Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/4dee94af-3e7d-3d9f-b355-869a5552aec2.roa
File:                     4dee94af-3e7d-3d9f-b355-869a5552aec2.roa (raw, json)
Hash identifier:          +vV1+hr0KfyKUcK+Y6lv6o9+QdkZMQPczXR5ORnxUQA=
Subject key identifier:   07:8C:71:CF:14:4D:51:3F:49:4A:8A:02:15:EC:5F:DC:64:6A:BD:E6
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584F6F0FC8ABAF0F233B1CF145F8
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/4dee94af-3e7d-3d9f-b355-869a5552aec2.roa
Signing time:             Thu 08 Oct 2026 12:21:59 +0000
ROA not before:           Thu 08 Oct 2026 12:21:59 +0000
ROA not after:            Wed 06 Jan 2027 13:21:59 +0000
asID:                     151331
IP address blocks:        156.9.160.0/22 maxlen: 24
                          2602:f864::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:0f:c8:ab:af:0f:23:3b:1c:f1:45:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Oct  8 12:21:59 2026 GMT
            Not After : Jan  6 13:21:59 2027 GMT
        Subject: CN=9eef44e4-3342-45c0-abcc-3e077b826558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:86:7f:61:16:d9:83:66:e2:e2:7f:e3:f0:93:
                    34:e9:c3:f4:4e:b5:09:6f:22:14:01:bb:2e:fc:c6:
                    f9:8a:29:c9:e0:11:f9:a4:e5:96:4f:2d:a5:d8:3d:
                    aa:ea:c3:bf:a9:ec:71:83:e9:4e:38:7d:ff:b9:27:
                    4d:01:f3:77:d5:7c:9a:0c:b4:4a:38:4d:28:df:85:
                    e3:aa:3f:57:f7:ad:b4:8a:a0:80:9e:72:d6:f7:2e:
                    82:7f:54:81:97:fb:e1:54:5a:48:4f:f0:4d:13:23:
                    b8:f1:0d:f1:02:e3:75:3f:f2:99:39:47:dd:54:15:
                    df:8e:f8:6e:59:08:41:ae:f5:cc:2d:8f:59:45:b8:
                    43:13:9f:b1:93:49:16:6d:9f:aa:50:6a:79:f0:66:
                    a2:d3:3f:2b:13:f2:15:da:44:2b:bf:dc:55:b1:ad:
                    63:80:10:e6:a0:a8:a8:b1:43:4d:50:62:88:dd:9e:
                    70:e0:92:e2:94:b5:9d:07:15:10:e3:1d:a0:cb:c6:
                    38:a9:51:3c:2b:1c:a9:72:89:09:f7:c1:24:f3:4a:
                    c6:52:0a:37:71:1f:6e:6a:a8:ca:25:c3:0b:61:1f:
                    e8:21:cf:a4:82:8d:0f:ea:05:99:e3:13:ce:ca:41:
                    c1:bd:7a:44:66:f5:2b:54:5e:6a:87:ef:6a:48:a9:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8C:71:CF:14:4D:51:3F:49:4A:8A:02:15:EC:5F:DC:64:6A:BD:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/4dee94af-3e7d-3d9f-b355-869a5552aec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.160.0/22
                IPv6:
                  2602:f864::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:b6:fe:32:65:17:42:d2:5c:50:ac:c7:cf:0a:c3:fe:e3:
         ee:cb:db:6c:63:e4:09:3d:2b:9b:02:bb:5b:50:71:16:e4:e5:
         7d:40:e6:57:de:fc:e6:a2:b0:da:07:9e:d5:c1:3d:81:64:67:
         00:26:b4:e1:25:08:2d:21:6d:d8:4d:72:05:c3:e4:73:e7:94:
         77:8c:ea:cc:db:eb:be:af:5b:92:7f:61:82:1a:ec:15:df:08:
         02:36:6e:17:ba:a9:64:01:cf:ed:63:42:76:b2:3b:6a:67:59:
         92:c6:16:45:a2:81:da:50:d3:fa:23:14:a9:49:34:7f:32:be:
         5d:82:aa:7d:5a:65:3d:f5:9f:d3:34:bc:f3:1c:cb:c8:99:61:
         74:51:48:ce:92:f0:01:47:bb:34:47:c6:78:b6:23:7f:aa:9f:
         6e:34:5b:39:d0:28:20:51:b5:e6:54:c2:f0:b8:cb:75:c1:a1:
         2a:ee:fa:b8:68:8b:bf:73:3c:52:ad:43:d2:4d:83:a6:92:2b:
         5f:9f:6f:df:c6:c6:1c:76:42:e9:7d:7e:7f:54:79:73:55:a9:
         cf:e6:39:51:51:8d:9f:0b:27:55:98:9f:7f:8f:fc:ef:9b:05:
         57:b8:13:74:aa:2c:29:b3:93:36:02:92:4b:6e:34:b4:4e:6b:
         dd:6b:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:57 2026 by rpki-client