Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa
File:                     eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa (raw, json)
Hash identifier:          0JM7CIUMqPngpNA4ZX8Wo/a0jdjBj5HpFAEK916lHSk=
Subject key identifier:   FE:A6:3F:E7:A0:0A:3D:03:74:D1:5B:E7:DB:2E:41:DA:B3:03:D2:B2
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F4328584FB3A671FE9BD16893A6652200
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     25637
IP address blocks:        64.118.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:71:fe:9b:d1:68:93:a6:65:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=53977df1-b9ff-4c35-9ffe-c91fca8f4fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:c4:fe:9b:e5:38:2f:7d:eb:04:1e:2f:6f:
                    09:3c:7f:a1:b6:5d:bc:58:3b:af:35:57:2c:17:9e:
                    47:68:bc:27:67:60:1c:22:67:92:ca:b2:1f:e3:30:
                    f8:a3:7f:27:c9:58:78:ad:fe:aa:46:5d:b9:e8:69:
                    80:42:b1:50:42:52:11:9a:04:da:8c:91:79:5e:ea:
                    c7:c8:d8:4f:d7:bf:71:77:4c:67:e0:13:a2:89:76:
                    65:10:1b:45:f6:0f:21:6d:55:2c:49:cf:42:b0:34:
                    6f:c5:89:40:53:ff:e0:c3:f0:2b:40:b3:64:02:ed:
                    bc:b2:22:50:6d:fb:ee:cd:92:f9:e0:fe:d9:83:eb:
                    df:64:bc:cb:5b:12:55:73:70:1e:9d:b7:83:04:f8:
                    38:fb:5e:7a:de:57:1f:66:42:28:d8:6e:26:61:d9:
                    e6:ba:b5:56:f8:23:11:0f:1f:4d:97:5d:35:07:f9:
                    d9:1b:9a:fd:aa:91:ba:85:a8:32:93:d4:ec:09:d1:
                    61:5c:6c:4a:83:69:54:5a:0e:f4:04:04:e5:6a:ed:
                    60:41:02:61:b4:d0:81:6a:65:2f:57:8e:d9:3c:1e:
                    80:79:bc:00:5c:93:5d:27:e4:7d:7a:ac:ba:4f:07:
                    89:2c:06:c3:8b:d1:60:31:dd:c3:4e:5b:3d:b3:33:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A6:3F:E7:A0:0A:3D:03:74:D1:5B:E7:DB:2E:41:DA:B3:03:D2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/eb1bf6f8-9b5b-3820-9311-f9377e21be53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:74:3d:69:4d:e2:2b:78:e2:83:90:cb:88:79:b0:d1:80:2f:
         83:f2:72:df:2f:e5:aa:8f:33:91:e9:9a:1d:e7:82:0c:81:15:
         c7:ed:0d:b7:83:41:7b:69:61:a9:93:7e:23:09:bd:ef:98:e8:
         42:c1:77:69:0b:81:2a:12:45:7a:3f:cd:5b:e6:8e:a4:ea:7e:
         ad:9f:1f:2a:8c:13:23:f2:97:68:b5:79:12:8a:51:49:b6:85:
         43:64:fe:5c:55:82:23:c1:3e:72:eb:ec:a4:66:91:03:e2:48:
         f3:76:1d:17:28:ea:3a:f0:aa:e6:cc:81:59:84:9e:3a:e6:a8:
         33:64:d7:1f:d1:37:49:24:b0:e3:82:94:68:1a:7d:1d:ce:6b:
         78:34:63:ea:fa:30:5d:89:ed:d2:5a:f4:0b:bd:93:f2:58:52:
         a9:55:65:a8:41:56:95:43:96:bf:ed:10:75:71:b6:fc:06:16:
         86:bc:8c:ac:64:1b:96:84:76:c0:24:c9:75:39:50:05:06:b8:
         61:e5:b4:fd:e7:e7:26:af:e8:9d:b7:5a:6a:a0:4d:7d:a0:0d:
         75:0d:ec:19:4b:a2:6b:ea:70:2c:f1:97:dd:57:d0:52:4d:54:
         eb:fc:5a:56:17:e7:4e:2b:50:f6:8b:a1:b6:55:8c:b5:a9:2b:
         ca:92:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 23:18:22 2026 by rpki-client