Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aee348f-3e86-34d0-8f03-e284e2fb7624.roa
File:                     1aee348f-3e86-34d0-8f03-e284e2fb7624.roa (raw, json)
Hash identifier:          dZFwEu9rEipnrr+VSgxF4vSZRgvqYq8XVfYo71bfgqM=
Subject key identifier:   DB:91:4B:8F:75:3E:D5:DA:72:84:E6:67:93:C3:23:F5:19:01:FB:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8DD867E68C0DE099A1B73C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aee348f-3e86-34d0-8f03-e284e2fb7624.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     16625
IP address blocks:        72.246.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:67:e6:8c:0d:e0:99:a1:b7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=f99e4b34-cb72-4eca-983c-7ddfe827cc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:90:54:52:17:91:0c:fd:49:b0:1c:ac:fb:
                    65:d4:28:0d:68:7d:49:c5:60:da:29:4f:47:58:69:
                    a5:be:9a:7a:9d:64:3c:29:f1:0f:9b:54:cb:53:35:
                    53:0f:bd:6b:b4:37:29:ec:0a:ba:04:07:28:00:ef:
                    f6:0b:a5:7c:2b:0c:01:d2:3e:dc:ba:6b:b2:44:56:
                    0c:48:e1:2f:97:0a:81:dc:46:8a:59:f8:3e:9b:5f:
                    9e:82:6e:d9:ec:2d:e5:b7:e5:6b:73:71:0f:49:67:
                    2a:39:7f:a3:61:da:a4:00:54:a3:2a:9d:bf:65:1c:
                    b8:65:7a:99:ff:80:fb:a7:76:f4:99:ae:3e:55:ed:
                    5d:a1:9e:8f:45:1f:98:29:cf:39:bb:12:29:f7:93:
                    79:bd:e3:8c:51:f9:78:ac:54:90:d8:05:92:d3:29:
                    46:a4:49:0f:b7:f2:6f:ab:34:e6:df:df:b3:f7:dc:
                    27:b0:f6:ea:98:45:32:7b:cc:82:f4:3f:3e:4d:91:
                    5f:eb:b6:e5:3d:78:71:f1:5f:42:79:fd:4b:9d:4e:
                    c1:97:52:ca:0b:69:79:0a:ae:3a:34:5f:e9:07:2b:
                    7e:e5:f5:a1:02:c7:15:d7:d3:0e:7c:42:e0:b5:82:
                    cb:24:94:cc:40:59:51:62:7d:c6:b6:b6:a5:15:e1:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:91:4B:8F:75:3E:D5:DA:72:84:E6:67:93:C3:23:F5:19:01:FB:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aee348f-3e86-34d0-8f03-e284e2fb7624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:85:c6:c9:04:02:b8:ea:d0:d1:16:eb:c0:fc:d7:60:8a:f7:
         23:25:45:dd:1f:a3:0d:15:68:80:d5:81:61:42:00:53:e6:a3:
         70:52:9c:a2:61:0f:a8:1a:cf:91:d2:91:c0:24:fb:c7:87:27:
         91:42:fd:4a:61:0c:db:53:5c:47:61:d7:5a:09:90:cd:da:a7:
         9b:0a:d8:8b:3f:87:b7:2e:16:b9:93:3f:55:3b:44:4b:d4:54:
         41:5e:bd:9a:30:59:5a:bc:61:e5:5d:79:39:1e:de:ba:78:7c:
         35:21:d6:c7:db:10:92:57:d4:56:2e:47:ad:27:a5:ab:ec:7f:
         5c:de:d1:6e:e8:bb:d8:1f:10:c4:af:42:94:58:6f:23:a2:d7:
         29:46:7b:08:95:73:72:72:db:f4:cd:a4:09:6d:bc:aa:87:d7:
         1f:9f:9f:af:34:a8:18:88:37:29:ba:30:8e:ab:77:fe:77:e6:
         fe:69:05:03:e5:75:25:b6:7c:51:2a:ae:66:73:c4:be:67:1c:
         fc:3d:76:59:dc:71:ed:45:83:fe:81:f7:5c:f9:2c:27:68:67:
         b8:c5:65:d9:2d:f3:f7:c5:29:8c:84:7c:14:d8:e8:58:13:88:
         e7:47:dd:68:64:2b:f5:08:1f:5a:36:2a:87:a5:38:25:32:ff:
         a7:99:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:57:35 2026 by rpki-client