Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa
File:                     526c06c8-686b-349b-85ed-ff6838d817f2.roa (raw, json)
Hash identifier:          ut+jtrByD+RQBQoaoHmIp7aa/2Vh5GYXMoGQXPsIJBw=
Subject key identifier:   7E:BE:AF:65:18:F9:AD:0C:95:13:DD:D6:61:29:A8:E0:3F:41:7D:E1
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584F7BB2FB22BB9FADFCFA497F80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     12129
IP address blocks:        204.232.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:fb:22:bb:9f:ad:fc:fa:49:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=2d6437c2-fe2a-421b-b3a1-8e7d53279a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:49:69:74:c4:db:5a:9c:97:e7:12:bd:9b:34:
                    2a:42:74:4b:cc:f5:d2:cb:85:6d:ab:5e:20:2d:bf:
                    84:04:dd:52:58:fe:37:9c:98:64:2d:68:5c:8e:39:
                    03:70:40:44:fa:69:dc:25:71:a9:fd:a7:1c:cb:55:
                    0d:38:00:f4:a4:6f:28:fd:73:6e:3c:78:12:91:29:
                    e3:61:01:64:94:70:99:54:d8:82:94:7b:5a:25:f7:
                    8c:cd:8a:c4:33:fe:10:13:94:c0:71:eb:67:37:41:
                    33:60:93:c3:58:d2:ff:f5:62:dd:bf:33:b9:03:96:
                    d6:43:1c:0f:d6:16:4b:db:c8:bc:e1:c6:c4:ad:fe:
                    29:11:88:7a:fc:45:0a:24:3a:2a:81:32:21:68:ee:
                    44:f2:62:02:54:f8:a6:16:24:c3:cd:14:8b:a6:79:
                    b9:9a:4f:c6:a4:00:96:fa:dc:b7:6a:68:12:3b:63:
                    77:94:30:99:50:53:f6:02:71:e5:28:fe:20:3e:ed:
                    d3:4f:fd:57:42:3b:b1:8d:8f:69:74:66:e3:2f:64:
                    6f:22:82:8c:b4:1b:91:3b:a5:0a:0e:8c:bf:b1:31:
                    bd:bf:e7:e9:e2:96:19:12:dc:72:96:50:b3:7d:70:
                    6f:28:97:ef:a8:d7:77:cf:d4:94:26:81:31:6f:d0:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BE:AF:65:18:F9:AD:0C:95:13:DD:D6:61:29:A8:E0:3F:41:7D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.232.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:a3:a1:44:b1:86:62:d7:6e:3d:01:5c:0e:98:44:7e:27:
         d3:5c:8b:f6:31:9c:b4:50:08:87:f0:d9:b2:34:09:f5:7d:3d:
         4c:d2:b9:31:4a:87:a0:2f:1a:93:65:15:d6:a6:35:21:3e:9d:
         a9:de:35:5e:62:b8:2a:4f:c3:24:2b:c8:fe:8b:00:64:ec:4a:
         bc:80:1a:37:54:5a:f5:a6:44:c0:3b:53:46:44:df:a4:52:98:
         06:d3:47:09:f2:f9:78:71:1d:c5:95:b4:38:89:66:17:23:d8:
         74:8c:2a:af:56:51:7e:36:db:e7:88:39:80:3b:94:cb:89:4c:
         a3:19:bd:74:68:43:aa:4d:51:5b:0f:ee:ec:61:06:83:c4:b8:
         11:c3:c5:26:c6:99:58:50:4b:09:8d:85:05:a4:3d:f9:79:e4:
         06:91:f4:db:88:18:b6:58:fb:12:75:b2:4c:83:0f:63:d3:4e:
         7a:d4:a1:ae:55:c6:95:fe:77:1b:50:aa:23:35:4a:d5:5a:70:
         c5:26:82:31:54:9c:fd:ce:8b:8b:b2:92:a3:71:d5:4e:56:dd:
         bb:38:39:7c:4f:40:8e:6f:93:95:e6:01:41:6d:f4:a9:37:6c:
         40:50:21:93:e7:24:fc:22:b5:0a:a6:35:d1:86:6b:cc:58:6b:
         d1:65:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:26:14 2026 by rpki-client