b4:e2:33:76:ea:d4:42:64:98:d1:
                    1b:58:34:0c:55:c6:8f:52:d3:70:48:ac:fd:99:b0:
                    30:b1:db:b4:84:cb:d4:bb:f5:2a:c6:fb:9a:e1:20:
                    80:3e:56:8e:11:9e:7b:11:ae:bc:3e:d3:5c:99:a6:
                    61:87:42:d4:4a:ba:af:a6:d2:57:bd:da:63:81:ea:
                    dd:36:13:62:11:48:cc:7d:39:be:e1:87:37:5a:2b:
                    a3:c5:52:12:92:d6:3b:1b:b1:81:f3:54:94:ab:5c:
                    bc:cb:a0:e0:71:27:be:44:29:f3:ef:26:2d:1b:ff:
                    92:b2:e5:72:82:9b:a8:5a:b2:b5:27:a3:15:d2:ce:
                    e8:ff:7c:19:8e:fa:95:6d:e7:a9:cf:bc:ab:f1:a9:
                    1c:07:56:1b:7b:85:eb:ad:5d:99:c9:8a:bc:e3:b8:
                    a8:9e:8f:f3:4e:44:bc:11:4c:4d:92:e9:f9:27:5a:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:86:A2:1F:4D:FD:22:C2:E6:19:7D:9C:8E:DC:43:2A:B4:4D:62:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:30:ee:02:c7:57:ff:e1:11:a2:52:f7:b3:a6:f4:93:00:c6:
         69:37:d9:d3:2a:db:53:a3:37:08:67:1f:94:63:4c:92:2b:30:
         4e:f7:d8:2a:c6:0d:0d:72:16:cd:61:6e:c5:4b:93:92:98:97:
         c9:03:a2:2c:1e:7a:05:b7:ea:65:75:16:a8:8f:4f:a0:e0:e4:
         00:27:f6:b8:4d:21:08:8f:4d:10:ae:42:4d:f5:ec:30:ca:cd:
         61:f6:af:41:04:fe:17:57:bc:05:c3:03:01:5f:1c:6a:e1:b4:
         49:2a:29:b5:67:de:4f:44:bd:af:51:ff:46:f4:9c:f0:3b:00:
         d4:d7:40:1a:b3:f1:34:81:34:ca:69:7d:ce:32:b0:6f:e4:8d:
         4e:a7:e8:12:c5:9b:c3:52:89:80:8c:bb:f3:a1:84:e1:9e:09:
         5d:e9:ee:ab:4a:3e:67:eb:b2:1d:90:df:00:36:f4:e2:a4:0f:
         e3:b3:22:c1:cc:f7:cb:48:a2:fb:6b:b4:0b:7d:9a:dd:89:34:
         e3:94:a5:ae:2f:d4:dc:fa:fe:29:b3:33:9b:fb:d5:a2:52:6c:
         06:23:e3:08:25:cb:6e:50:8d:c6:0b:d9:57:cf:cd:7a:27:88:
         cb:23:dd:9e:8e:7e:06:34:d6:47:17:be:07:88:a9:f8:2a:55:
         0e:86:98:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:19:37 2026 by rpki-client