Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4c97863f-f6c0-30d4-b58a-30852499249f.roa
File:                     4c97863f-f6c0-30d4-b58a-30852499249f.roa (raw, json)
Hash identifier:          NJ0QjzBqXF/kT0JvbvHfY/g+2duQCstWnGClrfRvi9A=
Subject key identifier:   86:E4:91:2B:24:4A:E9:27:94:21:A7:FC:68:8F:62:12:FE:D0:35:C2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584F4986AB27F2F610B44F35EE00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4c97863f-f6c0-30d4-b58a-30852499249f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     376
IP address blocks:        206.167.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:ab:27:f2:f6:10:b4:4f:35:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f0ef82f3-276a-4499-a164-57d954de48ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:ed:6d:cf:3c:88:ff:e7:9c:d3:00:d3:8d:
                    bc:f0:c9:1a:87:98:aa:0f:47:86:27:f8:4d:75:2f:
                    0f:0f:8f:47:f6:72:ac:c9:59:42:6d:ca:9b:2a:e0:
                    cb:79:27:e8:5e:d7:f8:17:54:04:2b:bd:b1:56:12:
                    0e:50:0f:24:fd:09:25:95:4b:ad:4e:6b:5c:d1:bb:
                    43:8c:3d:54:9e:9d:22:2e:9e:29:5c:fe:92:4d:1d:
                    22:61:ab:8f:fe:97:a8:c2:e6:4b:3f:8a:cc:6a:a3:
                    a4:72:c3:67:57:1a:e7:89:bd:0b:fe:b1:42:f3:45:
                    cc:87:b4:5a:5e:af:b4:de:3c:84:52:a0:af:00:08:
                    16:94:8c:23:75:92:2b:5f:09:ce:bc:9f:0c:ee:7f:
                    f8:8b:80:b3:77:29:91:ff:f7:52:fc:5b:0b:84:5f:
                    82:6e:88:ae:2d:49:6b:d9:a5:b5:78:7f:c0:24:84:
                    04:8c:dd:53:df:77:ba:51:2a:65:d5:be:d8:96:d5:
                    3e:ea:5f:5e:00:2d:dd:d8:c1:37:2f:2b:1f:b6:7e:
                    34:51:89:63:80:0f:16:1e:26:81:18:2b:66:ac:b2:
                    e5:c7:1e:23:03:77:cd:c8:1a:d1:2b:61:bb:9e:f2:
                    74:5f:f5:71:de:cd:4a:e3:11:cc:74:9c:2a:46:f5:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E4:91:2B:24:4A:E9:27:94:21:A7:FC:68:8F:62:12:FE:D0:35:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4c97863f-f6c0-30d4-b58a-30852499249f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:75:11:bf:3e:6f:c1:cd:dc:b7:67:97:94:fb:02:54:00:
         b0:d9:b7:02:c4:30:94:13:c6:05:6b:7a:af:dc:0e:1d:ea:85:
         e5:13:45:d7:1d:ff:7d:4e:f7:94:6a:a0:2e:ba:21:4b:35:b7:
         1f:f6:ff:99:fa:0f:58:74:6e:14:73:9f:7d:d6:11:53:98:7c:
         0f:35:6c:e1:69:a9:7f:d3:9b:d4:9a:41:11:8b:41:eb:66:1a:
         46:2a:73:f0:e1:a2:88:7b:fe:3b:a7:5c:4d:56:b1:fc:56:f4:
         3b:19:8e:36:50:ff:a0:08:70:21:6f:1e:b4:b8:dc:2b:6a:42:
         bc:fb:b6:34:8d:13:fc:ce:84:a1:ed:aa:ed:64:68:0b:a8:c2:
         d8:d1:cf:1a:e0:0b:64:5b:ad:e8:76:b6:1d:9b:74:fa:bc:9f:
         7f:69:7a:30:96:60:14:ec:ed:d8:a9:29:e4:b2:86:1b:92:8e:
         da:94:04:9b:0f:4a:f2:31:15:c3:44:df:ad:51:f8:ac:b4:e1:
         05:f5:d9:2a:3b:8b:18:b6:3b:b4:b4:44:a9:36:ec:76:11:4b:
         82:68:b2:d1:8f:14:ed:85:e5:9a:d6:34:85:c9:e5:b4:74:08:
         29:ee:10:ec:b9:67:eb:85:2c:29:49:74:f9:1a:46:73:97:e8:
         6f:f2:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:44:04 2026 by rpki-client