Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/e4358070-5aee-3f80-8375-e866a8d8358b.roa
File:                     e4358070-5aee-3f80-8375-e866a8d8358b.roa (raw, json)
Hash identifier:          YOrhjJLEXmv60EmYO+KtOiCDrxfEm0F1wsQZV5jZARk=
Subject key identifier:   6E:11:DB:05:1E:06:5C:3A:D5:92:7D:29:F3:7E:08:2D:FE:7C:45:2E
Certificate issuer:       /CN=8efd04a1-8809-4ec9-958e-8c9da694afe4
Certificate serial:       010D0C9F4328584F89A8462CFB25EC2A04673B80
Authority key identifier: DD:9C:43:3C:3E:81:AD:C0:EF:78:4F:E7:E9:E5:CE:44:57:75:6F:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/e4358070-5aee-3f80-8375-e866a8d8358b.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     396067
IP address blocks:        168.151.230.0/23 maxlen: 23
                          2602:fa12::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:46:2c:fb:25:ec:2a:04:67:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efd04a1-8809-4ec9-958e-8c9da694afe4
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=4d07033a-9e6f-4bc4-bd51-82aa452503de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:8b:66:81:86:74:6c:3d:33:ff:7d:dd:94:
                    88:c5:fe:a4:ab:37:8f:06:61:79:34:0a:09:2f:e9:
                    bf:44:17:3f:b5:1d:c6:b4:26:79:0f:21:87:72:61:
                    24:90:c0:c7:d0:92:33:24:f8:0b:ee:c7:c9:62:31:
                    19:fe:fd:cb:f8:b7:71:e3:a6:33:d2:62:ec:3a:b1:
                    bc:96:32:f2:ce:98:fd:9d:3b:e4:46:f1:d0:e7:9d:
                    6e:b4:95:5c:25:92:f5:29:d6:66:3d:a1:b9:c1:a8:
                    df:a9:3d:a9:00:1c:f6:d1:7f:80:6a:30:65:ba:f3:
                    1d:b1:ea:f9:b3:84:85:72:24:2f:c5:c2:42:e5:a2:
                    67:c0:e8:d1:0a:85:3d:96:ec:6f:3c:c2:54:56:86:
                    33:b1:eb:c4:85:bf:71:4b:76:a8:26:be:5f:58:89:
                    10:5f:e0:d6:b0:13:a6:d9:7a:93:1d:c9:0f:7b:62:
                    ef:7d:6c:55:7e:6b:b7:8b:f8:bf:a3:8e:3e:39:5a:
                    77:08:56:2a:24:bf:47:33:b4:24:17:8e:1a:31:ab:
                    65:49:58:75:33:27:11:10:ca:0c:40:d2:87:79:7e:
                    45:a6:79:3b:71:0b:7e:31:57:62:b8:85:e7:9c:fc:
                    4a:55:a9:a7:04:d1:de:f5:40:78:3c:54:66:f4:a2:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:11:DB:05:1E:06:5C:3A:D5:92:7D:29:F3:7E:08:2D:FE:7C:45:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/e4358070-5aee-3f80-8375-e866a8d8358b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.crl

            X509v3 Authority Key Identifier:
                keyid:DD:9C:43:3C:3E:81:AD:C0:EF:78:4F:E7:E9:E5:CE:44:57:75:6F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.230.0/23
                IPv6:
                  2602:fa12::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:76:8c:85:ec:36:1e:de:6e:cf:6b:4d:8f:ef:21:f4:13:df:
         62:2e:da:c1:23:fd:54:a6:66:ca:fb:18:60:60:09:fe:57:4b:
         b4:d7:bb:64:42:8a:0d:16:06:4c:00:56:f4:72:e8:3b:0e:63:
         6b:7d:97:f5:2e:3c:49:3b:84:86:4a:4f:80:28:c4:9b:7a:9c:
         d5:69:18:6b:be:ca:39:e3:84:23:dc:7d:21:50:5d:b1:79:41:
         71:d2:b7:17:2b:2e:97:6c:88:4a:43:43:57:58:ad:2f:50:55:
         5c:4c:a3:99:ea:69:81:41:bf:d0:92:5e:03:72:4e:69:4a:fa:
         1c:70:78:d3:fc:ef:2e:ec:16:41:05:03:d9:40:06:26:2c:c9:
         ab:bf:29:b2:89:5e:4e:34:2b:0b:7e:a3:7d:a8:29:26:9a:4d:
         5a:74:cc:b4:0f:21:a4:8a:8b:e4:4f:74:27:24:ed:9a:3a:e1:
         0e:0c:28:f9:18:b2:a0:45:1b:f2:e6:28:e3:de:2e:c8:e5:8e:
         71:a5:3f:8e:95:c5:e9:fb:1f:99:4a:6b:e7:bd:c9:dd:c5:84:
         3b:37:d0:55:b1:1e:d0:71:ad:fc:73:74:58:79:58:f6:e7:28:
         5c:51:4b:51:c2:c4:a6:85:d5:23:7b:cb:3a:33:41:a1:39:6a:
         7f:d4:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:50:32 2026 by rpki-client