Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/d095f408-1989-3f80-8bcc-cd1125fe3932.roa
File:                     d095f408-1989-3f80-8bcc-cd1125fe3932.roa (raw, json)
Hash identifier:          cbrm6K6EaVHm6nQrHuI944Epu5tWTkwEzItpVuRqLfg=
Subject key identifier:   64:B5:35:A6:75:48:6C:46:DE:C6:6F:F7:14:A5:55:09:ED:C5:C8:92
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584F4988DB401019115F7C401100
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/d095f408-1989-3f80-8bcc-cd1125fe3932.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        199.6.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:db:40:10:19:11:5f:7c:40:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d0a8d3fd-c3ae-4c0a-81d7-e8d1aabb43ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:f4:ed:e8:61:d7:ae:c5:ba:36:1a:43:a3:
                    64:22:7d:1f:39:6e:cd:17:c0:62:b7:c7:f9:0b:f6:
                    c7:5b:03:35:12:87:d0:a3:a6:22:67:27:87:44:c5:
                    01:14:c9:c1:89:e1:fd:04:f5:55:c1:dd:df:bd:e6:
                    ec:24:53:3a:97:17:02:2e:d8:bf:df:fc:2a:d9:c5:
                    f3:05:66:98:86:82:66:17:66:ce:0d:2e:00:f6:90:
                    0a:ec:f2:5a:8e:18:59:2b:fd:a1:ca:4b:76:88:7d:
                    32:f8:d0:53:9b:99:7f:40:4d:03:14:62:b7:d1:8d:
                    17:ff:2a:15:ef:9b:1c:39:37:75:0f:7e:0b:2c:65:
                    55:ee:5f:8a:a2:4e:25:64:54:32:2f:5d:cf:38:eb:
                    ef:f4:bf:ad:ce:bc:42:a8:d5:ca:7a:a0:29:cf:12:
                    52:13:84:d7:59:5f:95:3e:7a:13:b8:1e:3b:33:6e:
                    b4:c3:20:f1:94:5e:5b:10:61:9c:01:52:11:b8:d1:
                    20:fc:cf:03:0e:be:11:b4:37:9c:d6:7b:9a:e0:39:
                    95:bc:af:93:18:ba:e8:53:2c:b9:58:89:62:2a:c6:
                    2b:e6:13:7e:9e:64:ec:2a:17:6e:af:f9:61:8e:4d:
                    d6:7f:91:e9:5e:2c:3d:21:dc:12:83:32:5c:ba:a5:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B5:35:A6:75:48:6C:46:DE:C6:6F:F7:14:A5:55:09:ED:C5:C8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/d095f408-1989-3f80-8bcc-cd1125fe3932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:5c:d1:bd:22:ee:a3:b7:eb:4a:ad:98:29:c4:62:89:f0:
         4b:f4:c9:48:6e:54:80:da:e6:2d:a6:b4:92:f2:79:a5:02:74:
         26:4b:02:9e:96:d1:99:a6:3b:c3:c9:82:3d:ce:78:c1:05:23:
         93:c1:e6:bc:b4:a3:ea:23:2a:20:25:de:71:9f:36:f1:13:cc:
         75:c2:dc:84:ae:b1:35:aa:ce:76:7c:f9:b6:b9:75:86:a4:3b:
         27:ff:67:3d:0e:89:d1:77:93:5f:ff:75:dd:ba:44:f0:77:c4:
         70:4d:1f:15:9b:7e:3b:2c:25:58:c3:07:88:4d:b6:b4:67:97:
         53:67:5e:02:9f:9c:bf:5d:20:1b:a2:2e:22:b6:46:f3:d3:a5:
         d8:41:1c:69:81:37:01:9c:7f:e0:7b:b6:1e:3a:00:0a:3f:35:
         55:33:71:60:17:a7:58:35:79:34:73:4e:e9:0d:8a:8c:3d:3e:
         65:4a:2d:23:21:f9:c5:47:97:7a:dc:d0:46:f2:8b:b1:b0:54:
         f3:db:a6:10:53:1e:c2:35:dd:2d:7a:60:05:9b:c4:e6:da:ac:
         77:bd:9c:a2:58:6c:d6:8c:06:f2:58:2f:c2:0d:84:d6:d0:96:
         6a:bc:e5:48:7a:82:7a:be:9b:ef:6d:18:74:47:cb:ba:a7:d7:
         6e:bb:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:54:46 2026 by rpki-client