Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ba8597-8362-30a3-8c57-a5b999f39895.roa
File:                     70ba8597-8362-30a3-8c57-a5b999f39895.roa (raw, json)
Hash identifier:          eZDhpwtKqkj+DDcBlUn8DtzRdJurHAazyuF1KfSe4JU=
Subject key identifier:   CA:0F:65:CE:6D:4B:26:AC:40:0F:26:7F:A8:8D:78:DA:F6:87:1F:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F71EDB3A62C00ED52A3CF3C60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ba8597-8362-30a3-8c57-a5b999f39895.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     36183
IP address blocks:        172.226.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b3:a6:2c:00:ed:52:a3:cf:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=fd8b949e-6652-4c02-9f83-fb8f7a17c5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:22:06:14:0e:6f:11:30:49:82:ee:38:af:
                    d7:c6:ad:84:7b:bd:d6:83:7b:3e:61:58:28:f6:53:
                    12:e7:ef:f5:06:38:94:ee:2c:03:ee:e3:c3:30:f3:
                    ce:24:40:a9:fb:01:ea:94:f3:72:20:e6:4f:bf:cf:
                    b8:35:df:78:81:eb:06:82:38:17:3a:6c:11:5f:ed:
                    f4:a0:fe:63:4c:a2:fa:0d:f6:06:1b:e0:58:31:56:
                    3d:33:e4:8f:30:d3:54:37:67:55:f0:ca:7e:e2:b9:
                    97:89:c6:4c:6c:2b:6a:a2:b5:64:22:60:79:05:de:
                    de:7c:6d:ab:97:e8:0b:64:32:0a:26:f9:08:f4:01:
                    5c:34:bf:fe:ce:ab:95:7b:ca:69:35:06:7a:4d:63:
                    5c:76:e7:92:1b:60:ca:2b:ea:1a:77:70:6e:a5:7f:
                    dd:cf:1b:84:08:df:61:41:8d:c0:06:d3:e4:31:8d:
                    ba:e9:f1:55:e4:80:3c:ec:9c:46:54:c0:2d:35:82:
                    34:4f:0a:6d:fb:8a:b3:c5:0d:54:36:2d:1d:b1:e6:
                    25:de:1b:6b:91:e6:30:bd:70:85:f3:33:14:40:7d:
                    68:c9:78:f3:60:45:b6:92:3e:b3:b3:41:d8:c8:7b:
                    d2:83:e0:63:ee:80:f4:4b:0e:c0:b7:1f:d5:69:a2:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0F:65:CE:6D:4B:26:AC:40:0F:26:7F:A8:8D:78:DA:F6:87:1F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ba8597-8362-30a3-8c57-a5b999f39895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f8:1c:b7:df:ca:de:48:b6:03:0d:19:75:0b:5a:ff:b1:90:
         66:59:94:bb:6f:be:c3:5b:02:95:64:ab:e5:6c:5c:43:05:5c:
         27:fc:a2:8f:31:ec:56:77:66:50:d9:bc:34:69:30:39:7b:d8:
         0f:71:58:94:aa:25:00:e7:22:2b:bb:99:c2:63:c7:78:a0:89:
         66:ff:1b:f4:f4:2c:5c:6b:c3:57:ae:68:6d:52:2f:2e:f4:78:
         8f:1c:88:d3:99:a5:65:8c:b2:e9:53:a4:e5:ca:e2:6d:f9:85:
         9f:79:c4:91:74:f1:4b:14:e0:7a:13:60:4c:de:87:42:0d:51:
         bd:fa:aa:93:2b:49:bb:00:e0:b8:74:80:b3:11:2b:c2:d3:b9:
         4a:2b:b1:6c:4f:ac:92:77:51:cd:1e:0e:e9:3f:b6:f5:c7:17:
         28:f2:66:77:d9:6b:f8:3a:fa:08:99:57:28:22:56:12:de:60:
         ef:86:6e:0e:3a:f5:94:35:7f:31:c8:88:ed:30:4f:a5:59:d8:
         98:cd:a8:a5:d6:d4:16:5e:11:bf:94:d9:54:64:d4:41:41:09:
         5d:8a:f1:03:83:c4:35:e7:19:3c:8e:c7:f1:60:7c:11:03:da:
         04:de:26:a7:e0:09:48:1a:3d:10:42:da:81:42:b4:cf:10:0c:
         66:c3:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:10:25 2026 by rpki-client