Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df1d0bbe-6f39-3964-b2f3-94236ce2ae7a.roa
File:                     df1d0bbe-6f39-3964-b2f3-94236ce2ae7a.roa (raw, json)
Hash identifier:          bWe0zGGuEIAhsDa2784VLpSs+lVkMzlm4jBsRDKLwEA=
Subject key identifier:   9D:47:91:AF:19:40:16:76:97:5D:BB:25:A0:6E:43:C9:C5:6B:C2:A7
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F74B82A151442175313BBA580
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df1d0bbe-6f39-3964-b2f3-94236ce2ae7a.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        134.224.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:2a:15:14:42:17:53:13:bb:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=6e155b53-31e8-4658-95d2-854ef1cdf6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:74:59:ef:e1:3a:9a:e7:49:d4:a0:a6:13:
                    f7:d0:51:06:bf:ed:86:a7:38:9f:0f:e2:b0:38:a3:
                    38:39:7d:a5:c3:9c:40:ce:c3:2f:57:18:bf:c9:02:
                    49:97:65:ae:e5:58:54:17:2f:e9:aa:9c:cb:12:4b:
                    24:7a:af:5b:ba:f3:80:13:6c:62:9f:36:f1:8c:99:
                    f2:df:9f:e6:c2:0c:0f:aa:3e:fd:1e:e1:2b:42:c4:
                    d7:4c:9d:fe:af:e1:ab:64:04:c7:e8:8b:90:9b:88:
                    35:34:09:d8:eb:0d:b9:d8:5b:25:15:c6:fd:94:c8:
                    c4:7e:6c:01:47:be:0c:7f:cb:49:aa:8a:fb:40:6f:
                    95:92:00:88:60:a4:96:c7:40:77:04:17:77:5e:94:
                    ca:f9:d0:df:bf:2a:96:7a:55:db:84:69:b5:b3:97:
                    41:6a:3c:10:ba:da:d1:dc:3d:e0:76:65:c1:3d:aa:
                    9f:48:5c:46:f1:f4:b1:9a:91:96:37:09:28:7f:1c:
                    8b:14:ce:60:53:06:66:fb:a4:5c:b0:45:80:e3:79:
                    62:d7:6d:18:e6:cd:bb:c0:fc:87:fe:ed:b8:95:45:
                    49:17:fc:16:25:f2:4d:5b:3b:9e:8f:45:70:04:e5:
                    80:78:1b:1b:f7:e6:e0:84:c5:06:60:6a:75:44:46:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:47:91:AF:19:40:16:76:97:5D:BB:25:A0:6E:43:C9:C5:6B:C2:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df1d0bbe-6f39-3964-b2f3-94236ce2ae7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:95:20:b1:33:26:ee:09:59:7a:fe:68:76:67:ea:24:5d:
         38:71:ff:9d:bd:d4:9f:1a:f7:bc:01:1b:9c:2a:97:cb:59:52:
         84:ea:21:e8:25:29:3a:64:2d:8e:9b:3d:a1:09:e2:d6:5f:f0:
         3a:d4:3d:a5:05:c3:d0:94:ed:a0:11:e5:88:b7:50:83:7a:47:
         57:58:15:8d:d8:d1:2f:b7:59:82:1c:06:19:dd:32:38:f6:96:
         36:b6:93:0c:41:24:ad:ea:94:02:d9:82:4b:74:7c:4e:21:f3:
         b1:58:b9:7a:74:bd:28:c3:1c:03:2d:25:ab:a0:76:af:dc:f8:
         2e:6d:a8:6d:4a:e8:36:09:22:1f:3a:9d:43:c5:ce:0e:d3:f7:
         f7:fb:65:5e:f4:fd:68:b9:c9:62:e3:ea:26:5b:00:6c:69:77:
         92:3a:91:f4:ca:8e:21:19:98:8e:66:c1:c8:b8:8e:a7:90:47:
         10:9b:9d:75:2c:10:f4:67:21:de:03:ee:a1:61:b4:66:43:2e:
         2c:06:66:ca:b2:03:74:ba:33:63:56:18:8d:41:fc:34:b0:46:
         5d:ac:f1:d7:b4:93:5a:8e:42:d0:dd:2b:d0:6e:2e:b4:47:58:
         6b:bc:b7:ce:e7:e2:bd:f0:95:0c:9a:9f:48:e4:13:78:41:76:
         7c:87:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:31:16 2026 by rpki-client