Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/15bad99e-9ab2-334c-ac21-bede761047fe.roa
File:                     15bad99e-9ab2-334c-ac21-bede761047fe.roa (raw, json)
Hash identifier:          UPQpPUioxLWJBbKnO7Sd8IWlC3KUgmD7YgXEQj7aS9o=
Subject key identifier:   38:AD:4F:F8:A2:03:3F:A6:63:BB:B7:57:6D:25:7B:5A:C1:49:D8:BF
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F4328584F698D7D92F3ABABAA2A371D00
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/15bad99e-9ab2-334c-ac21-bede761047fe.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        67.226.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7d:92:f3:ab:ab:aa:2a:37:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=cc092f80-5c85-41db-a84a-9cfe8d945dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:12:0c:d2:78:24:cf:f3:11:d0:8d:03:33:
                    62:23:32:a6:f8:6f:9f:f8:21:9e:ad:ba:6a:fc:85:
                    48:28:e7:26:b4:9c:59:f8:c8:2b:20:53:2f:00:94:
                    1e:ab:1e:02:94:32:9f:57:ed:2f:1f:9c:a8:d6:c6:
                    49:3c:70:fd:e0:d9:1e:8e:df:b6:aa:2f:cd:fd:8e:
                    e7:44:ba:60:52:0c:70:68:2a:b1:f9:ac:34:c5:06:
                    81:b9:d2:73:97:7b:a5:38:a6:cc:19:7d:4b:9d:1e:
                    78:50:eb:a6:0d:d0:51:67:4f:a6:d7:69:89:bd:2e:
                    84:57:f9:00:29:a6:5a:4e:74:82:49:cc:e4:c7:88:
                    25:6d:45:17:33:a5:ea:6f:93:49:b0:24:bf:18:f1:
                    a2:67:4a:e2:76:86:b7:69:71:ef:4e:f3:f3:f2:68:
                    1f:07:04:dc:28:72:8d:2d:e7:1e:8c:e1:9b:3b:8d:
                    71:5d:03:f1:38:02:02:59:ce:2f:08:a5:e0:3b:21:
                    50:2d:38:ba:60:d9:1e:c0:a5:19:47:68:2a:49:ef:
                    da:7b:43:6d:71:8d:35:7b:fe:ec:0e:5a:73:c9:87:
                    39:57:42:db:e2:35:da:f4:e0:37:6b:a9:e4:87:af:
                    99:f6:2c:33:94:4d:ab:af:4d:08:2e:ff:80:6e:48:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AD:4F:F8:A2:03:3F:A6:63:BB:B7:57:6D:25:7B:5A:C1:49:D8:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/15bad99e-9ab2-334c-ac21-bede761047fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:55:77:12:27:3b:68:ae:4c:b7:41:ff:0a:96:fa:80:9a:7d:
         92:07:b1:9f:f9:80:c4:41:c3:af:6e:cb:bb:70:d6:a2:85:a8:
         ca:a9:89:0b:95:07:27:99:1c:01:d5:07:b1:ad:61:44:f2:72:
         c3:1c:c0:9c:0f:aa:91:13:47:86:4d:d1:9b:ca:d8:10:8c:15:
         c8:e4:57:21:74:19:83:11:3f:97:ae:78:d6:a0:6b:66:24:a6:
         2a:cc:e1:a3:75:57:40:1f:a1:6a:10:0e:b1:2b:82:33:1e:84:
         3f:bb:50:2b:21:07:c8:12:7a:f2:5a:d0:a5:56:28:40:06:c2:
         58:98:31:28:f8:f3:25:30:eb:f9:a1:46:69:86:ac:da:7b:6b:
         ae:f7:44:0e:27:b7:68:1f:5f:31:b6:cb:16:37:1b:ca:2a:20:
         ac:da:25:3b:91:81:ea:32:ad:ce:d2:f1:0c:f7:67:bb:15:81:
         68:0d:1a:86:3c:a9:d6:42:b7:52:9c:d6:1b:d0:1b:39:d5:ba:
         72:e9:48:59:81:5a:38:24:43:35:f2:47:f4:01:3c:ee:a5:16:
         bd:1d:21:99:43:e3:bc:29:cc:04:97:ab:8b:12:22:46:f1:d9:
         5d:6c:20:8e:22:3e:20:2c:4a:4a:d1:26:ed:c6:f7:2d:40:ab:
         03:c9:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:38:55 2026 by rpki-client