Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96b0e8a8-2dd6-3e92-8911-29d9f5f5d75e.roa
File:                     96b0e8a8-2dd6-3e92-8911-29d9f5f5d75e.roa (raw, json)
Hash identifier:          itze6qtB6l/pnDCTmPBXliHjYj/8jGYoo981tG7LuTc=
Subject key identifier:   F7:E5:F0:43:2E:9A:6C:E4:44:18:D7:C7:1C:19:54:B9:75:7A:EC:F0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584FADC7B8DE089706312F90F780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96b0e8a8-2dd6-3e92-8911-29d9f5f5d75e.roa
Signing time:             Fri 30 Oct 2026 23:32:43 +0000
ROA not before:           Fri 30 Oct 2026 23:32:43 +0000
ROA not after:            Fri 29 Jan 2027 00:32:43 +0000
asID:                     21769
IP address blocks:        67.207.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ad:c7:b8:de:08:97:06:31:2f:90:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 30 23:32:43 2026 GMT
            Not After : Jan 29 00:32:43 2027 GMT
        Subject: CN=318c7b49-3907-4aa0-979c-b24ac54916e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:ae:7e:ef:a6:0b:cc:02:b4:12:aa:58:3f:
                    e5:5f:70:4e:0f:20:ac:05:3c:d2:9f:cc:d1:4d:a6:
                    2f:c1:3c:2e:3c:1d:db:78:1b:6f:7d:26:14:f3:5c:
                    06:52:3d:e0:81:47:89:f2:d1:2d:11:4e:c8:0c:c0:
                    9e:90:8e:91:d5:35:46:ff:65:46:3a:e8:0f:0e:0c:
                    0e:80:f8:94:51:5f:11:66:d9:da:3b:8a:b0:7d:40:
                    ec:bd:4b:bc:44:f4:b6:96:e8:21:78:5a:ea:b1:e4:
                    6f:af:09:a0:81:ed:1a:5b:8d:47:b5:f1:26:6e:17:
                    37:85:d2:c6:ea:80:53:9c:b8:ac:1d:bc:88:06:f3:
                    ff:3b:a0:ab:71:90:ed:32:97:c6:a4:e2:62:80:aa:
                    c1:34:fa:09:20:fd:f5:85:ce:31:4e:4b:ae:14:6e:
                    b3:06:28:b1:6d:70:6c:ef:76:49:55:83:a5:1c:6c:
                    a2:15:55:05:1d:25:ca:43:14:c4:14:62:0b:15:f5:
                    c8:67:6e:7e:ce:5c:ba:44:8e:7e:dd:ee:32:1b:cd:
                    14:17:8a:2f:36:c3:2d:3e:62:22:5a:cc:5e:59:23:
                    ea:e5:34:a3:6f:f3:46:b3:8d:63:88:e7:cd:11:bb:
                    81:d5:b4:cf:60:44:ca:a6:68:69:37:7d:83:ff:a5:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E5:F0:43:2E:9A:6C:E4:44:18:D7:C7:1C:19:54:B9:75:7A:EC:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96b0e8a8-2dd6-3e92-8911-29d9f5f5d75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:87:61:1c:4e:1b:80:78:0a:88:44:87:aa:84:c9:df:89:34:
         5c:58:2a:f3:0d:0f:1e:82:ec:f2:b3:18:a5:c0:82:b6:a9:84:
         d2:40:98:ae:31:6e:c6:68:0b:ca:5f:60:48:11:67:01:06:6b:
         bd:a8:d2:8d:ec:5e:47:a8:d6:95:1e:19:cd:b6:04:ff:e4:a8:
         94:c2:78:c2:cd:e5:03:5d:0b:99:35:e6:80:38:a0:d0:22:fb:
         96:39:1d:45:19:4a:5f:d4:d1:97:0e:94:a4:dd:d1:76:76:b4:
         af:fa:86:27:a7:6f:09:31:f1:3d:7a:4b:6d:bc:aa:3c:44:b0:
         ba:a5:c9:84:dc:9d:df:6e:e4:93:19:76:cc:31:da:98:2b:12:
         2c:8f:99:db:40:36:05:19:32:84:db:7b:c6:f3:30:c6:d3:b4:
         90:7d:97:e3:1b:dd:5f:b0:99:79:a6:06:39:08:fd:0e:f0:eb:
         24:7e:91:93:66:db:1c:11:16:35:0e:96:73:0b:07:a5:b6:72:
         f9:02:40:d8:a0:7f:e3:c2:0a:b1:1b:a1:bc:f9:82:8e:5e:e5:
         42:41:7e:87:dc:a6:6c:ac:dd:07:d0:0b:9a:2b:81:00:81:bd:
         f3:22:65:a4:44:65:59:05:61:97:d5:33:42:57:04:f9:1c:96:
         8a:f5:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:39 2026 by rpki-client