Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
File:                     684afc08-241d-3133-9300-b05e5c02b68f.roa (raw, json)
Hash identifier:          mYRR3XRFXwWIYkMIEaeblORsjkD43Fnt7qDUUAiDC1s=
Subject key identifier:   1A:B8:D2:BB:0E:6F:CA:FF:84:45:F7:A2:F6:B9:B7:5C:B9:5D:CA:31
Certificate issuer:       /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
Certificate serial:       010D0C9F4328584F49765BC6E9913C33F168E400
Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32852
IP address blocks:        204.10.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:5b:c6:e9:91:3c:33:f1:68:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=28c9b18f-b856-4394-b415-e6cc57958bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:ba:b5:92:ea:c4:34:c0:9e:7c:50:dc:46:
                    15:b5:fa:e6:f3:a9:35:0c:2b:44:b7:28:f1:5e:9c:
                    21:21:a9:61:4d:50:a2:24:91:5d:03:db:4a:78:07:
                    db:f1:ca:bc:c0:57:34:e3:17:19:1a:1a:65:62:22:
                    a8:9c:99:c9:50:41:8d:b8:12:70:82:e5:de:8e:71:
                    77:f3:36:3a:65:71:5c:70:c0:8d:75:5e:78:ee:11:
                    33:ac:67:c8:05:13:8d:be:dc:20:86:2e:21:0c:58:
                    57:4c:c3:62:47:f6:65:ca:5c:5a:18:cf:bd:7a:c0:
                    23:1b:d3:80:e9:69:d2:e6:6f:61:e5:de:1d:79:e9:
                    f9:b4:0c:7e:ec:e6:c4:0b:79:f5:a3:06:5f:dc:d0:
                    26:0d:29:98:34:36:9e:cc:43:23:e8:46:15:81:d3:
                    69:5a:0d:04:e6:6d:fa:e2:7d:dc:f8:7a:e4:ff:ae:
                    bb:36:df:24:10:a5:3a:82:46:5d:56:72:c8:8e:fb:
                    63:04:31:2e:be:66:f5:df:94:1d:ef:f1:88:b0:40:
                    32:55:97:ec:2b:df:26:04:81:42:52:29:d5:56:dc:
                    6b:9f:8d:73:3d:c8:35:a5:82:de:2a:f1:d1:a5:d3:
                    ee:29:e4:07:cd:ff:3d:b3:82:9d:51:55:74:40:95:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:D2:BB:0E:6F:CA:FF:84:45:F7:A2:F6:B9:B7:5C:B9:5D:CA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl

            X509v3 Authority Key Identifier:
                keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:45:fa:34:2f:7f:54:49:5f:53:08:e5:14:df:cc:8d:69:3c:
         bb:d7:b9:04:6d:01:ee:90:cb:37:c8:c8:33:71:bf:90:db:58:
         da:52:d6:f6:fc:1b:98:ed:65:2d:22:6b:f0:a2:d7:ba:1a:49:
         f4:1d:44:dc:2c:4d:90:b5:1d:36:cd:c6:8d:59:99:9c:87:b4:
         ed:44:e6:19:8e:14:0d:46:7b:46:97:31:58:89:7f:fc:dc:09:
         39:61:35:7f:9b:ce:64:20:10:54:a8:3c:46:f5:d1:74:4a:9d:
         90:ab:b0:5a:27:1a:5e:2f:2c:c4:25:43:d3:e1:6c:87:e0:b0:
         d1:46:ef:f0:8d:1e:61:49:b8:97:d5:92:49:ba:92:56:e0:65:
         f6:c5:59:41:d6:06:9d:f1:d6:1e:1e:cf:eb:74:fd:0b:11:79:
         a9:be:05:cb:a6:bc:51:9a:e1:3a:69:b8:4e:f1:da:7a:2e:9a:
         11:ee:55:31:8b:60:6b:f9:9f:18:e0:70:16:79:db:cf:7a:53:
         b6:78:07:60:6b:3e:bc:59:aa:61:2f:8b:ab:23:f5:43:42:86:
         3a:d0:1f:6c:c7:1b:31:0c:3f:09:e2:c1:87:42:fd:e4:85:fe:
         29:f6:35:28:7e:9b:18:5a:b9:eb:2f:18:2c:38:ba:9c:84:f6:
         e3:ee:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:02:35 2026 by rpki-client