Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36/9925c008-d630-3a7f-bb0f-4abd327e4622.roa
File:                     9925c008-d630-3a7f-bb0f-4abd327e4622.roa (raw, json)
Hash identifier:          4ETPb1K676Wxm3+ZoTv1ITvQA2U3Yl/kR+fJJPK5fZw=
Subject key identifier:   20:D7:35:C0:1E:4F:14:E1:7E:03:65:B4:49:E9:9B:85:2A:0A:F0:0A
Certificate issuer:       /CN=941e4258-be89-443b-959d-5ae4bdcdcd36
Certificate serial:       010D0C9F4328584FAAA08D23FFD77DA803E44C00
Authority key identifier: 48:CB:05:1E:28:A3:48:51:AE:AB:65:A2:26:C0:EE:44:C9:8B:3B:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36/9925c008-d630-3a7f-bb0f-4abd327e4622.roa
Signing time:             Thu 29 Oct 2026 20:26:22 +0000
ROA not before:           Thu 29 Oct 2026 20:26:22 +0000
ROA not after:            Wed 27 Jan 2027 21:23:20 +0000
asID:                     396191
IP address blocks:        104.254.200.0/22 maxlen: 22
                          172.110.56.0/22 maxlen: 22
                          216.162.216.0/21 maxlen: 21
                          2604:9ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36/941e4258-be89-443b-959d-5ae4bdcdcd36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36/941e4258-be89-443b-959d-5ae4bdcdcd36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:aa:a0:8d:23:ff:d7:7d:a8:03:e4:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941e4258-be89-443b-959d-5ae4bdcdcd36
        Validity
            Not Before: Oct 29 20:26:22 2026 GMT
            Not After : Jan 27 21:23:20 2027 GMT
        Subject: CN=75382c7e-8f94-4716-be30-a918f2ad9e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:c2:1f:97:ab:b8:c6:0d:56:a4:57:89:a1:
                    eb:36:72:42:e9:c2:19:a5:37:e0:36:24:0e:9c:a8:
                    40:2a:f4:41:a5:7a:f0:29:5a:fe:6f:da:1b:91:a5:
                    bc:fe:f2:8f:4a:94:ef:e5:18:23:94:42:48:c0:ce:
                    29:d4:5c:36:71:8b:07:2c:39:a6:c3:a2:43:54:15:
                    61:76:f8:0c:ba:a3:be:93:12:29:bb:be:90:cd:d0:
                    b1:d5:fa:4c:27:b4:f2:02:44:53:8d:35:72:1e:d6:
                    8e:1c:d5:43:dd:6a:1f:28:96:2f:f3:7c:54:3f:e4:
                    87:79:16:fe:c6:05:e1:47:df:49:f5:ac:be:3f:60:
                    df:92:3f:52:8a:81:47:62:81:1a:77:e3:be:83:6b:
                    08:a1:ad:f5:58:c9:ff:d4:00:e1:8c:8e:5c:4f:9c:
                    d0:35:5a:b7:30:4b:7c:99:bb:c9:c8:ae:8b:58:22:
                    2c:3c:3e:61:12:d4:42:3b:48:60:35:95:ef:3e:24:
                    ab:78:83:78:12:24:9d:0b:b4:8a:f2:3e:40:85:57:
                    b4:7f:8a:15:89:06:c0:b4:5f:87:55:af:17:96:c0:
                    9f:31:21:30:04:fb:1b:75:7c:10:d3:c4:13:35:90:
                    38:d2:fc:f2:9a:86:ab:db:f0:fa:77:b6:f0:6c:23:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D7:35:C0:1E:4F:14:E1:7E:03:65:B4:49:E9:9B:85:2A:0A:F0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36/9925c008-d630-3a7f-bb0f-4abd327e4622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36/941e4258-be89-443b-959d-5ae4bdcdcd36.crl

            X509v3 Authority Key Identifier:
                keyid:48:CB:05:1E:28:A3:48:51:AE:AB:65:A2:26:C0:EE:44:C9:8B:3B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/941e4258-be89-443b-959d-5ae4bdcdcd36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.200.0/22
                  172.110.56.0/22
                  216.162.216.0/21
                IPv6:
                  2604:9ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:38:59:50:38:16:9d:12:e7:50:bd:c6:a3:b0:ae:1e:da:
         a8:92:87:51:2d:c1:0f:4c:f2:74:d5:9e:ef:4f:76:9f:06:9c:
         0c:7a:81:56:ab:a8:9f:0e:f8:dd:6c:e9:4e:68:42:c0:bf:ce:
         f5:c4:f9:db:64:79:91:a4:46:c0:00:bf:52:fb:d2:c2:ca:28:
         a6:58:36:47:24:db:98:23:cd:32:35:b3:d8:f9:60:73:9f:9f:
         5d:ff:bc:6e:70:d3:52:03:be:cf:8f:05:a4:dc:4a:ad:63:17:
         2f:a2:01:64:ee:24:0b:33:af:9d:66:db:25:b0:ae:9f:77:a4:
         b6:15:bc:c1:90:20:00:c5:ab:9e:6d:d6:38:a1:4f:55:2e:5f:
         5f:af:35:f2:dd:14:b7:69:be:46:07:09:7e:b1:52:e7:54:14:
         e8:89:fe:ca:00:71:3f:b0:05:28:3f:72:b2:b1:52:b5:af:5a:
         2c:7d:32:47:1d:bf:32:e4:99:c5:ae:30:0b:3b:81:f0:8e:7e:
         0e:fa:07:0f:78:1a:70:4f:31:f1:36:6e:47:51:41:58:3c:58:
         37:fd:f5:26:50:97:d0:03:67:54:74:f7:31:4e:7c:07:61:2b:
         1b:2c:cc:b2:45:d5:e2:97:d5:9e:ea:12:06:df:b0:db:51:8d:
         a8:cf:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:25:41 2026 by rpki-client