Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/985971cb-7e14-37d0-b1b9-08658f2178b9.roa
File:                     985971cb-7e14-37d0-b1b9-08658f2178b9.roa (raw, json)
Hash identifier:          6nssPH6Rg0GmFVqsqu3iioOX2/R3SFMSrnOw3HphrTQ=
Subject key identifier:   92:7B:43:B4:27:3A:CA:12:62:40:89:A5:84:13:11:5B:62:09:E2:7A
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584F8DD85519340B5F94EAE8F120
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/985971cb-7e14-37d0-b1b9-08658f2178b9.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     25764
IP address blocks:        63.140.16.0/20 maxlen: 20
                          74.82.224.0/19 maxlen: 19
                          172.86.128.0/20 maxlen: 20
                          198.71.28.0/22 maxlen: 22
                          208.84.220.0/22 maxlen: 22
                          208.90.160.0/21 maxlen: 21
                          2604:4e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:55:19:34:0b:5f:94:ea:e8:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=0f5955fc-4ddc-443e-a466-b54bac661b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:21:1f:88:08:55:bf:78:1f:11:93:fb:8a:
                    22:37:02:f8:df:25:e4:81:44:11:e0:f6:ad:02:8c:
                    fa:06:3b:5e:c3:7e:ca:71:48:9f:c9:27:ee:e6:5a:
                    10:34:34:15:3f:bf:65:12:cd:1c:93:e7:f5:6c:40:
                    2c:77:76:93:d3:19:ba:66:b1:bc:71:03:fc:c0:ca:
                    1f:c6:52:d2:40:68:a5:8f:f7:03:0a:c8:05:50:b2:
                    f1:c6:c0:9e:0d:fc:7e:82:22:f1:c5:56:91:af:4b:
                    4d:4e:b3:be:8c:a7:08:e1:f0:0b:d2:de:62:10:4d:
                    cd:f5:b7:5e:05:7b:30:37:69:d3:a6:d5:c5:6a:d3:
                    8f:0f:bb:3a:a2:36:4c:29:3e:74:8e:c0:dc:91:e0:
                    2b:23:e4:a1:55:a2:18:05:a8:aa:7d:73:2f:18:e8:
                    1a:65:cf:8e:e1:bf:9e:21:44:98:24:e9:74:e8:47:
                    03:f0:19:c4:cd:3d:8f:df:e9:e7:55:ea:60:dc:68:
                    cc:b1:c8:6e:2f:93:10:5f:fd:8b:72:36:51:d3:ac:
                    4d:c7:18:7f:7b:db:b4:63:a5:1f:39:4d:35:c3:38:
                    d0:b6:91:20:10:89:71:f8:e9:0d:e8:c2:5b:90:d6:
                    f7:f6:1c:e8:71:be:10:cf:52:f3:67:49:3c:9c:75:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:43:B4:27:3A:CA:12:62:40:89:A5:84:13:11:5B:62:09:E2:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/985971cb-7e14-37d0-b1b9-08658f2178b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.16.0/20
                  74.82.224.0/19
                  172.86.128.0/20
                  198.71.28.0/22
                  208.84.220.0/22
                  208.90.160.0/21
                IPv6:
                  2604:4e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:48:00:6d:20:b1:00:32:47:1c:a7:fd:ae:1c:15:78:7c:db:
         b9:45:5b:13:b5:14:69:78:10:b8:13:03:d5:7f:b2:31:4c:6c:
         f7:74:a8:59:44:cd:ac:f1:c5:65:69:ca:dd:76:72:9d:cb:de:
         34:20:e0:b4:d7:2a:40:8b:6e:f6:17:4e:d0:57:b5:f4:05:b7:
         b4:1f:47:b8:be:51:73:a7:4d:7f:eb:cd:4f:b0:2d:33:30:d1:
         09:1b:fd:f7:13:0e:3c:95:16:99:84:70:47:a7:22:b8:f0:4b:
         1e:27:2b:74:e7:48:77:f5:3a:64:2a:98:f0:b5:bb:95:6f:2a:
         76:95:6d:e2:6f:05:63:9d:de:97:25:ab:b4:c8:c6:fa:ac:43:
         28:f9:1a:28:76:fb:8d:5d:79:8b:ce:9f:7d:58:1f:80:d1:4c:
         f1:3b:ed:a8:78:4a:b9:d0:36:15:a6:93:fa:8e:02:f6:86:e8:
         36:c4:23:5e:6a:8b:26:55:1a:b8:1e:30:e8:dd:6c:36:9a:bd:
         ae:d5:26:e8:79:90:e4:11:fa:83:4e:70:91:b8:64:89:e3:42:
         1f:85:1b:10:9f:77:bc:f3:ec:b1:06:88:0c:b4:79:b7:0a:bd:
         c0:43:b8:6a:71:73:87:d0:60:dc:4c:c2:ac:de:cf:12:40:fc:
         72:62:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:40:54 2026 by rpki-client