Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ee2984a9-7711-32ac-b4b8-997ffd00ed53.roa
File:                     ee2984a9-7711-32ac-b4b8-997ffd00ed53.roa (raw, json)
Hash identifier:          M5uhBh6I/jkZbFEaOPWF39wXqLhO8S5C9IckQuLeg1Y=
Subject key identifier:   4E:A4:86:17:E9:46:BB:BC:1E:62:98:33:FC:AE:15:A1:27:75:D1:09
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F49763702F19B16DB4CEB6D00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ee2984a9-7711-32ac-b4b8-997ffd00ed53.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54103
IP address blocks:        67.207.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:37:02:f1:9b:16:db:4c:eb:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5d71d7df-43c7-41b5-91b8-2ac4ae52ec52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:bf:4d:a5:43:8d:2a:2d:a0:63:78:c9:0e:
                    cd:79:9b:bb:ae:ed:d5:3f:85:a7:8f:7b:d9:18:e3:
                    48:98:ed:54:36:6e:5c:94:0b:4a:d5:6b:03:d5:47:
                    07:c6:64:7b:9b:ba:4d:31:79:26:47:ae:33:8c:17:
                    74:39:d8:9e:e9:22:b6:84:92:43:87:d3:47:3b:a7:
                    77:fb:53:f9:a2:9e:e8:4d:b0:50:bd:6b:dd:df:3f:
                    38:42:dd:ea:46:e0:1a:59:f2:0b:bd:cc:73:68:4b:
                    c8:3f:61:52:4b:54:8d:81:76:6c:c3:e6:ee:a6:79:
                    6f:c0:35:30:1c:67:04:d0:76:15:ab:cd:70:bd:85:
                    fd:cc:d0:e9:52:6e:d9:33:39:ea:fd:09:47:51:af:
                    32:0e:1e:ce:14:c7:01:44:be:7d:69:36:5f:c5:0b:
                    1a:4e:23:8e:c8:c3:79:8a:16:00:4b:34:55:3c:6d:
                    34:0d:e7:c9:78:c4:4c:9c:c0:52:6c:fd:c4:73:57:
                    3c:16:8a:17:18:ce:78:9b:2f:5d:6f:fd:d5:8f:22:
                    bc:b2:2b:bb:f5:fd:80:65:b6:11:a4:6a:f6:a9:18:
                    19:a9:71:48:81:d9:6f:08:6d:f9:0d:46:79:7e:23:
                    a4:c5:aa:96:b9:04:5f:35:a0:83:6a:3c:bd:14:9a:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:86:17:E9:46:BB:BC:1E:62:98:33:FC:AE:15:A1:27:75:D1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ee2984a9-7711-32ac-b4b8-997ffd00ed53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:39:c1:41:ea:d4:84:a2:7c:9d:3d:81:eb:e8:d6:fe:88:1f:
         56:50:c5:f0:c3:ff:78:69:0d:e8:35:df:e5:1f:1c:bb:11:30:
         3e:39:06:24:e3:a4:ba:37:25:77:5f:d6:16:3c:4d:91:e3:68:
         c1:2b:f3:4b:04:a2:1c:0a:e0:ef:72:9f:d9:49:5c:07:06:f8:
         09:20:3f:c1:71:fd:67:08:64:6f:5d:2a:00:00:37:1b:b2:01:
         73:f6:2a:90:57:a2:15:26:1d:b1:57:be:e1:87:9c:79:ed:d2:
         ea:fa:4f:27:df:de:26:7f:f5:fa:d8:76:f4:b9:b2:7d:39:ff:
         00:55:7b:0c:1f:50:e7:7b:a2:55:52:21:17:58:4f:dc:4f:44:
         cd:d0:55:e7:0a:53:f1:ed:93:6e:79:ef:56:d4:8b:93:40:fa:
         12:88:72:f1:5c:45:61:07:c6:d1:c0:8a:d0:77:08:b5:2e:1d:
         e7:bd:0d:c2:e7:04:2d:46:27:4c:57:cb:39:c3:5a:de:b8:af:
         bc:26:30:5d:ed:57:17:31:ef:e5:48:f1:d3:d4:68:82:e7:63:
         aa:97:86:81:3f:18:01:a1:d8:e9:ac:3c:28:3b:fb:ab:4e:9e:
         8c:ff:d1:d3:44:44:d4:f9:d6:2d:93:91:13:a2:9a:0b:eb:84:
         5a:5e:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:48:34 2026 by rpki-client