Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8b5ba83f-2ede-36e4-be67-19030f7debb0.roa
File:                     8b5ba83f-2ede-36e4-be67-19030f7debb0.roa (raw, json)
Hash identifier:          sDS4ifyWWWjDRa6DRAUojuVW6s+Q1TeRQo1o7AAKYIo=
Subject key identifier:   4F:9C:AB:92:76:3B:62:81:D3:8B:FB:B5:3A:CD:A4:CE:31:9E:FB:8D
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584F4973AE3DCF9EE92ABC8DE000
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8b5ba83f-2ede-36e4-be67-19030f7debb0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400318
IP address blocks:        208.54.22.0/24 maxlen: 24
                          208.54.23.0/24 maxlen: 24
                          208.54.33.0/24 maxlen: 24
                          208.54.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ae:3d:cf:9e:e9:2a:bc:8d:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=af7fc248-37e4-4b5d-bcae-e85ad696e53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:c5:e4:76:b4:f2:00:d4:da:af:8b:f6:8f:
                    7d:fd:0d:5f:24:f4:5d:05:a9:79:ff:df:0a:3c:ca:
                    87:1c:04:8e:50:e5:d5:69:6f:71:de:2c:dd:c2:f8:
                    3c:2e:aa:c5:2d:f0:6b:01:f9:fb:6d:b3:ed:d5:97:
                    c3:78:b9:e4:01:45:1c:95:a9:df:eb:8b:03:13:c0:
                    a2:dc:9e:f3:65:b8:8c:6c:54:67:1e:b7:13:a3:8d:
                    d9:f7:e1:49:06:f6:1c:92:c4:e1:ee:3f:67:0b:11:
                    6d:bf:1e:67:d2:a4:d8:ad:a5:09:09:23:f8:4e:77:
                    0a:63:48:95:0d:78:bd:d6:36:29:7a:54:e1:92:f9:
                    fa:77:1b:39:f1:07:93:67:97:64:e8:a0:cd:24:6f:
                    a0:3a:df:3e:92:2e:d0:5c:41:50:ad:9e:18:a6:12:
                    3d:d1:77:bb:7b:23:d7:b0:d3:28:21:0d:5a:5b:a7:
                    3d:54:c8:bf:11:7b:c2:9c:de:55:f3:b9:bc:ed:c4:
                    62:f1:b0:eb:ba:61:d9:cc:3b:da:b2:7f:cd:d3:c1:
                    c9:c2:4c:cf:db:08:14:1c:4f:d9:d2:d5:f0:e5:65:
                    a0:56:99:13:f8:93:97:8f:84:aa:04:ff:2f:8f:b3:
                    2a:65:b7:0a:a5:b7:81:ed:79:30:d9:19:b3:c1:f1:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9C:AB:92:76:3B:62:81:D3:8B:FB:B5:3A:CD:A4:CE:31:9E:FB:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8b5ba83f-2ede-36e4-be67-19030f7debb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.22.0/23
                  208.54.33.0/24
                  208.54.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3a:a8:dc:7f:6b:bf:63:e2:a1:c5:f8:2a:14:77:81:80:77:
         4a:c0:71:3d:e1:48:b6:3e:29:0f:06:c7:d9:57:fd:f3:ec:e6:
         17:6f:15:61:83:cd:30:9b:8c:df:8f:b4:0b:4b:a9:8b:a6:fa:
         4f:10:a4:07:ad:c3:ab:52:8b:b8:55:c8:97:02:2c:72:8d:bb:
         e6:c1:6a:19:eb:89:bf:37:91:e0:35:f9:68:2b:48:e0:d2:b0:
         e4:05:b0:24:9c:2e:2f:27:e8:ec:0c:cc:96:f5:d7:30:9f:fb:
         e8:f8:74:ed:2c:ac:6b:ad:ec:da:a8:f7:07:bc:96:e9:0f:2c:
         43:52:b7:15:a0:56:3a:88:f0:c9:b1:f8:67:0a:c8:af:91:3c:
         27:df:49:b8:bf:ce:f8:12:b6:8c:c5:31:82:03:9f:6f:8d:66:
         b0:dd:28:8e:ef:05:c9:3d:a7:6e:3d:56:9d:a1:6d:5c:c4:02:
         75:05:57:f5:a0:fb:c0:a7:36:4a:69:47:c0:9d:73:68:e5:3c:
         dd:e3:00:1e:5a:e7:da:c3:f7:ff:26:e8:4c:84:8c:73:9a:a7:
         9b:68:fc:a7:97:1a:08:e5:21:f2:8d:a8:96:e8:ab:fa:b2:87:
         aa:99:a2:0c:de:8a:01:27:7a:d5:d8:2e:8b:5e:b2:08:65:a8:
         e7:b4:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:58:54 2026 by rpki-client