Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/94cd5ce8-e3e9-3571-badc-ad3dfe1ec81b.roa
File:                     94cd5ce8-e3e9-3571-badc-ad3dfe1ec81b.roa (raw, json)
Hash identifier:          m8RO6Vx7d0TG0JhBkJxIiLWl+0Ayf/jBdWz//+CG0Hk=
Subject key identifier:   EB:97:87:AC:0C:4F:A5:16:C8:48:0B:D4:2D:80:B5:A1:99:CB:05:BA
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584F4974E3D3EB557411352E2200
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/94cd5ce8-e3e9-3571-badc-ad3dfe1ec81b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14955
IP address blocks:        64.68.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e3:d3:eb:55:74:11:35:2e:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=681f03cc-b0e6-4b72-8021-c9571e2c30d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:29:33:fa:a0:81:c0:d5:24:6c:3a:42:53:
                    a8:9c:d0:68:ad:44:43:52:b5:49:09:6f:86:b3:15:
                    b2:af:ca:82:a3:7a:14:6e:bc:ec:77:95:e8:bc:39:
                    cb:31:ca:86:c3:a2:4d:cc:6a:ee:ef:66:68:aa:ce:
                    f6:ea:d7:ae:f5:cf:4f:fa:f9:d2:b6:88:94:4c:ee:
                    28:4d:c2:1d:ae:27:59:1d:6e:18:c2:61:ed:7d:82:
                    72:9b:ed:30:ec:a2:4d:a9:f9:16:04:d5:84:b1:3b:
                    fc:e2:d9:74:dd:62:49:d7:8b:5d:60:07:01:3a:ea:
                    38:1d:ae:0f:43:95:36:2b:e4:70:7e:59:eb:b9:d5:
                    07:56:be:46:18:96:2f:6c:57:12:18:11:3c:a6:db:
                    38:0b:92:e6:f2:15:9b:f8:b2:b7:ae:5b:78:46:53:
                    2c:7c:f4:53:e6:7d:7a:94:61:7d:58:6c:94:a1:be:
                    ab:49:3b:b1:4b:ff:3d:21:ff:95:4f:d1:84:bb:36:
                    06:d5:e8:36:47:33:c6:83:2d:91:67:44:26:ed:85:
                    9b:fe:55:29:c0:a5:55:64:86:db:30:95:28:eb:0b:
                    69:b0:37:cf:db:bf:0a:0a:51:08:bf:c4:55:14:0e:
                    11:99:52:80:5e:ed:84:3f:ec:c0:46:01:56:a4:48:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:87:AC:0C:4F:A5:16:C8:48:0B:D4:2D:80:B5:A1:99:CB:05:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/94cd5ce8-e3e9-3571-badc-ad3dfe1ec81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:27:7f:e1:89:f0:fb:89:b7:b4:08:5d:d5:da:65:58:e9:
         5c:00:e2:61:81:c4:3c:1c:6b:a5:da:f0:33:42:18:9f:c7:de:
         61:a3:88:c3:73:53:95:0b:1c:c4:9e:55:b4:79:91:e8:99:a0:
         cb:b4:f2:ab:98:26:f6:be:76:0b:43:44:03:05:09:fd:c5:27:
         f8:9c:7b:f5:31:53:e8:4f:5d:14:fe:c6:e5:c0:9c:98:8a:1e:
         f5:c6:45:18:33:2b:41:77:20:93:0a:a3:88:b5:91:89:f9:e2:
         8e:8c:4b:39:bf:0b:b6:33:da:7f:3f:5c:e1:0e:d7:85:e1:5d:
         ea:24:8e:87:d6:e3:39:a9:9b:1c:05:70:32:c0:44:15:07:fc:
         79:5b:cd:40:4d:b9:23:2b:d4:71:2f:f8:57:b2:13:05:61:fe:
         7e:b4:87:2e:57:af:d3:60:ed:ee:32:b9:49:0a:f4:35:00:3d:
         07:25:85:ce:80:c5:33:3f:10:d9:49:cf:29:b3:b5:ff:df:40:
         99:f3:4c:09:f8:51:a5:29:e8:c2:18:e0:a1:3c:04:c5:fb:9b:
         40:c4:5f:c0:f6:6e:5e:5c:38:54:2e:ec:e5:08:16:d7:d3:78:
         ed:0f:5b:6e:45:35:9b:ba:ef:84:75:de:bf:cb:09:b2:24:2f:
         03:06:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:29:05 2026 by rpki-client