Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa
File:                     8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa (raw, json)
Hash identifier:          VGZybTYBkQYwG/IRGgSl8K+/fefH5Kqf5fhASDUW+oM=
Subject key identifier:   43:93:80:5F:BC:74:DD:D8:86:E3:4B:47:68:C5:EE:1B:05:F2:E3:7C
Certificate issuer:       /CN=01a4b3c4-670e-4045-9d0e-a7046f352d92
Certificate serial:       010D0C9F4328584D83CA9E85663F5192A89D9F80
Authority key identifier: 51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     399332
IP address blocks:        209.209.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9e:85:66:3f:51:92:a8:9d:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a4b3c4-670e-4045-9d0e-a7046f352d92
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=6883d0d6-0fff-4303-88d6-674ade70adff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:43:e3:29:1f:d5:28:33:b9:4e:44:b3:d1:f4:
                    00:2e:91:aa:84:d0:24:a0:1c:e7:40:2e:b3:0b:81:
                    65:fa:a6:d0:65:59:38:60:39:6c:13:4f:cf:d4:42:
                    c4:d6:23:f1:75:58:7c:43:fa:b3:48:22:fc:7f:3d:
                    d6:2c:bf:fd:df:e0:aa:b4:63:88:55:ae:7d:03:c8:
                    ef:64:a1:0d:46:6c:e3:b2:a3:fb:0d:57:6e:22:24:
                    fd:22:56:97:b5:07:df:7a:fd:16:f9:54:71:ce:f2:
                    82:48:73:54:15:67:95:54:f4:73:5a:a9:4c:29:e0:
                    c1:22:ff:89:60:e0:c2:55:9f:a4:12:95:4f:08:78:
                    75:bc:39:7b:f4:cb:82:d4:d9:8a:2e:41:1d:4a:54:
                    7d:50:12:0d:34:d9:ca:61:0a:3f:ff:68:2b:7e:79:
                    30:e0:21:4d:3e:2b:5b:65:56:7b:ba:42:c5:a5:85:
                    b5:2d:b8:44:aa:c6:a2:4c:9b:e1:50:d2:0d:26:8d:
                    a5:ae:c7:58:9c:9e:2f:a1:93:66:ea:f8:93:12:de:
                    53:24:36:ed:30:a1:7f:8b:3a:9e:5a:73:aa:eb:58:
                    94:3b:c8:aa:1c:5a:67:7f:64:11:c6:cd:6c:00:17:
                    61:81:d3:74:cf:18:f4:87:b1:34:0c:58:52:4f:76:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:93:80:5F:BC:74:DD:D8:86:E3:4B:47:68:C5:EE:1B:05:F2:E3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl

            X509v3 Authority Key Identifier:
                keyid:51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:6d:d5:89:b9:64:ed:9a:72:9b:aa:f7:60:d2:18:17:ac:
         ca:a7:7d:7d:e8:8b:82:ca:97:21:8d:86:d8:ab:73:ba:f7:1d:
         7b:b0:f3:e0:ff:6d:3f:39:24:c2:dc:05:b3:05:50:d9:eb:a7:
         da:6e:57:2e:dc:30:75:4b:26:3e:95:ee:39:4d:09:04:7c:d7:
         5e:49:30:09:34:2b:27:d7:44:a2:e1:a2:76:9a:47:0a:06:d1:
         ce:55:68:39:5a:2a:03:59:d5:df:38:b1:32:b8:5a:4d:1a:f3:
         89:7b:41:bf:37:75:47:91:d9:33:81:a1:89:80:d5:70:30:04:
         da:04:e1:18:32:5c:a4:1b:a4:3f:e4:3c:8e:92:ac:f2:27:4b:
         ca:c6:98:ac:f9:0d:6e:81:3b:fb:50:c0:87:1a:aa:8c:8f:fe:
         a8:c1:f7:4a:1a:7f:51:5f:ba:0a:90:c8:7d:5c:0d:b3:f8:7a:
         cb:b0:34:d4:6a:b2:df:ac:7a:a4:c9:e2:13:75:df:c4:a7:00:
         1d:a7:f1:c1:1a:ef:10:04:fd:6f:da:65:ec:3c:4b:ca:b1:39:
         99:0f:8e:32:b4:7f:d4:0f:76:37:93:a7:27:ff:87:9b:45:a2:
         a7:13:5e:e0:4b:7a:31:ca:9b:a7:8e:b5:a3:97:41:48:db:ed:
         34:40:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:36 2026 by rpki-client