Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa
File:                     1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa (raw, json)
Hash identifier:          QDjQPSLM84xR/YjhJOomjrgKf/WZX9y1Vs90ExS5J5I=
Subject key identifier:   20:41:C5:33:96:43:47:BD:2B:BC:4A:B9:00:F1:44:D8:3B:17:E7:63
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584FA5934077DF51918756371700
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     11052
IP address blocks:        199.249.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:40:77:df:51:91:87:56:37:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=1318efbc-2062-4195-a7c3-a4a1fa9cdcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:08:65:bb:e2:a9:e5:6a:ca:11:a4:6b:5f:
                    76:b4:b8:99:2b:29:40:3b:7e:9c:66:05:12:a9:89:
                    16:34:ae:44:f0:09:dc:44:be:a2:e5:35:a9:a7:b5:
                    fd:ce:38:70:f0:81:82:3c:94:b3:c8:5b:10:b6:e4:
                    2e:99:bb:e1:92:c8:f8:2f:0e:6d:4d:ff:cc:1b:e6:
                    a8:f6:d5:e4:b6:25:74:60:9c:b6:e7:aa:45:50:93:
                    27:9d:08:aa:22:2c:78:b9:53:84:a8:84:30:93:e8:
                    a5:ef:30:98:2d:7d:bd:75:b7:b3:5e:f8:13:f7:4e:
                    07:12:b7:7d:f7:21:f0:f9:e4:f1:84:48:92:db:d2:
                    ce:d3:1c:7a:76:99:85:1d:67:92:65:b0:77:df:6d:
                    df:da:df:b2:a7:74:ae:12:f8:06:02:7d:91:b5:e1:
                    6f:14:83:42:75:f0:78:2a:e3:35:db:3c:dd:57:d8:
                    54:00:bc:cf:ac:1f:6f:5c:f7:20:2d:a7:4e:60:de:
                    0c:92:d8:c1:5d:1c:38:3f:9a:5c:d6:1e:81:33:6a:
                    81:4c:45:9b:f3:82:d5:66:68:52:46:b0:cb:33:72:
                    ae:9e:d9:72:4b:f8:3b:3d:bd:03:a9:0f:3e:f5:01:
                    81:dd:45:65:0e:56:a1:bf:04:0d:ec:3a:62:80:bc:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:41:C5:33:96:43:47:BD:2B:BC:4A:B9:00:F1:44:D8:3B:17:E7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:18:cd:75:4e:cd:04:e0:9a:58:9d:37:a1:fe:aa:5e:38:
         d1:4b:07:d4:5c:f9:c0:9a:6d:9f:6c:99:6e:2c:b9:2e:37:fc:
         fe:e6:22:3c:80:29:df:a4:f0:44:1a:37:7b:b7:91:4d:d8:5d:
         74:5e:52:10:7b:c8:f3:58:3e:c6:e5:e0:21:bb:c1:27:c9:43:
         5a:64:5a:64:52:54:87:21:ef:b0:7e:c8:63:ea:9b:6e:c2:83:
         88:a2:45:24:c4:e0:3f:3a:c8:74:a2:79:d5:3e:76:ad:6b:0f:
         ce:af:f1:79:e3:53:c5:3c:76:d4:a9:37:24:bb:66:cd:23:93:
         f7:54:e5:23:30:7f:ad:d3:c7:9f:ec:2f:b3:0e:f7:30:59:e0:
         84:ef:a2:1b:b9:b9:66:e9:1f:4d:fb:03:27:52:7c:ec:24:a1:
         1e:d4:cd:87:05:31:68:01:b3:57:21:f0:3f:88:27:cc:c5:dc:
         94:23:02:10:0e:1d:c4:50:af:39:83:03:d4:39:e5:fa:46:1e:
         26:6c:ba:59:c3:68:94:a6:68:35:34:7d:8b:52:d6:23:14:46:
         86:1b:f8:6b:e6:84:8e:3d:7c:ad:64:8e:2f:aa:82:fe:31:3f:
         18:eb:40:8b:2b:7e:81:5c:d8:56:2d:a2:29:d6:fb:d8:87:9b:
         b0:ef:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:26:50 2026 by rpki-client