Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a1a80fcd-a17d-3921-b00e-8ce60831790c.roa
File:                     a1a80fcd-a17d-3921-b00e-8ce60831790c.roa (raw, json)
Hash identifier:          sTmUNaO3iE83sl/7DQMVl6wHmFCdRdogc5gTCoX4ojU=
Subject key identifier:   83:CA:8F:B1:92:CF:52:4E:C4:69:09:C6:F3:61:E7:FA:7E:E3:98:64
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F49740318E0898D148FA99700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a1a80fcd-a17d-3921-b00e-8ce60831790c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        216.218.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:03:18:e0:89:8d:14:8f:a9:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=40801faa-38cd-4eb9-9761-4be41f2a73a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:94:09:d6:89:5a:5e:55:a1:a2:b2:ef:14:
                    a6:d2:4d:9f:e7:7b:f4:54:a3:79:aa:60:89:1e:c4:
                    ec:1b:bb:fd:67:0e:ed:af:26:99:89:3e:29:b1:07:
                    ed:24:ef:68:1a:0d:bb:d5:49:8c:06:a5:0e:2b:6d:
                    7a:5b:48:5f:3c:87:f6:72:8b:f6:6a:e5:48:43:dd:
                    b4:36:0d:96:e2:f7:30:cc:62:db:0f:70:bc:d8:89:
                    48:f1:04:d4:de:17:e1:ee:35:04:a7:db:b0:6b:65:
                    55:02:da:db:25:de:a0:8a:40:80:3d:1f:d4:0c:2b:
                    43:12:67:ce:ca:cf:62:04:0e:88:71:67:ee:75:36:
                    51:8c:9b:39:89:43:c4:12:66:37:93:a3:b6:b8:56:
                    41:85:a7:15:0a:40:e4:58:04:90:00:c7:32:e5:22:
                    a7:91:68:e5:ca:75:0d:20:fb:f0:57:84:21:1e:f1:
                    7e:f7:4f:97:ad:0a:15:ad:a0:c8:85:28:82:20:ac:
                    be:ba:72:37:89:74:63:88:7b:d1:29:94:2f:7f:29:
                    50:2f:30:bb:b5:d6:d1:c3:5f:c3:c1:0f:09:6d:79:
                    c0:29:aa:a2:3d:00:9c:0d:f1:00:25:d3:0d:26:16:
                    b4:b3:4a:b6:19:10:cb:13:bb:a0:27:5c:8e:63:6d:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CA:8F:B1:92:CF:52:4E:C4:69:09:C6:F3:61:E7:FA:7E:E3:98:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a1a80fcd-a17d-3921-b00e-8ce60831790c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:3e:f5:07:a6:17:83:1c:7e:c3:1c:46:9b:fc:92:69:34:39:
         d0:0e:9c:dc:83:99:66:85:af:65:73:48:72:18:42:f8:57:95:
         0f:69:21:ac:64:98:e9:9d:67:06:f0:a4:cc:fb:e2:79:64:63:
         df:4a:07:c8:b1:55:07:d0:07:1e:41:54:32:a1:e9:03:73:16:
         cf:d3:aa:aa:02:04:73:70:f1:f3:83:81:1a:98:fb:d5:56:f0:
         17:40:2e:27:9e:d4:d3:28:dd:a4:91:9f:62:12:70:59:f8:e1:
         f8:71:ee:16:0a:f7:c6:60:03:8b:f8:9f:53:62:f4:81:12:01:
         51:56:24:23:7e:ab:b3:66:89:55:51:d7:b5:1c:e1:01:f4:b6:
         c0:b9:4b:6a:61:d4:c6:d6:8b:32:35:f7:9e:fd:a4:60:3b:d1:
         6a:4a:1e:d1:0e:03:a9:8a:0b:ce:48:4f:7b:a7:2f:05:af:38:
         ea:cb:83:16:b9:6c:f2:a9:55:bc:e1:69:d5:59:f9:12:43:18:
         56:7e:02:c2:54:2f:57:f6:46:87:fb:33:79:ac:b6:92:39:bc:
         67:f0:46:84:99:91:ea:da:5c:be:eb:61:03:8d:09:53:67:76:
         bf:a1:4e:b6:31:1e:00:19:92:92:36:18:f5:b2:2b:db:64:f1:
         a2:be:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:35:04 2026 by rpki-client