Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/8cf07488-3ebf-3552-bdd2-90e83dbb1273.roa
File:                     8cf07488-3ebf-3552-bdd2-90e83dbb1273.roa (raw, json)
Hash identifier:          ruZ1/yCrf9yZfEAUjwl4v3jqOdkqM1aLr0nBhM5FaCM=
Subject key identifier:   04:76:90:2E:44:9E:C5:72:2F:FF:6A:5D:BD:DD:14:9F:6A:9F:09:0D
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584EA6E7B68BB6FF2A287C4CFC00
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/8cf07488-3ebf-3552-bdd2-90e83dbb1273.roa
Signing time:             Tue 28 Jul 2026 19:39:34 +0000
ROA not before:           Tue 28 Jul 2026 19:39:34 +0000
ROA not after:            Mon 26 Oct 2026 19:39:34 +0000
asID:                     14593
IP address blocks:        9.161.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:e7:b6:8b:b6:ff:2a:28:7c:4c:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Jul 28 19:39:34 2026 GMT
            Not After : Oct 26 19:39:34 2026 GMT
        Subject: CN=ca563a67-2ddb-41ae-982c-6cb0fe144cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:a4:d7:b5:55:e0:0b:24:8f:54:a3:69:57:
                    65:8e:04:b5:6c:cc:e3:ec:6c:8b:d0:52:27:03:c1:
                    bb:71:50:80:58:5b:de:8d:5d:2b:67:ce:19:38:71:
                    e3:3a:f9:7e:19:54:60:7e:c6:05:9d:cc:d4:7f:49:
                    ed:0e:98:e0:68:e1:3d:c4:a5:be:22:07:cd:e2:a3:
                    5d:c0:c2:55:f8:84:29:56:86:7c:3d:78:60:f1:c5:
                    eb:d6:05:66:61:e1:38:34:3c:75:a8:f5:53:e9:dd:
                    c2:c0:17:58:13:58:d1:a3:9b:3f:34:5c:16:03:3b:
                    37:f4:0a:a0:79:15:ad:c1:fb:5a:15:bf:87:0d:4b:
                    15:cb:57:81:0c:7b:49:7f:a2:40:9d:39:34:59:06:
                    ac:ec:4a:cc:08:04:23:d8:e1:12:aa:62:cf:18:ba:
                    8b:27:04:16:54:90:ea:f7:81:f4:0a:08:30:49:50:
                    96:85:78:a9:c8:2e:ef:1d:f0:b7:9b:f9:6d:3a:cc:
                    57:69:6c:41:54:63:93:3d:d4:da:d4:1f:57:05:c6:
                    d0:63:a3:60:46:b2:91:6d:41:eb:a4:28:b3:e0:d6:
                    4e:9b:39:5c:05:76:e0:46:b3:8f:87:d4:54:46:03:
                    dd:ad:bb:d6:23:71:ee:cf:ed:a1:08:6f:69:2f:55:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:76:90:2E:44:9E:C5:72:2F:FF:6A:5D:BD:DD:14:9F:6A:9F:09:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/8cf07488-3ebf-3552-bdd2-90e83dbb1273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:a2:57:67:79:35:aa:15:cd:c1:fb:b5:29:a5:39:43:d5:00:
         bc:2f:23:1c:99:e1:7f:43:27:ce:dd:95:72:aa:0f:21:43:b3:
         7a:6f:a2:92:37:1f:d4:81:ce:44:53:7c:aa:9c:38:b1:c2:b6:
         cf:21:1c:ac:48:44:3d:21:fe:74:ba:05:02:d1:87:44:7b:6d:
         f9:0e:e8:c4:60:e0:81:12:de:b7:3d:bf:5d:f3:15:b1:7a:0f:
         4d:b4:e0:bf:4d:33:f3:3d:e2:66:ae:27:8e:6c:e1:eb:40:44:
         b9:95:a5:bf:01:8b:84:61:aa:c7:b0:c0:ab:91:ce:7a:0e:18:
         68:40:85:96:88:b9:dc:ac:8b:76:42:76:8e:37:3d:7c:6c:7d:
         a2:8a:85:8a:fe:37:fb:8f:c8:16:56:09:1e:bd:9c:e1:9c:e9:
         bd:9f:cd:0f:ca:e7:13:1e:a8:50:54:14:27:c4:fd:55:22:56:
         e0:fd:e0:18:d3:92:01:35:fb:37:db:16:a8:c1:b8:ff:cf:b2:
         55:ca:c1:a8:e4:8a:72:f9:d8:79:ac:ba:b3:11:7e:89:66:1e:
         b8:69:a7:8a:13:50:68:4a:bf:01:88:7b:4c:25:85:6c:ac:ff:
         9a:9c:95:32:1f:f3:cd:92:5b:9a:7a:b9:d1:41:af:d8:39:c9:
         21:8e:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:29 2026 by rpki-client