Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa
File:                     03e688c7-732f-3297-8ea1-e37d0210334f.roa (raw, json)
Hash identifier:          eMNh+4RPOBma2VhW1tBS0jfwGyuT0vym/TfuQqD/JGw=
Subject key identifier:   53:C9:2F:79:8D:05:8E:BF:30:26:03:31:3E:15:ED:2E:C5:8E:EF:58
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584F549D64B1FC3664A33B169200
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     53407
IP address blocks:        158.120.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:64:b1:fc:36:64:a3:3b:16:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=76ba25b9-4b86-4563-a3ef-b73095aea5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:38:bd:3b:a9:a7:8d:93:82:01:6c:52:7c:
                    e6:3b:b0:7a:3d:fb:f3:10:dd:07:50:95:3e:f1:d5:
                    1e:c0:37:fa:70:13:01:8d:ad:67:3a:49:1b:94:51:
                    48:55:c0:19:ad:cd:dd:54:e5:6f:01:2c:b7:1c:26:
                    f6:41:b4:6b:8a:a4:2b:8a:a8:29:01:b7:f7:2a:e0:
                    ca:a7:fe:cd:a5:44:cb:79:da:51:a8:b0:cb:c8:82:
                    a2:24:b8:d2:2a:05:3a:12:c2:aa:a1:9e:c7:2b:14:
                    f4:23:1d:ba:50:cb:d4:fc:7f:f7:cb:d8:6b:85:40:
                    3f:a9:dd:b8:0d:ee:ba:b4:9e:d2:5f:51:2a:ea:f7:
                    0c:07:10:4d:ca:c0:fd:6b:fc:8b:94:fa:82:25:1a:
                    b9:84:36:56:ad:95:bd:97:08:da:b1:72:bd:13:3a:
                    da:f3:05:fd:cc:7f:62:c0:d7:a5:20:52:e8:4c:fb:
                    59:dc:59:37:f8:9b:a6:6a:e4:3b:81:df:01:6c:b0:
                    eb:9b:2e:01:fb:ca:d9:ef:9b:7f:f3:c9:a1:a4:16:
                    04:51:25:98:0b:ae:fb:db:cc:23:14:24:e5:b4:09:
                    54:aa:47:85:62:a7:17:4d:92:f7:f6:c2:43:0a:40:
                    43:66:0f:7a:af:0a:61:e8:34:33:38:32:08:31:b0:
                    8b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C9:2F:79:8D:05:8E:BF:30:26:03:31:3E:15:ED:2E:C5:8E:EF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:be:33:4e:ea:61:99:d7:d1:db:47:82:3d:91:3e:31:9a:55:
         08:da:42:20:bd:9d:b0:a5:05:aa:2c:37:12:35:0b:7a:c8:53:
         91:94:b2:bc:7f:74:8f:e1:ef:98:23:b2:65:7d:7e:63:66:44:
         ca:4a:4d:3b:55:ce:38:8b:88:0d:10:ae:7d:06:e9:d5:07:03:
         56:a5:e0:9a:fa:92:8d:55:4a:a1:3f:58:5d:b8:15:c4:aa:47:
         31:ac:77:5b:2c:7e:7b:85:e0:e7:49:d1:9c:87:08:6a:5d:29:
         82:cd:65:ee:2e:eb:f4:0d:fb:2b:cc:c7:4f:a9:3a:14:df:b2:
         75:f0:c6:bf:96:8b:fa:fc:39:3e:ee:4f:67:54:4a:fa:ec:3d:
         4a:19:9c:2e:e6:ec:d9:d5:2a:4f:c3:ba:31:a0:dd:8d:c8:e0:
         b6:1e:16:27:4f:1f:c7:c5:04:cd:e9:e4:fd:d3:07:27:a4:55:
         bf:de:5d:c1:17:39:60:0c:81:92:8d:55:e9:d5:e5:18:b3:00:
         a1:93:b2:91:9f:d8:93:0a:67:85:af:52:20:7e:ce:1a:fa:78:
         68:ef:91:d6:c3:e8:cc:fc:eb:f4:d0:e9:bc:f1:a5:37:d5:43:
         22:82:73:73:61:1b:bd:24:55:9a:5d:b6:3a:2c:3d:9c:f7:fe:
         2c:fa:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 06:00:21 2026 by rpki-client