Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfe4ca09-a73e-390f-a458-b3a1ab898099.roa
File:                     cfe4ca09-a73e-390f-a458-b3a1ab898099.roa (raw, json)
Hash identifier:          ZYYpmlvR5qzdDVR21EfvJDXbs9nbLsmaZ5QfMLoL7ec=
Subject key identifier:   14:6A:ED:57:7E:A5:63:E9:5E:87:8A:72:98:A4:62:28:3A:54:9B:D0
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584F4974B5F3CF895CFAF6950080
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfe4ca09-a73e-390f-a458-b3a1ab898099.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11659
IP address blocks:        169.147.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b5:f3:cf:89:5c:fa:f6:95:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3e85d12a-92f0-4b77-b791-f227405f380a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:59:c6:c9:1b:42:b2:bb:c5:d5:ff:58:4f:
                    13:5a:dc:44:f0:5d:ab:9e:4d:fe:03:43:04:31:69:
                    6a:af:16:cc:39:8b:e6:45:62:53:98:fe:e6:7c:10:
                    68:fd:bb:5c:f3:20:55:e5:b1:b5:18:f7:74:3a:82:
                    4a:3f:fa:ac:6e:ad:52:1b:a5:2b:df:4b:17:58:ab:
                    98:e3:33:f1:ea:fa:45:e7:ab:48:24:97:8b:44:79:
                    d0:01:65:34:5c:8e:3f:f5:35:03:eb:83:0e:32:98:
                    c3:26:79:b2:9e:73:f0:55:94:35:f0:3b:a9:c1:90:
                    8c:8a:8b:8c:64:56:ff:d3:eb:50:75:74:2b:c4:f6:
                    89:4a:15:43:7e:40:4f:ab:c8:09:3a:c9:d8:55:86:
                    74:fc:b8:67:84:60:a6:d0:04:fe:47:58:bd:db:27:
                    09:78:b0:82:d5:33:48:7d:58:e8:9d:49:ad:46:c9:
                    92:f4:e3:f6:22:c6:af:93:a3:97:4b:ea:a2:58:b6:
                    b2:92:77:4b:1b:f0:ba:34:1d:02:e8:86:be:b2:32:
                    5f:f1:00:b3:8b:56:7f:f5:b3:ba:35:41:4c:bf:f5:
                    04:bc:49:b9:80:f2:ed:f3:fb:11:75:54:86:43:b0:
                    ef:3a:fa:4b:17:c8:bb:f0:91:55:7e:b4:00:72:92:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6A:ED:57:7E:A5:63:E9:5E:87:8A:72:98:A4:62:28:3A:54:9B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfe4ca09-a73e-390f-a458-b3a1ab898099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8a:0c:ac:53:14:cf:38:0a:ca:f1:05:ac:c6:92:4f:4c:99:
         41:fa:d6:1a:a7:56:6e:33:2c:1b:01:c8:35:3f:bb:09:02:76:
         c0:3c:40:80:72:bb:28:01:17:d7:f7:b4:28:72:61:8b:9f:6f:
         72:03:27:1c:d4:3b:c4:78:ce:48:60:89:32:95:ab:83:48:be:
         89:8d:6f:c9:9a:c0:60:f9:2e:5c:7e:03:e2:8a:cc:a7:99:b5:
         95:a1:e0:06:66:40:f8:0b:74:26:4c:53:35:a7:95:6f:06:13:
         d9:19:38:b0:21:b1:4d:bc:b9:af:af:e0:43:58:32:c3:da:56:
         3c:06:b1:e8:ab:68:cc:b3:a4:13:ac:70:44:ef:20:dc:a0:fe:
         cf:ad:b3:b0:bd:32:d5:97:f4:f7:ee:5a:f6:41:19:89:91:16:
         8d:cf:e4:eb:78:16:8b:cb:98:b0:c3:ab:6b:0f:b2:b4:df:a4:
         4f:33:3e:88:4e:3a:a8:4d:47:bd:a9:f3:8b:9a:18:de:44:ea:
         d4:8a:66:36:e6:7e:d6:1a:3b:65:85:58:c8:72:3a:4b:2b:67:
         d5:c9:8e:7a:63:46:c8:f3:3f:41:8f:c6:6f:a7:1f:1e:6d:fe:
         8e:a6:ea:46:73:aa:1c:c6:6b:9b:75:86:5f:33:2a:71:e0:f5:
         2a:ed:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:28 2026 by rpki-client