Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/18026b91-789a-3e6c-98a6-49fea7d180c3.roa
File:                     18026b91-789a-3e6c-98a6-49fea7d180c3.roa (raw, json)
Hash identifier:          FCKFPrGoEfQ/lYREShmoGI2sLwPt2WY7WFA93rVWnlU=
Subject key identifier:   67:34:73:92:E0:53:85:0A:28:29:63:21:74:74:31:F0:FF:C6:A7:96
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EFD08E3A024DBB0DEFC254600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/18026b91-789a-3e6c-98a6-49fea7d180c3.roa
Signing time:             Fri 28 Aug 2026 16:05:56 +0000
ROA not before:           Fri 28 Aug 2026 16:05:56 +0000
ROA not after:            Thu 26 Nov 2026 17:05:56 +0000
asID:                     834
IP address blocks:        64.69.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fd:08:e3:a0:24:db:b0:de:fc:25:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 28 16:05:56 2026 GMT
            Not After : Nov 26 17:05:56 2026 GMT
        Subject: CN=bc5ae4e7-07cb-4781-95c4-b27644d9a1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:c4:ac:ba:79:a6:5c:bf:63:c2:3a:39:a9:
                    26:97:a0:a6:df:ca:8e:9d:56:fb:ac:4f:b8:6f:2e:
                    f8:71:dd:74:9d:2d:dc:e8:35:9f:ad:9a:32:c8:7f:
                    47:c2:d1:6b:b0:e5:13:1b:7b:38:25:38:6b:4a:97:
                    61:5d:49:f3:10:15:fa:68:d8:c7:c4:b3:4f:c4:83:
                    b0:74:37:11:f0:df:83:38:cf:b6:bc:41:d7:4e:6b:
                    8e:ca:a4:41:58:43:f4:ca:4e:8a:d3:67:98:40:5a:
                    0c:ef:ae:43:22:2f:ba:c9:57:9b:bb:29:d9:7c:b4:
                    a2:dc:f3:8b:93:5b:94:67:e5:d5:5a:0e:5c:9d:fd:
                    da:bf:79:83:4e:00:36:ef:d5:9a:46:15:c3:da:49:
                    56:42:c6:d8:1e:6b:c0:c1:95:e2:e2:c9:b3:02:e7:
                    a8:12:c3:50:c5:ef:c0:0a:8a:ef:c0:93:b2:17:cc:
                    3e:43:7f:f0:f0:c6:bc:2d:af:f5:a8:ad:b1:21:8b:
                    68:79:04:cf:ca:8c:a5:bf:e8:47:3d:05:8d:da:87:
                    09:59:eb:bd:85:79:5b:57:a0:c7:70:0a:4e:f3:dd:
                    8e:50:4f:eb:57:a7:a4:e1:8e:82:3b:33:6c:d5:92:
                    14:44:70:a0:a7:9b:da:74:dd:3e:e6:87:e6:9f:f9:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:34:73:92:E0:53:85:0A:28:29:63:21:74:74:31:F0:FF:C6:A7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/18026b91-789a-3e6c-98a6-49fea7d180c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:ae:5e:f3:58:35:65:8e:f7:ae:77:03:3a:96:98:f0:d6:
         08:0e:4c:56:8a:3f:9f:ef:f7:a0:f5:52:f4:4b:7f:e0:e2:c5:
         38:03:c1:98:72:08:42:56:34:43:2c:d2:6d:84:4a:cb:1b:f9:
         1f:36:74:08:6d:76:b9:fb:eb:c9:7d:c5:59:82:a2:ec:47:63:
         07:8b:ed:5b:9e:c5:1b:73:e3:4b:7d:31:9b:8b:56:44:35:a5:
         0f:a7:44:68:23:83:4b:f8:61:de:f3:1a:7a:0c:32:65:f9:18:
         76:e7:0e:d6:ee:20:5d:6e:84:00:26:0e:ac:4d:44:84:46:74:
         6d:83:85:f9:c9:93:28:67:dd:d9:4c:8a:fd:6b:11:5b:63:d4:
         8b:17:9d:01:6f:41:2a:63:b0:a2:1f:a8:fa:d5:d1:fa:da:e7:
         e1:34:1e:c3:70:b0:49:d6:28:5c:5a:86:73:44:23:21:36:92:
         df:73:fc:11:f8:a9:32:e7:7d:36:46:2c:aa:dc:ae:7f:98:8c:
         83:03:33:e6:68:4c:c5:1f:76:95:6b:0e:44:5f:43:20:69:e0:
         31:8b:ae:e7:29:02:e1:98:f8:d4:6c:25:34:25:55:38:e2:0c:
         20:31:b7:d7:70:95:f8:35:fe:14:cf:5a:45:7b:ea:d5:62:9b:
         ad:47:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 17:32:11 2026 by rpki-client