Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d000349d-3aa6-375c-ba19-e325069ec898.roa
File:                     d000349d-3aa6-375c-ba19-e325069ec898.roa (raw, json)
Hash identifier:          0PXGlmVYiDxhcYnP584idQfghkuZW0vzrU2nM4aXrQo=
Subject key identifier:   80:17:31:40:7E:66:34:CD:09:5F:9F:9E:C8:D7:F5:77:DC:15:26:60
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584F94D33D998C1F4DA0A6407800
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d000349d-3aa6-375c-ba19-e325069ec898.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     20454
IP address blocks:        184.171.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:3d:99:8c:1f:4d:a0:a6:40:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=7ded13d2-3426-4e49-ab04-4eb52b23f398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:2a:58:7f:39:f6:85:b0:4a:d4:04:1c:2c:
                    9a:ce:f1:b9:75:3a:8c:19:63:e9:93:d0:c8:06:ca:
                    ec:fa:20:24:01:fe:a4:79:96:20:7d:21:84:de:a7:
                    ce:53:ac:d6:b1:6a:98:29:39:ff:5b:78:10:95:50:
                    47:77:fa:c7:74:bb:d4:5e:69:cf:09:b6:f8:77:6d:
                    4e:de:57:91:da:3a:f8:6a:e9:ba:2e:d7:f7:2c:01:
                    e8:31:7b:4d:1d:1f:7c:27:63:94:24:67:f0:0f:38:
                    78:e7:84:bb:71:af:5f:91:54:a9:be:da:35:78:9e:
                    84:04:f1:88:1d:44:5a:78:09:36:1f:eb:95:19:8f:
                    5e:af:5f:e3:04:49:06:67:c4:cc:91:ef:0e:a7:84:
                    7e:16:ac:f8:1d:0d:35:64:da:1c:16:73:91:16:22:
                    d7:8d:5b:5f:a9:8a:ba:63:b3:59:bf:a6:06:14:f9:
                    fb:c6:2f:83:f6:98:13:0a:a5:c3:bf:e8:4b:e1:ba:
                    cb:2f:cc:e6:26:14:f8:43:fc:c8:aa:f3:d5:76:54:
                    ee:bd:73:b0:20:7d:c4:50:0a:5b:64:08:4c:e6:f8:
                    0b:2e:98:ce:07:2c:9a:5a:7b:26:d4:1a:16:53:84:
                    90:38:7c:36:26:23:fe:13:d2:b5:64:24:a9:c1:de:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:17:31:40:7E:66:34:CD:09:5F:9F:9E:C8:D7:F5:77:DC:15:26:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d000349d-3aa6-375c-ba19-e325069ec898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.171.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:86:b7:b9:70:0a:3a:cb:e5:37:7c:9e:45:a6:fb:fe:63:46:
         85:d7:41:3e:bd:65:5c:fe:40:42:c2:d3:0d:45:0a:23:25:2d:
         fa:d5:6e:18:ee:44:2d:57:72:5d:7a:f1:84:f9:a3:31:d7:37:
         33:91:d4:e9:8d:60:e3:e9:eb:2a:d0:08:9e:44:29:5a:3b:e4:
         f3:22:2d:16:5f:28:4f:dd:35:c3:e0:9b:84:40:ac:9b:e8:53:
         b2:31:e4:f3:61:7e:2f:3c:51:79:39:e0:eb:97:6d:4a:2f:a0:
         99:36:44:cc:9a:51:5d:a4:54:8f:e0:62:4b:2b:9c:c7:ed:13:
         1b:fe:8a:5c:93:74:aa:54:67:a3:35:36:f1:94:76:fa:65:b8:
         8a:f3:ba:45:b1:12:4b:ea:4b:2f:e3:2d:74:92:c7:17:4a:63:
         91:f9:31:4e:50:d0:6c:57:0e:cb:e5:82:8c:af:5c:7e:2a:36:
         5a:87:82:0a:d6:b0:52:45:ff:90:82:a9:15:82:0f:ae:a0:07:
         ca:85:da:79:f1:da:30:0b:0a:d0:5e:67:95:ca:68:1c:40:4b:
         63:f3:43:56:9d:0a:c5:b4:2a:7d:89:48:b2:2f:6f:48:ef:53:
         de:b6:31:88:76:39:86:b2:7d:ba:b2:c1:ce:d0:55:b6:5a:9c:
         4f:8b:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:39:36 2026 by rpki-client