Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad9be6ce-7a2f-3f78-ae02-8c988fbda48f.roa
File:                     ad9be6ce-7a2f-3f78-ae02-8c988fbda48f.roa (raw, json)
Hash identifier:          w2z22GezYkl8tb5DGjIbQ0lSzB4gJVNq+tdPCM/YA30=
Subject key identifier:   92:25:D4:05:C7:57:7C:86:D5:AF:20:8C:D6:D7:79:5D:68:85:D2:F9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7ABD2E0466D05D820134B040
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad9be6ce-7a2f-3f78-ae02-8c988fbda48f.roa
Signing time:             Mon 12 Oct 2026 16:45:15 +0000
ROA not before:           Mon 12 Oct 2026 16:45:15 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     202436
IP address blocks:        149.7.24.0/24 maxlen: 24
                          154.49.101.0/24 maxlen: 24
                          209.146.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:bd:2e:04:66:d0:5d:82:01:34:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 12 16:45:15 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=c0fd0502-8104-47d8-b950-6b26e4d18c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:9e:db:49:46:c5:c0:b6:e2:21:f2:08:f2:
                    aa:56:52:1d:bc:d3:80:08:da:48:d3:f6:8a:5f:08:
                    e9:11:e8:5f:bf:dd:88:c5:4d:82:13:5c:9f:89:d7:
                    a9:26:5b:fd:ac:67:c9:f8:1a:06:91:f5:ff:96:d4:
                    27:12:c6:1c:c7:64:98:15:02:18:8d:b1:cb:01:ac:
                    71:37:39:d0:1a:a2:2c:26:23:6d:e2:ec:dd:ca:3c:
                    f9:65:0b:c9:e6:2c:37:ae:c6:5b:4a:a5:29:bd:61:
                    6f:7e:7a:34:4f:0d:54:5e:b5:0c:47:cc:dc:96:5a:
                    59:af:f6:5b:5b:66:0b:6d:46:9d:02:cd:44:cb:9f:
                    10:3f:ae:8f:b6:24:c7:b5:1c:87:04:7e:7e:a5:69:
                    d3:5f:6c:06:48:1e:22:06:e1:ab:86:86:da:69:e0:
                    c3:09:a9:2a:fa:29:6c:6f:09:7d:38:dd:c6:fe:1b:
                    a7:53:c6:ee:11:d0:1c:5c:1d:fc:3e:32:f7:e4:9f:
                    d7:7d:75:1c:32:15:d7:1f:7f:33:2b:04:d3:51:4f:
                    52:e7:68:f6:6f:cf:08:f3:e5:e1:b7:7f:f6:d0:e5:
                    30:2a:a0:2b:28:9c:5a:4c:ea:1f:6c:ce:bf:d2:46:
                    d8:7d:70:52:f0:2d:f5:f8:bd:20:02:84:0b:72:26:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:25:D4:05:C7:57:7C:86:D5:AF:20:8C:D6:D7:79:5D:68:85:D2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad9be6ce-7a2f-3f78-ae02-8c988fbda48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.7.24.0/24
                  154.49.101.0/24
                  209.146.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:39:3e:a9:47:d2:cd:f3:e3:98:89:50:0c:a5:db:c9:ce:97:
         8b:65:78:1b:13:a4:27:3f:80:56:29:51:53:a9:42:07:23:08:
         87:b5:65:72:fa:82:d4:98:ec:35:6a:17:77:ab:a4:1d:77:2f:
         f3:4e:d7:89:a8:1a:7d:29:93:b5:db:29:5c:e1:5b:4f:ff:24:
         d8:d9:1a:d2:20:ed:aa:74:25:f4:bf:61:55:23:2d:91:49:91:
         a0:d8:6e:73:3b:c2:7c:54:00:5a:dd:44:e8:6c:fc:d5:1a:48:
         c7:97:5d:f3:55:60:e9:71:48:55:95:c4:2f:44:cb:c0:6a:3e:
         2d:01:c2:96:1f:51:a3:16:45:c4:9a:11:ed:00:fb:8e:e3:18:
         85:17:90:c0:dc:61:61:2d:1c:e3:aa:c5:cd:ca:c0:54:80:0e:
         c7:d8:a5:2b:27:c5:61:89:95:d7:9b:97:85:67:1d:f4:87:73:
         40:b1:91:55:4a:af:c8:ef:39:aa:8f:3b:25:11:2c:6e:03:88:
         01:b6:8e:dd:fc:d1:71:d5:fc:b4:79:32:7a:d7:f1:55:e4:33:
         1c:1e:43:3d:cc:f3:78:61:e7:04:76:54:19:de:53:fb:1e:d4:
         b4:1a:8b:ee:fa:72:82:ca:13:fb:81:9e:db:95:a1:a7:73:ba:
         cb:1e:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:22 2026 by rpki-client