Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/066ef50a-4853-3715-b6ee-33eef2ad050f.roa
File:                     066ef50a-4853-3715-b6ee-33eef2ad050f.roa (raw, json)
Hash identifier:          4HZeYI+WFFZ4dCYJQEX50YfkKOzLONIpiQxAqIZtwc8=
Subject key identifier:   9A:F5:EC:5E:9B:E1:73:80:15:CE:6A:D0:5C:6A:D4:F0:5F:94:1A:A9
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584F4973375533EAA2A8ADAF6C00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/066ef50a-4853-3715-b6ee-33eef2ad050f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20454
IP address blocks:        125.253.86.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:37:55:33:ea:a2:a8:ad:af:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f1b4c6db-9d44-4692-930a-0689ef20dfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:f7:ad:2f:22:e8:a0:a9:4d:8b:2c:10:1a:
                    09:1b:6e:f4:ee:c7:80:85:54:a9:41:fe:eb:ff:9e:
                    28:cb:3a:3b:05:94:e4:c5:48:71:7b:ff:83:78:4e:
                    ff:ca:ef:b4:bd:4f:20:8e:98:c9:0a:b7:bf:83:e9:
                    9b:50:23:d7:0b:5d:ba:0d:05:52:a6:a1:65:d8:9e:
                    63:88:97:27:1a:fb:70:0a:6f:6e:8a:cd:80:c4:08:
                    b9:94:60:5d:e8:c5:78:f5:88:6d:6c:6c:c5:20:17:
                    8b:5f:0c:af:3a:de:da:b5:66:1d:78:79:aa:a2:f2:
                    0b:2d:e6:e8:3f:17:94:af:35:63:71:f8:57:af:c6:
                    c5:01:2f:50:11:98:c3:85:d0:16:3c:3c:c8:af:01:
                    c9:aa:f3:1b:5c:57:68:8b:9b:9b:9a:81:41:49:fe:
                    bc:c3:e5:07:c5:26:bc:86:1b:cb:b3:ad:d1:c2:81:
                    05:de:bc:36:0d:b1:44:ae:3e:0a:36:8e:11:52:b9:
                    6e:31:0e:e4:3d:4a:7f:64:06:81:83:b3:bd:8c:bf:
                    b0:a3:4d:24:34:e6:1c:5c:ac:5f:38:c2:b1:6c:1b:
                    68:ba:e0:7d:65:27:62:5f:75:db:ab:49:da:bf:a1:
                    49:65:fc:70:32:ed:b6:53:ae:c5:0c:78:a3:df:66:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F5:EC:5E:9B:E1:73:80:15:CE:6A:D0:5C:6A:D4:F0:5F:94:1A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/066ef50a-4853-3715-b6ee-33eef2ad050f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:37:fb:92:c6:3b:5f:45:ce:8b:59:b7:77:8c:6b:3a:27:27:
         16:64:28:93:a7:a4:30:0b:36:03:1d:df:f5:3c:7b:24:fd:9f:
         a2:21:6b:9d:59:95:19:1f:10:84:ce:86:de:29:43:79:7d:f9:
         c5:22:5e:5f:23:a1:53:d6:73:8d:e9:14:cf:ff:d9:20:4a:36:
         30:a6:c2:fd:29:83:65:49:06:38:39:a9:e2:fe:bc:3e:82:35:
         9b:d9:00:32:6d:18:07:ae:df:52:48:c2:31:ce:de:b8:98:f0:
         f7:78:70:72:bf:2b:cd:73:b4:a7:04:a3:dc:a6:59:c2:32:32:
         13:b2:1c:c0:3a:7a:cf:86:f2:74:11:dc:d3:78:c6:97:f5:d2:
         a7:3e:31:fe:44:3d:97:03:cc:63:af:a2:3b:2f:8c:f0:87:92:
         5a:cc:e2:3e:71:fc:43:2c:52:35:d2:03:b9:7c:01:01:90:4d:
         25:f1:cc:b9:90:aa:f0:3d:51:33:cc:5b:3f:ea:e0:cd:b3:3f:
         84:18:f8:ac:ed:3b:53:7d:ae:c4:3e:46:6d:f0:13:65:3f:44:
         d9:ee:96:19:f2:ca:84:0b:12:20:d7:e5:a2:91:16:3b:df:13:
         63:4b:7e:90:72:f2:9b:e5:c5:b1:57:bb:16:43:e6:12:3c:2c:
         17:dc:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:09:16 2026 by rpki-client