Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e79211c-fa0f-380e-b4fa-1ef4319e0aa7.roa
File:                     3e79211c-fa0f-380e-b4fa-1ef4319e0aa7.roa (raw, json)
Hash identifier:          Z++r6ZR4qF/rtC2iXqsWbMwcWDLRr3VWARNKD4vICfM=
Subject key identifier:   9A:66:A4:F9:DF:C5:9C:57:12:F3:29:1C:9C:92:CA:A0:42:49:11:63
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DA9E4865453740A8E3E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e79211c-fa0f-380e-b4fa-1ef4319e0aa7.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20001
IP address blocks:        173.197.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:a9:e4:86:54:53:74:0a:8e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=beafbdb1-c066-486a-852e-f6368a7e587e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:b3:20:17:17:13:0f:52:7e:cc:41:0f:9e:
                    2d:68:f9:a9:02:fb:b2:3d:66:37:b1:4e:a9:c0:b6:
                    09:c9:4f:26:ac:79:97:56:d9:34:ce:2b:2e:30:2e:
                    8d:65:8f:d7:28:15:4d:83:92:a6:3f:28:f2:19:6c:
                    3a:5c:0c:1f:7a:b3:17:8f:fb:ae:e5:bc:22:89:c4:
                    ef:bf:f6:68:1a:0c:e5:59:33:dc:8c:3f:dd:4c:66:
                    b6:e9:0b:2f:4d:43:41:35:85:d1:e4:31:5f:66:07:
                    a4:2e:03:f6:82:dd:ea:12:7a:25:e4:53:34:cd:f4:
                    97:7b:0e:47:9d:88:cc:d7:dc:47:c1:ab:56:46:68:
                    b2:fe:43:58:1b:c2:31:70:a6:11:41:e0:07:be:4b:
                    0b:65:d0:e6:80:00:b4:e2:fd:6a:77:d6:c4:14:31:
                    e2:54:ef:0b:67:51:2e:93:02:53:fc:20:0d:65:70:
                    50:c8:e2:e1:ee:4d:4d:b4:3d:db:e4:15:34:bb:55:
                    89:c7:dc:ae:24:62:36:24:24:f3:c6:0c:1c:fd:9f:
                    6e:e4:54:49:01:1b:8f:84:b5:28:3e:22:74:a8:51:
                    86:a3:21:06:75:29:c5:28:38:cd:5e:f1:54:78:64:
                    e2:99:bc:29:e8:93:37:2e:86:8c:02:69:4a:3e:df:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:66:A4:F9:DF:C5:9C:57:12:F3:29:1C:9C:92:CA:A0:42:49:11:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e79211c-fa0f-380e-b4fa-1ef4319e0aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.197.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:7a:d9:b3:fd:fc:61:17:2a:91:77:e1:e1:be:c6:74:6a:
         2c:5f:63:73:d6:c3:12:bc:ee:d6:24:33:dd:31:9b:a9:88:a4:
         ce:eb:50:4d:64:c0:e2:04:6d:c0:9a:72:7b:a0:c3:16:fc:b1:
         b1:99:e5:b1:fa:b7:e2:90:3e:14:06:fa:21:87:e6:ff:bd:f7:
         bd:7c:b4:8b:cd:43:31:20:1e:0d:6c:9e:30:0d:1d:77:a0:d6:
         43:90:2f:d4:9f:f0:a1:d9:5a:9c:5b:b4:a4:db:5a:f4:7c:15:
         bb:2a:c8:02:19:04:cb:07:89:ae:0b:ba:e8:a7:3e:5c:a3:1f:
         40:44:ed:ac:50:72:be:13:10:f6:78:21:e5:8e:ae:04:bd:6f:
         a2:5b:7b:ce:6c:2b:56:55:02:de:f5:82:2f:b0:a0:c5:de:84:
         fd:f9:1a:7c:5c:c1:69:09:9a:4b:86:df:fe:73:07:2d:79:b0:
         0f:72:c1:e1:34:94:56:b5:eb:3b:e0:71:b3:c7:04:05:25:cc:
         66:40:b7:e0:06:84:db:e9:51:7e:19:4c:72:66:c4:18:48:93:
         69:7b:ab:61:24:ce:87:5e:c1:b5:0a:9e:75:d9:a7:f7:5a:70:
         69:04:ac:68:2c:3a:fc:18:81:1f:b9:3a:c2:54:08:f8:8e:73:
         69:f1:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:01:32 2026 by rpki-client