Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa
File:                     bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa (raw, json)
Hash identifier:          kkFlzWwin3sRYZLxI9rvPWVLDDP3wB7XUrfGvzNVwgU=
Subject key identifier:   29:EF:90:C0:49:6C:4E:41:D2:A9:4F:CF:30:77:FB:CF:A2:49:F0:7C
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F4328584F66C2BF7BE4E3245D002092C0
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     91
IP address blocks:        204.76.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bf:7b:e4:e3:24:5d:00:20:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=10981885-50e1-4553-ae3c-5e66add14976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:f5:dd:b4:a1:02:be:fa:18:b6:6a:0c:38:
                    20:2d:ce:a2:6e:6a:a0:16:87:ba:b2:48:c7:b1:d0:
                    2f:81:ee:dd:5f:3d:d9:08:40:ec:be:bb:84:f1:06:
                    3b:90:00:63:31:91:fc:b5:0d:34:64:25:d0:14:46:
                    07:7f:77:73:41:c9:42:f6:61:2f:2d:73:5c:e5:ad:
                    8a:85:72:25:3b:74:6e:f6:93:f4:04:4e:7e:b0:93:
                    7c:a0:9e:1d:7e:c7:57:1b:0e:84:c1:4f:0a:3d:f7:
                    b3:31:1a:76:4a:f2:20:ce:d8:e4:ae:ce:3a:8e:97:
                    de:de:cb:c7:40:06:42:cd:48:cc:dc:3f:5b:1f:ff:
                    03:c0:96:01:e7:09:76:16:cd:4a:b7:dc:67:eb:8e:
                    50:ba:c5:0c:c2:b6:5d:b5:8a:ca:2d:a6:24:30:19:
                    ff:5e:4b:a2:00:58:61:99:fa:69:09:37:ee:b6:5c:
                    8e:f6:b9:b1:fa:20:37:48:b5:4b:a3:83:48:0d:2e:
                    65:a8:67:1b:7b:fd:71:b0:87:4a:c5:96:b2:04:03:
                    69:98:5e:1e:6b:59:ee:6d:8a:99:6f:00:84:9d:36:
                    87:88:26:9f:7d:d7:b8:8a:67:a6:c2:88:72:8f:48:
                    7d:e7:48:d6:33:ec:0d:0b:08:d4:41:bc:0e:f9:0a:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:90:C0:49:6C:4E:41:D2:A9:4F:CF:30:77:FB:CF:A2:49:F0:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.76.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:50:0c:67:66:f0:6a:6a:aa:b5:24:01:43:1c:fd:06:01:a2:
         02:54:c2:c0:2e:5a:7a:2f:02:7b:bd:d3:fb:d8:51:0b:cf:62:
         0e:61:bc:3e:db:c6:8f:c9:09:6f:b2:8e:60:48:41:96:50:76:
         c0:68:55:0f:16:20:d3:61:f7:af:e5:36:ec:19:65:d6:e9:2e:
         38:76:8d:0b:b5:5a:c9:52:00:24:a4:9f:92:3c:3e:12:b5:9f:
         5e:f7:f8:13:ed:72:92:fb:7a:af:fc:2f:41:64:fb:a6:b2:c2:
         e9:ae:12:d0:f7:88:d1:33:8e:b7:11:37:bd:36:72:1f:43:ae:
         ac:d4:77:71:ca:57:a7:a3:3f:56:b6:cf:13:93:d8:fc:94:54:
         35:1d:03:a0:ae:e2:0e:91:0e:97:84:98:bf:6e:17:fa:12:75:
         1b:4a:90:1e:23:27:06:5f:9f:2f:98:89:e5:27:3e:a0:1b:ae:
         26:c2:2d:26:35:5b:02:d4:da:81:97:3a:6f:99:8a:f1:8d:1c:
         3a:f9:c6:2e:ee:cf:e9:45:28:6b:52:2f:38:8f:8b:d4:39:1d:
         20:6b:73:24:86:5f:e9:94:b3:b0:7a:39:da:e3:82:03:bd:d6:
         9a:7f:7b:e7:c7:a5:97:2f:bc:d2:15:df:2d:85:e6:b2:f6:ca:
         b8:6a:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:55:31 2026 by rpki-client