Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa
File:                     6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa (raw, json)
Hash identifier:          K4fuhxtCZxDxB8sWC4/VNT7RlJUVFo+9uF/eao4wKL8=
Subject key identifier:   54:EA:53:1A:DF:46:81:19:89:14:CF:D4:73:55:D8:34:DB:93:4B:13
Certificate issuer:       /CN=3878fd50-eae1-4b38-a142-8eff8910579b
Certificate serial:       010D0C9F4328584FB3A686A1E9060A1048A70260
Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     14807
IP address blocks:        204.11.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:86:a1:e9:06:0a:10:48:a7:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=c8302f49-74e0-4f20-8c55-6a8e7f1eff7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:94:14:35:03:79:3f:c1:fd:fc:10:ae:0a:
                    e6:70:c0:8b:bd:c6:3b:7f:8f:e0:5b:e4:46:0c:e6:
                    b1:6e:69:e3:4a:c3:69:bf:55:59:1b:a6:18:74:96:
                    14:ad:de:f6:d2:3f:5f:43:72:d4:35:e2:8d:5e:c8:
                    a1:97:5f:be:48:b7:ca:e1:e5:84:9a:1c:0c:99:6c:
                    39:b0:8b:69:8c:91:7d:eb:7d:99:5b:1e:81:85:93:
                    0a:43:08:c3:ab:5f:45:a9:c1:01:27:e3:fe:b8:bb:
                    70:02:00:b2:0f:b2:f5:9d:2a:90:fd:55:f4:5a:8e:
                    0e:be:96:48:17:69:0b:e1:ef:2f:1f:26:bd:68:29:
                    76:cd:97:e0:71:4c:0c:c8:48:1d:8e:4d:de:98:a5:
                    68:d7:69:65:6b:c9:c8:40:b3:e3:fd:c8:b2:7f:07:
                    73:2d:51:13:60:51:3d:91:a2:fb:88:68:9d:ef:aa:
                    08:ea:6d:47:3a:a5:e2:c9:7f:b4:96:1a:a1:42:3f:
                    7f:13:7a:21:97:b2:d6:48:ac:9b:93:b7:8e:15:aa:
                    c7:13:96:d2:90:19:1e:66:20:f2:43:8c:80:20:08:
                    a3:18:28:60:9a:35:42:69:2a:37:2c:9d:5f:df:24:
                    ce:cf:84:70:d0:e1:b7:d0:96:a7:19:38:0a:ef:73:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EA:53:1A:DF:46:81:19:89:14:CF:D4:73:55:D8:34:DB:93:4B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:bb:5d:a8:74:41:65:f0:7a:bf:dd:a0:cd:51:57:ec:c1:
         36:98:50:32:63:92:4e:16:e7:45:73:49:b9:a8:65:c3:a4:3d:
         82:36:f8:9b:60:fa:6a:fd:23:eb:7a:7d:bb:15:f4:15:55:b2:
         8f:f5:52:3a:f2:5f:b8:5f:1c:5f:44:ce:a6:e4:c2:50:ff:55:
         ca:fb:26:9f:de:56:72:d0:55:30:08:39:06:6c:3d:40:42:f0:
         41:14:cc:bb:c8:7f:ce:50:1a:18:13:0d:35:41:cf:1e:fd:ba:
         79:63:52:13:00:cc:31:2b:c1:b9:09:ee:60:78:e7:6a:6a:1d:
         e8:21:40:b8:c8:7a:fd:28:06:68:dd:55:89:7e:0b:1e:e1:99:
         36:13:c4:7b:f7:48:39:14:44:0c:74:ab:10:81:68:5e:a9:24:
         8e:8e:0a:7b:16:99:ef:8c:ef:33:ba:6d:f2:17:3f:07:ab:39:
         fc:fe:6b:97:4b:77:06:db:7d:b2:76:33:cc:36:c5:41:bb:de:
         9c:8b:8c:a1:34:92:66:95:ca:27:39:f1:0f:93:02:d7:45:bc:
         1c:56:b7:58:fb:6e:a8:f6:6f:73:b3:bd:34:73:1c:af:89:7f:
         46:33:ff:54:c5:78:90:34:9a:a0:e1:ff:c8:20:3f:99:02:5a:
         d4:49:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:36:29 2026 by rpki-client