Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2cebfc16-7cdd-3898-bd09-6553f5789717.roa
File:                     2cebfc16-7cdd-3898-bd09-6553f5789717.roa (raw, json)
Hash identifier:          A8Of7tXOP2x62smzTeXOmrEBFhKrwe9wGHpNa9j3F6Q=
Subject key identifier:   84:BD:91:38:B5:D2:D7:AB:F7:29:C7:14:0D:74:49:74:71:B4:47:7B
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584F7352E0753062D15491CC7280
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2cebfc16-7cdd-3898-bd09-6553f5789717.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     36678
IP address blocks:        69.163.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:e0:75:30:62:d1:54:91:cc:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=20da78dc-4760-463a-8942-363d4d70c808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:5c:b1:25:04:3d:7b:f3:50:cc:2c:40:df:
                    f8:e6:fa:39:4a:3f:9f:36:a6:34:92:c2:52:03:17:
                    bd:92:3f:a7:d5:0c:c3:d4:1c:cb:04:94:bb:ff:c9:
                    89:d1:f7:9e:57:f2:3e:7e:06:a7:ac:51:e1:17:22:
                    26:34:7d:eb:5f:8c:cd:66:55:9b:dd:b6:cc:68:e5:
                    94:e7:cb:e9:5b:5b:e6:f3:ac:20:5f:22:88:7a:b2:
                    72:fb:ca:e8:89:f9:05:e8:ac:f1:66:8e:55:24:59:
                    45:3b:a7:ff:7b:f9:a6:eb:5f:bd:55:05:c3:4f:18:
                    96:32:7e:a1:a7:d6:73:b3:5f:13:25:b6:c8:c7:6c:
                    5b:8b:b3:a8:f7:a8:dc:d2:59:6b:0e:51:ed:9d:f3:
                    31:27:00:15:a7:f5:ea:1a:7e:f5:da:d5:94:4a:f4:
                    a0:c3:b9:98:c6:e6:39:b6:e8:a9:f1:76:45:fa:6f:
                    21:74:d2:d1:e5:1e:c1:e8:a2:b5:6c:12:e3:62:29:
                    43:09:58:2b:4b:2f:e3:22:6e:c6:3f:c4:99:1c:ad:
                    d9:7a:b9:57:3e:16:47:2b:0f:e4:f3:12:57:e4:34:
                    f8:18:fe:b8:01:56:44:8c:48:70:10:af:64:64:35:
                    ca:ab:4e:50:19:82:5b:eb:80:f6:38:45:c9:7b:c8:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BD:91:38:B5:D2:D7:AB:F7:29:C7:14:0D:74:49:74:71:B4:47:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2cebfc16-7cdd-3898-bd09-6553f5789717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:aa:d0:ea:bf:4e:ec:a3:77:f1:ca:6e:bd:05:14:32:d9:86:
         1f:29:42:56:60:99:b1:2d:b8:bf:13:6f:78:28:6a:84:a0:88:
         dd:d3:92:30:fb:95:47:bf:f4:de:5e:38:be:51:b3:8a:71:aa:
         af:80:eb:bf:e9:b1:b8:f1:5a:6b:cf:68:88:02:68:9d:5d:0d:
         ac:ce:32:75:ac:bb:fb:ab:ac:ef:46:07:15:19:be:96:fe:e1:
         9e:90:89:95:a0:fc:dd:a9:80:3b:12:e1:10:23:0a:28:bc:04:
         4f:a7:2a:71:f6:d1:df:e1:93:11:91:ba:4a:8e:a2:bc:6b:56:
         4b:dc:93:f6:d5:f7:83:f2:fc:bb:9d:3d:87:78:16:1a:d2:ce:
         bb:6e:bb:ae:fc:69:2e:63:b3:02:66:71:e8:43:c5:27:1c:ab:
         32:32:42:a9:dc:fd:81:f5:2c:5a:db:57:95:3d:8e:f7:a9:dc:
         16:3b:38:ed:1d:47:12:1b:38:a5:68:98:3a:a3:80:e1:6b:02:
         f8:5a:15:51:3f:3c:8e:c2:df:78:bb:90:06:62:db:96:ce:25:
         bc:b7:b8:87:38:50:34:e2:e7:58:33:62:d2:5a:6b:13:c5:bf:
         31:ed:35:11:81:ef:12:6d:75:1e:cc:b7:5c:63:98:8c:2c:23:
         5d:3a:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:38:12 2026 by rpki-client