Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa
File:                     610c7ada-377e-34d0-9c81-d4d76be9e55d.roa (raw, json)
Hash identifier:          RY18d/kIxyQ23k+Thyc2VsGwyT/D9zprhuMPDelkNXQ=
Subject key identifier:   6D:B1:49:52:D4:4C:EC:46:6F:37:2E:D5:6E:B8:FA:14:A6:51:EB:5D
Certificate issuer:       /CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
Certificate serial:       010D0C9F4328584F7BB2EEDC2299BE486D814D00
Authority key identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     398712
IP address blocks:        23.165.240.0/24 maxlen: 24
                          45.4.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:ee:dc:22:99:be:48:6d:81:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8cf92-6ed1-444d-b120-4e622c110d10
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=aaec408e-0095-4754-85be-e88a690a9d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:26:7b:96:60:6c:be:0a:4e:8a:70:9d:a8:
                    42:09:fd:88:03:a0:3e:fe:1c:d1:1a:af:6e:9e:71:
                    09:c1:75:d3:6d:e8:9f:6f:38:00:68:cc:b2:e1:c2:
                    5c:77:00:27:c4:d2:6a:66:2b:81:29:30:f2:bf:b7:
                    d9:66:1d:b1:27:d7:b3:47:19:0c:81:4c:03:bf:d6:
                    a1:74:05:45:f6:8a:ab:5a:ce:86:2f:32:df:93:d6:
                    08:68:43:65:fc:43:39:13:cd:17:21:9a:3f:5a:87:
                    cb:53:98:69:d4:46:8a:5b:36:e7:c5:3e:cc:ca:4e:
                    b8:58:f7:fd:ff:1a:6c:48:19:4f:18:3a:59:3a:77:
                    d0:c4:36:8d:59:03:b8:6c:7f:50:a9:25:52:00:2c:
                    0c:08:f2:5c:c9:86:d0:03:f1:07:56:2f:f5:23:82:
                    e9:7a:da:f1:d6:0e:75:8a:b2:b8:bb:72:c5:e9:bc:
                    e1:49:26:32:dc:33:cf:04:ee:1c:4e:73:a4:0f:3d:
                    af:fa:e4:d1:e7:d0:64:50:5a:ab:37:31:81:1d:63:
                    15:d8:c0:53:5d:85:22:15:93:7e:4a:11:7c:49:46:
                    e4:a8:8e:ea:04:0d:f7:48:d0:4f:85:4f:48:a9:db:
                    16:8b:ab:71:25:20:3b:ca:34:51:89:d7:51:92:cc:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:49:52:D4:4C:EC:46:6F:37:2E:D5:6E:B8:FA:14:A6:51:EB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl

            X509v3 Authority Key Identifier:
                keyid:BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.240.0/24
                  45.4.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:6d:76:2d:be:18:39:d9:a6:7a:8e:0f:1b:b6:4e:89:d2:92:
         69:5c:ab:fe:ac:73:28:5d:81:34:5f:79:55:02:04:78:87:6f:
         84:67:4b:a9:51:a5:f6:e3:cc:40:43:d5:69:57:ab:24:97:c6:
         ae:3a:db:d8:41:e1:09:9e:1a:f2:63:5d:af:84:78:8d:09:c3:
         7a:36:8f:e9:e4:b8:61:63:e4:37:fb:31:de:e1:95:c0:55:ea:
         8c:27:e6:84:ff:61:29:44:d8:f9:91:ff:3e:94:38:6c:2b:26:
         59:1c:2b:f7:8c:a6:84:e2:0e:10:98:89:89:83:31:92:10:1b:
         22:f9:d4:70:9b:b1:1e:c3:9f:7c:19:7d:56:0c:12:ec:1c:94:
         5c:ce:83:b1:95:30:80:fc:49:da:af:a3:dd:de:14:c3:18:c0:
         e5:88:8c:bd:75:d3:3d:7c:e5:cf:e6:f7:07:d5:54:64:17:d9:
         32:79:b2:53:29:34:dc:ac:25:86:24:63:e3:d0:52:c4:09:d8:
         85:5c:cf:6b:ee:bf:27:0b:bd:94:c9:02:3b:cc:67:ab:08:dd:
         2e:9a:d8:7a:91:ed:80:70:f6:21:93:4a:59:9b:65:9f:f1:3c:
         15:df:38:b8:1b:59:6a:50:40:9b:cb:f1:33:8f:1c:8e:8b:72:
         9d:e5:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:41:45 2026 by rpki-client