Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/40544477-3a28-38d1-b333-936fb741f9a6.roa
File:                     40544477-3a28-38d1-b333-936fb741f9a6.roa (raw, json)
Hash identifier:          qA3PvI1ibknRVVRu0pP7jpN4FhM1mVh+FhAnVOPlWp8=
Subject key identifier:   75:99:91:B0:F4:B8:49:3F:98:60:9A:B7:64:88:C2:79:86:89:E2:4D
Certificate issuer:       /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Certificate serial:       010D0C9F4328584F5FCF5463DB4CF33BFDD84F80
Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/40544477-3a28-38d1-b333-936fb741f9a6.roa
Signing time:             Sat 03 Oct 2026 01:14:59 +0000
ROA not before:           Sat 03 Oct 2026 01:14:59 +0000
ROA not after:            Fri 01 Jan 2027 02:14:59 +0000
asID:                     14299
IP address blocks:        170.146.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:cf:54:63:db:4c:f3:3b:fd:d8:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
        Validity
            Not Before: Oct  3 01:14:59 2026 GMT
            Not After : Jan  1 02:14:59 2027 GMT
        Subject: CN=e6018ca8-da0e-4079-aca8-61877f31e5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:fa:26:f0:e6:6d:f0:17:03:54:af:f3:f5:
                    f4:df:84:ef:7e:14:3d:ee:bc:f8:69:15:8a:a9:13:
                    19:55:4e:86:29:39:4c:91:6b:c2:84:e2:6d:80:e4:
                    63:2e:bc:b5:97:96:75:a8:82:af:e5:07:d4:f8:65:
                    2e:11:d1:96:b7:d7:c7:45:1a:07:b9:90:ed:ac:85:
                    73:2a:0d:42:ca:32:6f:be:1e:e2:56:b1:03:9b:f6:
                    0c:6c:6c:5f:ab:d6:41:96:55:11:03:00:82:d7:4a:
                    13:32:6c:0a:a6:da:83:5a:70:75:d4:b3:d0:c9:5f:
                    04:46:44:a3:49:9b:82:ab:f5:94:92:3d:ff:23:5f:
                    ad:62:46:8b:61:67:06:4e:13:c3:ea:84:02:50:10:
                    f4:c8:77:55:1c:e8:76:28:1a:53:e3:1e:27:60:3a:
                    bd:e9:df:f9:15:87:2e:8a:ba:5f:9d:ce:6a:e0:8b:
                    ed:9b:40:02:07:ce:18:9f:59:4b:63:73:e6:52:86:
                    2e:0f:06:0c:27:f8:51:8b:4b:f9:b6:86:e9:22:83:
                    8b:9c:89:f6:9b:e2:53:1c:db:36:76:f9:d0:18:ae:
                    6c:e8:5c:5e:99:4a:d9:d6:10:e9:3f:cf:0e:d5:0c:
                    48:25:6b:cb:12:c2:ba:a0:62:0e:4c:97:e0:a8:5b:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:91:B0:F4:B8:49:3F:98:60:9A:B7:64:88:C2:79:86:89:E2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/40544477-3a28-38d1-b333-936fb741f9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl

            X509v3 Authority Key Identifier:
                keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.146.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6b:b9:c9:88:2c:bd:05:5c:73:5f:ff:45:60:f1:f2:4e:cc:
         73:f4:2e:1e:3b:88:0e:88:11:02:64:a0:c1:d7:16:ed:f1:aa:
         49:f7:c5:8c:41:4b:20:0d:16:25:0a:49:11:9c:2e:af:e2:12:
         91:61:07:ca:29:67:42:f3:8b:3a:36:a1:34:8e:75:0b:0a:4c:
         72:75:bd:9b:08:0a:a1:4b:f4:8d:da:55:88:44:fd:81:51:0d:
         c9:2b:1b:89:f3:c2:d4:de:a6:7b:70:58:1e:ed:0d:38:d1:60:
         96:35:f7:f0:b8:92:bb:90:ee:db:8c:c8:75:67:1a:ac:4c:e3:
         1c:88:17:e7:a9:02:9b:d7:e9:8a:b6:d7:4d:6e:0e:be:cc:56:
         d7:24:98:e2:e8:cf:a3:cd:b4:21:9b:3c:8f:ab:14:8a:24:09:
         7c:8c:68:98:95:2a:da:17:c0:ed:49:7a:d7:8a:a5:c0:74:11:
         a8:da:25:83:2a:9d:fa:38:6c:e5:aa:1d:82:3a:fd:76:fe:98:
         c3:78:07:f1:28:4c:8c:7f:18:cd:dd:bb:bc:d6:2c:ea:83:09:
         19:11:82:75:d5:24:d3:5b:d3:4a:da:c1:b6:ef:09:df:4f:bd:
         46:4f:63:29:ff:92:2f:6b:3a:48:e7:fd:b4:38:d6:7e:4d:76:
         cc:72:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:57:27 2026 by rpki-client