Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa
File:                     f0d22b76-e797-3089-8dfe-00a9447c23e8.roa (raw, json)
Hash identifier:          fkgMlpznynCEEeiWqcJPJHt9gVM8aRY8p8qf5P6naYg=
Subject key identifier:   E5:33:A8:65:BE:B5:83:16:28:E9:B2:EF:C3:F1:FE:49:C5:42:9C:39
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584F576800BEBAF58CFA0CEDFF40
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     3300
IP address blocks:        204.140.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:00:be:ba:f5:8c:fa:0c:ed:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=24c39d6a-8e7c-4ab0-9e9a-d8945b356520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:a3:8d:46:a9:37:de:02:4c:b4:b5:eb:2c:
                    e7:60:92:cd:fe:9c:a0:d1:cc:88:4e:16:18:d3:67:
                    3d:e3:95:28:c5:ea:79:9d:8b:34:f6:52:67:f8:75:
                    b3:2a:1d:06:0f:c2:8a:5a:52:79:21:d1:44:cd:48:
                    2f:55:ab:f9:8e:33:d6:04:9c:85:ca:cd:04:e8:00:
                    32:aa:0e:c9:3c:1a:9e:c5:dd:a6:d3:78:a6:f8:21:
                    ea:72:9c:34:75:d7:50:6c:1f:4e:da:90:a6:e4:07:
                    c2:3e:2b:4c:1f:3c:dc:ce:b8:2b:30:b7:3f:53:78:
                    f3:5c:5f:d8:9e:cc:9d:ce:21:1e:c7:ad:18:8e:00:
                    d1:ea:db:ed:8f:a7:fe:89:5f:97:bd:00:62:c6:29:
                    fe:7d:3b:9c:0a:0a:1c:72:27:2b:f7:e0:3b:ca:7b:
                    1b:e3:2e:d4:51:97:f3:b4:23:d6:03:ec:60:f4:e3:
                    e7:5f:dd:f2:99:29:61:dd:71:1f:b3:31:d4:89:9f:
                    43:ad:0a:6d:eb:44:3f:e0:51:d0:7c:17:2c:c8:c6:
                    e1:54:57:4d:32:8a:12:f0:a0:53:35:69:59:5b:27:
                    bd:1e:87:7d:23:64:fd:cc:5e:de:49:a9:b7:8d:90:
                    93:a2:36:9d:b9:a7:54:a3:4a:03:f1:47:f2:20:91:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:33:A8:65:BE:B5:83:16:28:E9:B2:EF:C3:F1:FE:49:C5:42:9C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.140.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:00:a5:dc:45:fe:f6:37:b9:ba:22:9a:ec:a0:8f:11:dc:
         35:e3:7f:22:3f:ad:20:f2:3f:e1:5e:fa:79:2c:52:8b:18:11:
         ff:dc:d4:65:78:f0:6b:e2:49:de:47:86:1f:9f:5e:cd:3d:83:
         5b:7f:8d:ce:38:5a:d4:84:a1:6c:f7:aa:c8:66:82:a8:33:6c:
         d7:46:3b:c1:fc:c2:db:7f:d9:6f:12:12:6c:4e:cb:b5:e3:a6:
         ed:54:d6:59:a6:65:43:21:6e:e4:0a:a5:1d:a3:7b:9d:1f:34:
         42:4c:29:86:8f:ce:a9:d5:0b:13:cd:d6:d1:b0:9d:e4:3d:12:
         bc:db:18:7c:7d:b0:02:42:71:31:e1:1b:57:27:a8:54:6f:4e:
         35:b7:4d:0a:e0:26:7f:93:52:cf:43:a6:9f:83:34:e7:a0:b9:
         1c:7c:ff:aa:0d:f2:90:ae:c4:7e:f4:78:3c:ca:6b:4d:fb:a7:
         b7:03:88:ea:1a:de:18:83:66:7e:79:c0:10:57:cb:e1:c1:2b:
         47:a4:98:d2:2a:af:b5:2a:64:59:a1:5f:a1:dd:a2:42:45:41:
         ed:94:9f:9b:15:7e:b2:8f:4d:e8:e7:65:9f:dc:09:13:61:47:
         c9:5d:fb:ca:69:85:2b:fb:63:cc:40:ca:68:59:6d:24:51:96:
         d8:52:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:06 2026 by rpki-client