Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa
File:                     402d792e-55f9-359b-9600-499299195f62.roa (raw, json)
Hash identifier:          GAigntm2+czx/98V1Rm0f2GY71bCpPTDLLVuwq9u+38=
Subject key identifier:   42:9D:2B:B6:8E:09:30:99:19:DC:E4:85:BD:83:A0:9B:17:76:57:96
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584F1CC7A5107F950F4B86BF4680
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     16696
IP address blocks:        216.120.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a5:10:7f:95:0f:4b:86:bf:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=18e9f301-6d2e-4312-b71b-a70952002073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:af:c3:4d:11:2e:34:3a:13:90:dc:d8:7c:
                    3c:54:7d:34:51:03:8b:96:16:e3:43:14:4c:bb:6b:
                    7f:61:88:64:3d:59:31:40:d2:5b:bb:fd:f7:e5:e9:
                    0d:3e:98:07:69:15:ca:63:e0:f8:3d:a1:10:cb:5c:
                    67:9a:90:df:41:1f:9f:1a:c2:94:0f:99:44:52:6a:
                    95:f4:54:60:56:ab:ec:81:13:56:69:e0:84:3a:f5:
                    14:25:82:37:d8:b2:8a:4f:42:d8:e6:7c:4e:02:56:
                    66:9c:27:8e:50:d5:be:26:e2:51:e3:d3:a2:83:68:
                    22:48:5b:54:84:88:fa:cc:2c:bd:6e:3b:b2:ec:fa:
                    28:29:e0:c6:db:42:b4:2c:fc:d6:1c:a8:04:f8:fd:
                    1a:f6:9f:23:67:cd:82:01:7c:c5:d5:36:df:bf:2f:
                    bb:e9:e2:0a:68:a5:13:01:61:84:0a:70:14:42:31:
                    36:2a:a9:b7:eb:f9:fc:6b:fd:5d:fc:22:47:31:8c:
                    ab:99:d5:59:a8:7e:1c:e0:ed:3f:3d:4f:14:30:46:
                    7d:5d:ae:d7:2d:e4:47:a5:a9:89:a1:9c:87:1d:a0:
                    04:97:2d:c5:8a:f4:67:9c:f3:e5:0c:71:92:fd:45:
                    c6:41:04:2f:34:ce:0a:3e:0a:66:bc:00:32:9c:6b:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:2B:B6:8E:09:30:99:19:DC:E4:85:BD:83:A0:9B:17:76:57:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1d:18:e5:9f:ec:23:4b:94:c8:1c:0b:9c:75:76:3b:57:e3:
         91:d7:9a:51:8d:24:41:6d:bb:95:0a:e4:c1:96:be:03:4c:18:
         92:67:ae:27:11:cf:2b:ee:99:e5:9f:4f:fe:f6:0f:e6:00:d3:
         83:a7:c3:35:6c:9c:6c:11:a8:f6:ad:e8:21:d8:47:e4:08:a1:
         9f:cb:60:8b:21:0e:37:4c:c3:f2:d8:ec:29:c2:72:c3:7a:05:
         2b:35:43:b8:2a:e1:d7:b7:2f:72:ee:38:2e:4b:43:e8:1c:6f:
         65:be:bb:ed:a6:14:8d:18:b9:9a:57:51:96:7d:64:12:e1:b4:
         d9:a4:af:3d:75:ce:80:5b:3c:cd:64:be:3f:18:85:ea:97:a8:
         ac:82:c5:56:04:11:82:9e:a1:4d:17:28:d7:ea:9b:72:6c:5e:
         fc:b3:c8:ce:2d:18:64:d4:c0:8f:3c:1e:7d:b9:05:a6:7b:70:
         79:12:e4:93:1d:0f:d3:51:86:2c:ef:cd:6e:d2:57:2c:55:38:
         93:f6:b7:b2:4b:82:3f:8e:6e:61:97:0b:d4:38:5d:cc:3d:3e:
         65:75:3b:1e:5a:35:08:df:37:d7:6b:e9:36:83:a1:e9:a8:1b:
         88:f1:8f:ed:92:23:85:a6:ff:93:7a:27:8d:36:cb:28:7b:2c:
         43:33:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:48:39 2026 by rpki-client