Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa
File:                     48d069ba-5ef8-3f64-a653-d806fe8fd001.roa (raw, json)
Hash identifier:          /d0MccfUi8U6RP6vP+/EldussfvWECKwxPm/uKv7oHM=
Subject key identifier:   60:D1:0C:65:86:0A:77:F1:C0:45:F3:F8:24:9F:FC:7F:EB:6D:22:58
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584F6F2309B75EAF9F6405E00916
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     32329
IP address blocks:        207.53.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:09:b7:5e:af:9f:64:05:e0:09:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=9723aef8-081e-4ced-890a-942e00ddafe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:72:f2:f1:38:f9:cb:4b:2a:e3:db:aa:8f:1b:
                    64:d1:16:aa:27:68:a3:29:91:3b:80:65:70:8c:f7:
                    e4:7e:76:cf:59:59:af:eb:1c:3f:b9:4a:df:ae:e2:
                    25:be:74:79:bb:fe:bf:0f:50:e4:6e:4a:9a:eb:46:
                    e5:3c:c2:83:d3:8a:3d:03:2a:2a:e6:57:2a:63:06:
                    1b:06:f8:94:0d:42:7b:b1:e2:14:3f:68:07:23:97:
                    4e:2b:55:37:03:d3:6d:eb:11:3f:88:f0:77:85:1c:
                    4f:97:38:6b:e4:ab:37:d0:80:85:3b:4e:2c:80:10:
                    b4:b1:21:65:75:59:4b:d1:84:ab:a9:0b:a6:aa:56:
                    54:c2:b7:be:98:c8:c9:3a:49:74:d6:86:18:13:3e:
                    88:7b:1e:27:ec:84:0e:13:d3:2c:b0:90:14:a3:ce:
                    c5:32:31:d7:d8:33:9a:13:e9:34:6c:7b:95:cc:fc:
                    0c:08:c4:ae:22:8b:cc:24:99:bf:90:11:df:76:35:
                    12:19:9a:bf:01:be:27:6c:4f:e5:c9:8b:1a:be:34:
                    36:7e:48:1a:93:35:b6:53:05:f0:1a:09:a3:de:a2:
                    53:77:39:c4:d1:ea:90:ab:24:b0:f9:58:37:83:44:
                    0b:9a:8e:34:25:f3:d2:42:41:35:6f:51:77:6c:54:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:0C:65:86:0A:77:F1:C0:45:F3:F8:24:9F:FC:7F:EB:6D:22:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.53.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:c2:74:c9:c9:6d:ad:33:2d:5e:aa:21:6c:de:fe:7f:0a:
         6c:0d:73:e4:d7:74:5b:a3:c8:5f:ee:2f:e5:06:19:6e:6f:72:
         f1:1c:8e:c2:19:21:dc:41:79:cb:1a:64:07:9a:37:20:73:ff:
         ad:df:8f:64:58:88:86:5b:57:72:16:fc:01:89:77:14:82:5c:
         66:31:93:34:96:f1:95:ad:6a:43:e7:a8:6b:1c:c8:e7:81:b5:
         38:3a:d8:e3:59:b1:93:c8:52:14:02:2c:a2:8d:fa:ab:e7:a6:
         10:40:b8:4a:2c:c6:38:e5:5c:fb:03:32:a3:78:99:df:d6:96:
         0d:37:89:4f:a2:4d:36:b3:ef:2a:41:67:09:8d:44:23:1b:87:
         ab:95:2e:a0:bb:6a:14:4d:23:64:c4:06:c0:1e:17:3f:27:0b:
         03:93:59:d6:06:c7:87:88:9e:c5:2f:32:09:ff:ac:1b:6a:0b:
         51:ba:cf:34:2e:d0:b6:3a:00:e1:f0:35:06:a8:64:db:1e:fe:
         d7:15:d7:c6:78:94:60:33:c9:e5:bf:f6:ac:04:d9:c6:e7:c6:
         be:9b:20:49:eb:b2:d9:d2:34:57:ab:9d:4e:14:f0:6b:76:4a:
         84:31:22:05:e5:85:05:37:6d:df:d7:58:04:5f:ff:9f:29:b3:
         eb:d9:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:28:43 2026 by rpki-client