Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/10450cb1-e254-3c5e-9e08-5d331f7755bc.roa
File:                     10450cb1-e254-3c5e-9e08-5d331f7755bc.roa (raw, json)
Hash identifier:          c9jjdoq3GG9If324BiYGrRoBSjAegzfOMcVqhDd5Oqc=
Subject key identifier:   0E:31:3C:77:EB:1B:F6:8E:42:1B:C0:A8:4D:69:B3:34:2A:89:21:96
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F5B97FF6E24D3776C48183190
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/10450cb1-e254-3c5e-9e08-5d331f7755bc.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     1421
IP address blocks:        66.39.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:ff:6e:24:d3:77:6c:48:18:31:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=ae87a482-fa42-41e4-8b20-fb59bb1e6869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:b0:21:d1:39:7e:fd:03:10:06:8f:95:01:
                    06:bd:ba:7b:e8:98:58:96:eb:d3:ae:86:b8:1d:eb:
                    2b:8f:1b:91:81:fb:ad:cc:9d:c0:44:08:27:34:f5:
                    44:4e:ec:d6:57:d4:33:49:ed:45:04:bb:da:12:d7:
                    0b:06:4c:77:bd:bc:ab:d7:6b:f2:8b:00:d3:e6:54:
                    b0:fc:ca:c4:f3:fa:7e:2f:1d:6b:50:86:1a:05:57:
                    7e:b6:7d:d5:d3:88:02:cf:47:8e:96:1c:72:f7:46:
                    a2:b7:53:43:aa:af:90:a8:a2:40:32:cb:23:7f:6d:
                    7c:8a:b2:a5:3a:98:22:95:22:15:c0:87:b5:2e:d4:
                    9d:f8:64:05:a3:73:fb:15:58:1d:ab:c2:41:66:30:
                    27:10:a4:b9:e0:f1:84:0c:06:65:0b:21:00:c9:8d:
                    79:96:92:a5:1a:1c:ee:ff:8f:e1:79:ce:de:00:c7:
                    24:ee:71:61:d1:e0:8a:90:e8:25:84:7d:fa:d9:03:
                    eb:3c:70:9b:19:bd:c7:5e:f6:34:5f:57:05:b1:82:
                    d9:3c:91:79:85:cc:5e:80:cb:e3:78:8f:20:ec:28:
                    8d:05:97:7e:cd:8b:4a:65:a5:a1:9e:3f:84:32:04:
                    5c:45:19:1b:58:27:8a:82:63:5f:59:1f:33:9d:d2:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:3C:77:EB:1B:F6:8E:42:1B:C0:A8:4D:69:B3:34:2A:89:21:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/10450cb1-e254-3c5e-9e08-5d331f7755bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:19:b4:45:94:83:b1:bb:69:ca:1d:28:b9:e5:81:88:3f:16:
         ac:92:53:0f:2a:43:22:6d:84:7b:d7:20:81:da:96:d3:c9:1f:
         96:2b:ca:6e:6e:3b:08:24:50:de:55:f6:08:4f:96:99:ac:38:
         ec:26:9a:b4:eb:a4:f8:fa:97:a2:cc:90:97:a6:f2:aa:28:ca:
         7b:5e:23:6d:e3:5c:01:95:ab:34:b8:e2:ae:a5:8f:29:fa:01:
         b5:ac:59:6a:46:72:3a:01:7f:d2:7f:47:94:b9:00:43:01:e1:
         1d:4a:e5:71:8b:07:b5:69:a9:fb:05:14:36:fb:2f:fc:c1:27:
         99:12:2a:ea:43:65:45:d6:06:b2:1b:dd:02:50:2d:90:c0:96:
         13:3a:de:55:69:85:0e:9f:70:73:21:58:54:cd:00:d4:d0:75:
         41:23:4f:6b:c3:5b:28:05:a1:49:a5:2a:55:77:01:75:52:b7:
         8e:b9:97:ee:a9:45:b8:15:f4:3e:25:51:36:f5:e2:ee:bc:3c:
         c2:0e:37:70:dc:e8:62:77:57:72:66:71:2a:f3:80:64:a2:89:
         4e:0b:ef:3b:39:a6:96:ca:81:1e:b9:63:6a:87:37:66:42:7c:
         33:d2:f2:d5:a0:d4:a3:3f:f5:5c:d1:30:db:a4:29:53:61:94:
         dc:a4:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:39 2026 by rpki-client