Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa
File:                     a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa (raw, json)
Hash identifier:          UtjwVvpC90umq6UbbhJ66gqd8DlR5SNByWgnfsujMfA=
Subject key identifier:   A9:13:5D:72:C4:79:F3:EE:D9:60:AA:62:11:5D:28:A4:DB:C0:2F:A9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F57682229A3BD548B13021A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     11426
IP address blocks:        71.65.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:22:29:a3:bd:54:8b:13:02:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=6fd1232f-1297-4ad0-b97c-b15aefaeacae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:b0:84:7c:50:a0:cf:3b:19:6e:f1:57:60:
                    48:63:22:a6:11:04:3f:a2:29:56:2f:ad:6a:f4:d0:
                    bb:12:9d:fa:ba:15:40:27:3b:36:ac:aa:b8:ff:f3:
                    5c:6a:f4:5c:28:68:6d:78:5e:96:0b:42:5d:f0:f1:
                    a9:cd:f6:f3:9c:ba:e9:e2:58:a6:36:de:f2:b0:60:
                    94:e3:a8:83:c7:78:47:22:e9:d5:97:b1:75:f9:5b:
                    c1:7c:f6:3f:82:9a:c5:e6:8a:66:5c:5c:78:37:81:
                    56:c7:4c:11:87:ba:79:e4:8b:56:35:5d:a5:cb:6f:
                    e4:5e:0e:44:f2:31:cf:0d:6f:f6:4d:46:12:99:bb:
                    d2:dc:8f:7e:5a:74:88:df:cb:46:df:85:2a:d7:88:
                    14:a0:9f:80:19:86:00:ba:b5:da:e5:ab:67:88:68:
                    ae:e3:5b:c0:39:1c:96:da:0e:b0:b8:f4:31:3a:79:
                    2e:df:ed:ed:33:21:b1:6b:05:c4:fd:a3:c1:fa:f5:
                    55:6b:ca:cd:95:e7:4d:94:a1:66:42:a3:bb:61:ed:
                    13:8e:c7:61:de:15:6a:f3:89:73:d8:ab:9d:68:bb:
                    92:cf:78:0f:30:f7:37:cf:df:79:bb:81:01:f7:24:
                    e4:a7:27:4d:7b:a9:06:26:11:3a:e3:c8:6d:a8:73:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:13:5D:72:C4:79:F3:EE:D9:60:AA:62:11:5D:28:A4:DB:C0:2F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:66:82:63:43:e1:29:b8:9f:aa:7e:ba:e8:45:fb:b0:26:
         4c:d8:a0:fe:38:b1:95:b0:cb:d9:99:ed:2e:89:ec:99:17:62:
         ef:75:64:f3:b4:31:18:74:dd:90:b8:e4:fd:c8:7d:a9:b0:4d:
         fd:0c:c7:6b:c4:34:42:d2:e4:78:38:40:5d:89:c4:70:cc:d5:
         a9:5c:05:be:c2:c8:17:fc:23:0d:40:8c:cf:9d:dd:08:fc:21:
         3b:a6:42:15:98:24:7e:c8:38:6c:cf:73:e4:18:85:38:e7:40:
         92:cb:ae:45:e8:50:13:9c:ec:1f:75:5e:55:21:be:2e:53:20:
         75:f1:b3:05:b2:7c:13:6d:ce:e8:b1:d5:b3:04:3f:36:fa:0f:
         66:48:05:72:3d:08:04:0f:60:7a:1e:4d:07:cf:58:fc:de:d5:
         ff:ef:61:73:0c:dd:01:06:f7:95:7f:ce:b7:c4:b3:7b:e9:d5:
         3d:0f:48:c0:d5:7c:47:7d:ce:27:0f:b2:49:fc:89:a7:67:04:
         04:3d:e1:b8:41:76:06:19:87:9d:bb:f9:77:96:88:f7:61:ae:
         9b:c8:9f:8f:30:f2:a5:94:28:56:48:ce:a4:81:88:09:d5:fd:
         40:f9:80:1b:b2:7b:70:e3:7c:bc:ad:38:75:4a:54:63:cc:a8:
         e6:7a:2e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:37:34 2026 by rpki-client