Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/82860d3d-e54d-387c-bf22-80b68712e7f4.roa
File:                     82860d3d-e54d-387c-bf22-80b68712e7f4.roa (raw, json)
Hash identifier:          Pee1+upyWf9KhqhhDNztvBH0V6KqRx7cU1lMvMT0+Ks=
Subject key identifier:   F0:93:80:07:19:EA:D5:4A:45:53:71:42:89:23:2C:3A:0E:53:C2:FF
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584F5767FA284348BAFA9DE68540
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/82860d3d-e54d-387c-bf22-80b68712e7f4.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     400110
IP address blocks:        184.169.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:fa:28:43:48:ba:fa:9d:e6:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=6fddab08-6ff5-4b11-aec3-0c658ec3d067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:e2:8e:15:25:ea:31:ff:5c:ed:4c:5c:cf:
                    be:8f:85:8d:c5:36:99:e6:d2:9d:b9:08:45:09:b5:
                    74:13:4f:7f:9f:76:27:21:0c:fc:19:c7:da:a9:cf:
                    07:4b:98:fa:82:bf:2a:62:33:e8:19:e1:52:d1:e9:
                    12:28:4a:df:f5:c8:61:6a:74:86:70:06:b1:62:3c:
                    24:2d:f4:87:11:ae:ac:b4:1a:29:ac:1d:4e:7e:d9:
                    bf:1a:33:8b:df:33:02:c1:4e:3f:ee:b4:79:98:5d:
                    39:e4:84:32:2d:34:d2:fb:58:66:e4:1f:ea:41:47:
                    96:fa:96:5d:be:03:34:ea:e0:8f:55:f7:6c:f4:66:
                    0f:a4:2f:61:45:e5:7e:f7:6d:d7:85:fc:ef:bd:76:
                    a6:30:f8:63:e3:18:04:ff:18:89:13:4e:1e:ab:8e:
                    08:4b:78:f5:b8:df:c0:b0:ea:dd:3c:94:50:64:83:
                    3e:eb:f8:ee:7f:10:b3:ea:82:4b:20:56:27:0b:0e:
                    80:c5:04:64:91:e4:c1:c6:6c:f1:4b:0a:d7:4e:26:
                    c1:4b:cf:f8:7a:96:b6:c2:fd:f0:2f:7a:54:d0:25:
                    7b:bb:bb:0d:49:c7:43:f0:de:7c:ee:23:a6:f2:3c:
                    24:45:7e:46:34:f3:fc:90:2a:2d:d8:03:ad:3d:00:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:93:80:07:19:EA:D5:4A:45:53:71:42:89:23:2C:3A:0E:53:C2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/82860d3d-e54d-387c-bf22-80b68712e7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bb:30:62:e8:a9:d5:ba:01:db:79:61:fc:a2:54:6f:3f:20:
         c3:27:af:19:06:a2:5f:54:d6:d5:ed:f1:ca:68:89:50:cb:fc:
         5c:c4:d1:db:b8:a8:d7:e2:94:ab:e8:e0:76:ca:c0:ce:b1:44:
         f3:cc:d8:32:f0:61:9e:f7:14:37:db:6c:16:a1:0f:0c:97:f0:
         62:72:44:8c:80:88:30:7a:4b:1c:aa:0c:33:53:bb:87:e6:54:
         0b:aa:1e:91:7b:40:76:ce:a8:2e:69:fe:9e:9f:10:07:02:91:
         ae:d9:7f:e2:d4:ea:aa:73:1d:96:69:43:fa:0a:d0:bd:e1:cf:
         66:0c:65:a4:d2:d9:47:25:ac:75:c4:09:98:64:c4:ea:b5:30:
         e3:da:f1:38:c1:65:f6:83:98:97:10:a4:be:c6:3c:61:22:b9:
         3e:a5:c7:7e:e2:1f:ee:01:58:67:ed:6d:4e:c3:dd:46:f9:01:
         cf:dd:77:0c:ef:cb:56:6e:28:9c:24:f6:02:88:04:78:eb:1a:
         b4:32:f0:ff:65:d8:6d:59:d8:eb:41:0c:08:dd:21:b5:d7:17:
         59:9a:ef:13:4f:d2:31:42:a5:bd:b7:fe:ed:cb:7f:c8:a6:22:
         a3:ae:69:0a:82:1c:16:b9:41:bf:3a:53:98:98:e6:d9:98:a8:
         1f:ce:80:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:35:18 2026 by rpki-client