Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File:                     4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier:          0Cec6gUljGr9k+2DpIq8mz6oI9INrmgIFalsFBHxoSo=
Subject key identifier:   F6:98:E3:A5:C1:DC:FA:14:6E:CB:47:5A:EE:A8:5D:6C:BF:FA:F3:3F
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584F34826CAC23E29861527DBDC0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     395092
IP address blocks:        64.28.236.0/23 maxlen: 24
                          172.96.136.0/22 maxlen: 24
                          2607:a680:3::/48 maxlen: 48
                          2607:a680:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6c:ac:23:e2:98:61:52:7d:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=5e093425-4a20-4b3c-b73d-79726abaa2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:e3:de:b1:59:df:6e:04:bc:57:ad:24:00:
                    47:49:bb:30:ab:8b:67:64:a9:3d:ca:56:51:cf:9b:
                    1c:98:a3:5c:1e:a2:1b:00:24:be:b5:f3:0e:6b:5e:
                    76:21:86:6f:1b:1e:df:2c:cc:7f:78:76:0d:0f:3b:
                    fc:36:1c:9f:f0:2d:5c:2a:de:ea:70:40:ba:87:15:
                    68:73:db:77:95:c0:d1:fd:82:71:0f:e3:94:02:de:
                    d9:68:50:6f:83:6d:3c:8d:8c:42:10:e1:ab:1a:21:
                    dc:78:13:d3:a7:3a:2c:8d:d4:38:18:49:95:79:1c:
                    f6:96:d3:b4:f6:f9:78:ce:c8:78:bf:74:84:d7:f8:
                    87:51:b8:0b:5b:cb:8b:13:41:61:90:a9:f8:ef:60:
                    03:2e:aa:4f:97:b0:ca:0f:1c:74:22:27:03:0c:41:
                    3a:45:09:fe:0b:b6:6d:ea:eb:40:42:55:d7:9c:2e:
                    d9:60:73:a4:9a:7d:1d:46:30:48:e3:62:37:ab:9a:
                    b1:e2:44:ba:48:69:35:a5:30:5b:06:ef:c7:8a:9a:
                    15:ae:d0:aa:a9:59:08:2c:52:ae:f8:c8:3b:a8:95:
                    f9:94:2c:04:0e:76:19:c3:bc:99:29:e8:e1:ff:c2:
                    de:31:50:4d:bb:0a:c9:a2:6f:f4:c9:66:c7:e8:63:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:98:E3:A5:C1:DC:FA:14:6E:CB:47:5A:EE:A8:5D:6C:BF:FA:F3:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.236.0/23
                  172.96.136.0/22
                IPv6:
                  2607:a680:3::/48
                  2607:a680:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:df:e4:f9:a6:9f:36:b1:9a:5c:75:6c:8f:88:69:c0:23:
         9b:75:c4:0c:c1:7b:e8:e8:68:26:c2:a4:eb:e9:d1:3f:2b:dc:
         22:53:ad:02:a8:97:4a:58:9e:cc:fe:ae:46:7d:6b:0c:c9:57:
         bb:1a:7c:22:0e:d6:18:44:0d:44:ee:c9:ce:28:7b:1f:aa:17:
         d1:39:54:77:70:e6:a6:25:88:b0:e2:98:3c:1c:56:5e:a0:cf:
         ec:9b:3b:10:30:07:e2:34:df:90:af:54:07:dd:c8:6e:34:42:
         00:59:56:9a:8e:db:f9:0a:a0:e4:f4:e4:cc:b2:26:32:b6:55:
         94:90:67:06:71:85:22:8f:56:64:d6:10:74:f6:88:2f:42:ee:
         73:fd:eb:2b:ec:d0:bb:67:41:a8:a7:60:16:04:9e:5b:08:74:
         bd:50:b5:57:de:8b:ca:10:a9:0b:34:60:e2:e7:f4:0b:c6:97:
         a9:3c:33:e0:04:42:19:08:32:a6:0b:01:2e:87:9b:41:01:4b:
         f8:ca:c5:a2:98:e3:77:6b:41:c6:a4:1b:02:b4:11:39:ae:c2:
         12:78:27:61:df:75:fb:6b:c5:94:af:9f:64:0f:c2:ac:c6:6f:
         6c:ac:ab:00:f9:13:82:17:24:38:f7:85:72:9d:d2:55:db:b5:
         fb:8c:d9:38
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE80gmysI+KYYVJ9vcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
NWUwOTM0MjUtNGEyMC00YjNjLWI3M2QtNzk3MjZhYmFhMmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT3j3rFZ324EvFetJABHSbswq4tnZKk9ylZR
z5scmKNcHqIbACS+tfMOa152IYZvGx7fLMx/eHYNDzv8Nhyf8C1cKt7qcEC6hxVo
c9t3lcDR/YJxD+OUAt7ZaFBvg208jYxCEOGrGiHceBPTpzosjdQ4GEmVeRz2ltO0
9vl4zsh4v3SE1/iHUbgLW8uLE0FhkKn472ADLqpPl7DKDxx0IicDDEE6RQn+C7Zt
6utAQlXXnC7ZYHOkmn0dRjBI42I3q5qx4kS6SGk1pTBbBu/HipoVrtCqqVkILFKu
+Mg7qJX5lCwEDnYZw7yZKejh/8LeMVBNuwrJom/0yWbH6GMBAQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFPaY46XB3PoUbstHWu6oXWy/+vM/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNGZjYjZlOTctNTM2OS0z
NWU0LTg0ZjktYjZlNTdjMTg1MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQBzsAwQC
rGCIMBgEAgACMBIDBwAmB6aAAAMDBwAmB6aAAAcwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf1rf5Pmmnzax
mlx1bI+IacAjm3XEDMF76OhoJsKk6+nRPyvcIlOtAqiXSliezP6uRn1rDMlXuxp8
Ig7WGEQNRO7Jzih7H6oX0TlUd3DmpiWIsOKYPBxWXqDP7Js7EDAH4jTfkK9UB93I
bjRCAFlWmo7b+Qqg5PTkzLImMrZVlJBnBnGFIo9WZNYQdPaIL0Luc/3rK+zQu2dB
qKdgFgSeWwh0vVC1V96LyhCpCzRg4uf0C8aXqTwz4ARCGQgypgsBLoebQQFL+MrF
opjjd2tBxqQbArQROa7CEngnYd91+2vFlK+fZA/CrMZvbKyrAPkTghckOPeFcp3S
Vdu1+4zZOA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:23 2026 by rpki-client