Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa
File:                     bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa (raw, json)
Hash identifier:          CTqBJTySc4NoRSw4No/zD1kDIFm6bzUPMStg/LEjE0Q=
Subject key identifier:   03:C0:B4:01:66:5E:A8:10:01:3A:06:CF:6F:84:5D:28:AE:C7:60:57
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584F6292C9BFE8CCE8ED976FB6A0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     393336
IP address blocks:        162.250.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c9:bf:e8:cc:e8:ed:97:6f:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=6d597db1-de67-4ef4-8e5c-099c292b5083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:85:4e:79:5b:f9:51:d6:0b:fc:0f:fd:4d:
                    27:d6:be:6f:b9:8e:27:55:2f:8a:a4:e4:20:4c:4a:
                    97:8e:f6:2b:cf:e9:b6:ee:64:62:51:cc:01:fe:30:
                    fe:2c:24:73:d9:71:cb:60:d1:91:99:9a:92:7d:0d:
                    53:12:87:4b:7c:3d:a0:a7:68:4c:ca:3f:90:51:ff:
                    84:fd:c8:bd:fd:f0:ff:6e:3d:5b:8c:1c:eb:ff:a4:
                    96:ff:68:f4:05:4b:af:ee:f2:b4:58:ed:24:d5:f3:
                    a3:f0:f9:1e:49:05:27:5f:02:9b:99:b6:13:01:4a:
                    0e:b2:e7:a7:24:34:f3:e4:ab:c3:72:fa:fd:cc:78:
                    bd:a5:59:4d:ab:be:0a:14:9a:76:11:9c:d4:ac:63:
                    a9:f9:08:91:a9:09:8a:58:9e:fe:e7:3f:67:fe:34:
                    65:79:bf:5b:b8:9a:91:0f:f9:76:06:8b:c1:e1:71:
                    dc:06:a8:86:ef:73:41:dc:48:a1:c5:73:2b:56:63:
                    14:31:7c:29:66:f3:ea:22:7b:52:35:4c:c7:ff:59:
                    d4:c8:95:b5:2a:7c:1b:17:4c:72:ec:bc:8c:25:83:
                    6d:b9:69:83:94:e1:eb:fe:5b:5b:5c:b9:f6:85:3d:
                    1e:31:d2:bc:b3:50:73:88:51:61:1b:d7:83:da:f3:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:B4:01:66:5E:A8:10:01:3A:06:CF:6F:84:5D:28:AE:C7:60:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:72:49:99:8a:7b:20:5a:4d:d4:46:ed:42:69:78:9d:24:81:
         3d:ce:d7:df:c6:54:bb:68:71:24:c2:a9:c1:84:ad:6e:be:2c:
         99:42:21:38:ee:3c:b9:a3:7b:96:f8:1d:e5:13:cf:84:5f:0a:
         87:08:47:80:d2:0f:07:38:7d:8b:35:9d:85:d6:2c:b9:ba:65:
         10:48:bd:9c:a0:5c:30:62:01:79:80:6c:a5:fb:33:3e:91:83:
         33:27:f2:b5:f3:f8:9f:8d:5f:fe:ca:38:c3:6b:75:23:7b:f2:
         88:9d:a3:e3:14:35:62:87:20:7c:e3:05:2e:d5:76:e4:55:cb:
         67:e6:d9:35:7c:ae:cf:d5:51:c9:6d:53:d7:d2:a6:83:24:fc:
         1a:53:af:97:23:a3:c0:95:b1:53:d4:44:b9:84:3e:af:ff:ab:
         73:a2:ef:b1:ad:a2:90:00:43:64:2c:70:fb:c3:ed:83:45:4a:
         cc:22:66:4b:16:72:e5:f4:e4:37:b7:a9:c9:d5:1c:7a:0f:c1:
         6a:09:06:38:67:de:4d:9e:fe:cb:ef:81:c7:a4:a9:70:d2:b0:
         f9:8c:7b:0f:a9:86:5e:d0:05:1d:da:ba:55:3c:f8:f7:1e:02:
         f2:67:73:0b:79:b7:8f:e1:7e:87:4f:f0:1b:2d:d2:a9:f8:90:
         eb:cd:8d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:37:12 2026 by rpki-client