Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa
File:                     b22abd72-0314-3d31-bb53-c6c482f407aa.roa (raw, json)
Hash identifier:          wVietV3hZuIrnr4bTK8bMH10eFV/dUvzMRS+VQF4Y3c=
Subject key identifier:   1F:C4:EE:64:35:2F:47:E0:FF:64:8A:08:9F:D5:DA:2E:F4:EB:9A:BD
Certificate issuer:       /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial:       010D0C9F4328584F698D7B39BB01F326BA8A2F40
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        208.79.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7b:39:bb:01:f3:26:ba:8a:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=c45fcb22-51cc-4652-a239-564b4b673d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:c6:5b:a1:27:e0:4e:44:02:64:37:ab:f8:
                    03:07:14:88:85:d6:83:b8:b5:50:86:0a:01:41:ef:
                    64:33:66:32:4e:00:4e:34:2a:56:7f:fd:a9:e9:85:
                    73:fd:a5:78:8d:c7:62:86:d3:77:e9:60:5e:88:79:
                    b1:e1:3e:96:ca:09:d7:7a:31:a7:01:91:a0:ec:fb:
                    0b:b4:bb:67:f0:89:07:e0:dc:5f:3c:33:24:1e:de:
                    47:41:28:a2:9b:a9:28:1c:06:35:5e:d7:c9:c6:79:
                    de:45:05:c9:6c:3d:2f:e4:e9:ca:a0:4b:2a:e1:ae:
                    8f:2d:fc:af:cd:7e:83:39:3f:0b:73:ff:b7:5e:50:
                    2f:19:c5:c2:35:0b:ec:7d:cc:fe:9b:7d:53:bf:ae:
                    e1:c7:90:d5:f7:0b:30:9c:6e:ec:f9:77:51:76:d8:
                    1d:8a:55:90:2c:d1:46:6e:4d:6d:fc:8c:85:3b:f2:
                    19:a5:72:f4:57:3b:17:e7:4b:ec:9f:58:ac:2d:88:
                    cc:99:73:9a:41:ec:9b:4d:fa:ba:1e:e5:a8:7c:ce:
                    47:c4:c5:28:cc:55:2b:b8:69:5d:18:2f:f3:40:07:
                    b7:98:9e:6a:53:cf:30:4e:3f:c8:6e:90:4f:7d:2a:
                    29:67:6c:cc:2c:5b:06:d0:ab:7e:77:45:11:74:91:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C4:EE:64:35:2F:47:E0:FF:64:8A:08:9F:D5:DA:2E:F4:EB:9A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl

            X509v3 Authority Key Identifier:
                keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ff:8b:75:87:e9:f3:71:05:e8:06:4f:88:85:da:f3:63:50:
         85:fa:c2:e9:3b:64:33:b2:71:74:87:1d:5a:2a:12:d1:bd:cc:
         97:d5:dc:19:07:06:fb:08:fa:2a:b6:6f:82:30:a7:fb:9b:63:
         9b:20:f2:bb:a0:ec:3b:ed:ec:ce:6a:07:25:1b:81:21:86:98:
         f1:b3:a1:fe:cf:a5:47:fd:99:75:40:4a:c0:5a:21:c7:60:7d:
         ec:78:cf:97:dc:2c:41:63:8d:3c:4c:0b:aa:18:63:98:cb:bb:
         ce:c8:31:b3:6d:f3:aa:84:b4:95:d7:3b:e2:e5:d4:e5:d6:2e:
         3a:0e:a1:52:f6:3c:8c:f3:2a:7b:79:2e:2f:4d:e7:cc:a9:88:
         78:62:d8:57:dc:cc:ac:b2:a6:3c:ae:7a:f2:6d:37:88:e5:34:
         24:ec:35:d4:4b:79:17:ca:2b:a6:26:3f:82:0b:14:7f:3f:c4:
         b2:be:84:6b:62:0b:b2:d2:e5:5b:cd:26:ed:69:95:ee:73:5f:
         3c:3d:ae:74:f6:14:1e:7a:c1:d7:88:93:e7:92:8d:dd:8d:13:
         3d:7e:01:1a:da:c7:a6:e0:c1:1b:db:77:3e:24:5b:bb:29:04:
         75:e6:e1:2c:74:e6:58:18:be:d4:26:b2:41:86:1a:05:45:28:
         a0:95:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:04:10 2026 by rpki-client