Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/1baf8043-64be-3f81-a3f9-af7094d4a52b.roa
File:                     1baf8043-64be-3f81-a3f9-af7094d4a52b.roa (raw, json)
Hash identifier:          5XKN2gCvKt9rqknqugf4gq+gBG9dZUX1zEr5SzcsEp4=
Subject key identifier:   79:C7:89:0D:12:DE:B9:1E:10:0A:FE:49:00:73:86:49:73:F3:24:1E
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584F498B335A9BDEE9E748FEB400
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/1baf8043-64be-3f81-a3f9-af7094d4a52b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401095
IP address blocks:        207.173.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:33:5a:9b:de:e9:e7:48:fe:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=10fd26ab-7a22-48e3-ac31-18281215c776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:03:35:31:48:b7:b6:cd:cd:46:61:7f:44:
                    0f:8c:cd:96:a9:e6:73:28:85:c9:be:14:e0:99:5a:
                    98:c6:5a:23:6c:74:d0:64:a5:c1:93:0f:8b:b6:b9:
                    78:4f:14:0b:80:fa:44:78:c2:bb:e1:30:ad:b2:d3:
                    a3:57:c2:e5:f5:dc:19:86:14:94:02:09:51:42:41:
                    fc:3d:da:12:a5:96:17:b9:9b:09:29:8f:a4:9d:e6:
                    0f:7e:5b:f1:e5:28:f0:e6:af:0b:4a:3e:f2:8b:6e:
                    fb:e8:d3:29:73:35:6d:48:94:07:c7:cf:cf:dd:20:
                    86:77:0b:6d:3b:d7:60:96:bb:c7:f3:f9:e1:ed:fb:
                    78:46:09:0c:81:76:fa:c1:8d:c5:30:db:56:71:27:
                    94:d6:32:cd:15:bf:40:eb:85:04:ef:aa:28:72:f3:
                    47:55:4a:4d:af:60:f9:c6:d1:b9:36:c9:eb:81:ab:
                    c2:c8:26:16:1e:12:84:ed:50:e1:a3:4d:e5:86:78:
                    59:b7:c2:6a:38:4d:ff:d2:85:06:6e:dd:2f:79:a8:
                    84:af:12:d8:7b:ec:43:33:99:f5:48:7a:19:37:d7:
                    1e:b9:3f:2d:59:8a:2d:d5:d6:03:a5:9c:2e:04:89:
                    7f:21:87:24:4c:21:3a:32:c8:5d:e4:0e:52:ba:13:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C7:89:0D:12:DE:B9:1E:10:0A:FE:49:00:73:86:49:73:F3:24:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/1baf8043-64be-3f81-a3f9-af7094d4a52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.173.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:23:62:20:63:91:c4:3e:ff:b9:4f:80:0d:c9:30:09:32:
         c8:8a:e2:97:8b:03:7c:60:05:0a:72:64:a8:6a:2d:f7:a6:66:
         bf:c2:db:9c:6b:0e:0f:a9:33:45:1c:f6:d3:9a:33:fa:08:2c:
         30:b3:39:10:7c:68:49:cf:cc:00:b5:d0:54:93:a8:31:13:80:
         4d:03:8b:f2:25:b0:e9:db:96:93:d0:1e:bd:fe:17:f2:d1:d3:
         cc:f4:15:07:20:6c:75:95:71:95:16:c1:ea:b7:77:75:2e:44:
         33:66:57:33:90:a5:1f:95:8c:bb:a7:9e:dd:3f:de:91:dd:e0:
         b8:43:dd:2a:c3:b0:cc:99:05:58:40:cf:63:04:cb:9c:f5:91:
         eb:3a:4b:ee:0a:22:e0:d3:8e:df:77:16:9d:12:55:68:3e:68:
         9f:0a:4a:bc:9a:ec:c6:d2:69:cb:a6:2c:c1:66:2a:36:82:0d:
         7d:6b:2d:54:16:bd:bb:a1:70:38:bc:92:90:f5:67:21:17:53:
         51:63:6c:0f:a1:4c:af:df:be:d5:86:71:de:f2:a3:67:dd:16:
         5d:02:94:18:ab:cd:c4:1c:1c:68:2a:cb:b9:23:49:7a:0e:6f:
         63:58:b9:d4:84:44:62:d1:95:c7:5e:50:0e:c4:d3:5c:cf:c6:
         8c:8e:45:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JizNam97p50j+tAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTBmZDI2YWItN2EyMi00OGUzLWFjMzEtMTgyODEyMTVjNzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm8DNTFIt7bNzUZhf0QPjM2WqeZzKIXJvhTg
mVqYxlojbHTQZKXBkw+Ltrl4TxQLgPpEeMK74TCtstOjV8Ll9dwZhhSUAglRQkH8
PdoSpZYXuZsJKY+kneYPflvx5Sjw5q8LSj7yi2776NMpczVtSJQHx8/P3SCGdwtt
O9dglrvH8/nh7ft4RgkMgXb6wY3FMNtWcSeU1jLNFb9A64UE76oocvNHVUpNr2D5
xtG5NsnrgavCyCYWHhKE7VDho03lhnhZt8JqOE3/0oUGbt0veaiErxLYe+xDM5n1
SHoZN9ceuT8tWYot1dYDpZwuBIl/IYckTCE6Mshd5A5SuhNoXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHnHiQ0S3rkeEAr+SQBzhklz8yQeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvMWJhZjgwNDMtNjRiZS0z
ZjgxLWEzZjktYWY3MDk0ZDRhNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz60oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEv5I2IgY5HEPv+5T4ANyTAJMsiK4peLA3xgBQpyZKhqLfemZr/C25xr
Dg+pM0Uc9tOaM/oILDCzORB8aEnPzAC10FSTqDETgE0Di/IlsOnblpPQHr3+F/LR
08z0FQcgbHWVcZUWweq3d3UuRDNmVzOQpR+VjLunnt0/3pHd4LhD3SrDsMyZBVhA
z2MEy5z1kes6S+4KIuDTjt93Fp0SVWg+aJ8KSrya7MbSacumLMFmKjaCDX1rLVQW
vbuhcDi8kpD1ZyEXU1FjbA+hTK/fvtWGcd7yo2fdFl0ClBirzcQcHGgqy7kjSXoO
b2NYudSERGLRlcdeUA7E01zPxoyORXQ=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:53:37 2026 by rpki-client