Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/bd733cc1-c210-3b28-a91d-f76c12f8df92.roa
File:                     bd733cc1-c210-3b28-a91d-f76c12f8df92.roa (raw, json)
Hash identifier:          eaVhMlmqbb0iMBn+iFX291Bi0zxHKZQjiSGnqW/wSTQ=
Subject key identifier:   0C:AC:0E:37:3F:7A:EC:CA:A8:F5:AE:F1:07:33:AF:38:3E:AF:62:EE
Certificate issuer:       /CN=9bbbcdeb-6e56-4c47-98f4-ca2daee4e669
Certificate serial:       010D0C9F4328584EE7BC970027373099ACBB3A00
Authority key identifier: BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/bd733cc1-c210-3b28-a91d-f76c12f8df92.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     22364
IP address blocks:        204.126.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:97:00:27:37:30:99:ac:bb:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbcdeb-6e56-4c47-98f4-ca2daee4e669
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=04078c32-005c-4d18-b312-3d9f1e2cd686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:c9:55:9d:e8:e2:ed:8c:1c:f2:5e:0e:74:
                    8c:f5:95:0d:9c:f1:6f:bd:e2:6f:95:d4:2c:9a:27:
                    6f:31:ad:1e:65:a3:30:e4:41:97:e5:d7:62:7b:05:
                    c0:06:c7:c5:b8:3b:ed:46:c7:43:a6:ea:2b:21:0f:
                    72:aa:93:4e:23:c6:f3:b3:c0:44:b0:fb:f5:ae:5b:
                    16:ac:32:aa:69:55:18:38:ee:ee:cf:f4:6a:fd:3c:
                    91:e7:3a:47:86:c0:fc:ae:d6:06:e8:44:bf:49:8d:
                    74:1c:2f:ce:10:24:b6:43:b3:69:96:8e:7a:41:75:
                    76:7d:60:fe:cf:0f:b5:f9:46:f2:d4:cd:e7:b3:ca:
                    73:dc:7f:ed:99:8b:c2:48:58:68:00:5e:23:58:c1:
                    34:84:75:5c:ce:04:84:ae:1d:09:ec:c3:45:2f:e5:
                    69:aa:82:67:ce:f0:5c:01:1b:c4:69:e0:fd:81:0c:
                    48:7c:32:8d:7d:58:85:ea:23:88:75:e1:61:50:f1:
                    c6:46:92:01:2b:02:4d:57:85:93:83:37:b8:bd:79:
                    36:11:61:24:c9:62:b8:57:3a:7f:98:16:7d:70:cc:
                    50:fa:43:ad:ee:09:33:a6:14:de:96:9d:bb:a3:8e:
                    6d:7e:2c:98:da:71:c7:98:ac:a3:6b:a9:bb:3c:d0:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AC:0E:37:3F:7A:EC:CA:A8:F5:AE:F1:07:33:AF:38:3E:AF:62:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/bd733cc1-c210-3b28-a91d-f76c12f8df92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.crl

            X509v3 Authority Key Identifier:
                keyid:BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:a8:cd:c8:51:c2:6a:5d:94:cc:2e:fb:07:cd:66:09:f6:
         5f:9c:48:f4:5c:66:ba:55:b3:71:f8:15:b9:28:45:85:b4:64:
         36:77:55:f0:89:88:17:b5:ea:96:3c:5c:82:5d:e3:e2:82:88:
         26:da:95:8d:4d:6e:ca:53:6a:94:5d:e4:2f:95:04:5e:74:4f:
         3b:de:e6:bf:2d:48:8e:bb:b5:d0:ce:ad:39:0b:06:4d:1b:30:
         79:3e:29:ab:3b:85:6b:69:0a:5c:9d:dc:ba:44:12:ec:cb:08:
         d5:f2:42:17:4e:ac:8f:1b:54:f5:62:40:7a:4b:e8:65:17:c8:
         b3:dc:32:fc:c8:32:13:db:89:b2:be:f9:cb:ea:dc:58:55:01:
         89:54:44:af:a1:78:5a:22:83:d8:81:bd:3b:7f:a2:c6:5a:21:
         0f:82:59:23:70:b6:d5:2c:60:dd:98:0c:25:e0:d5:cf:d9:9d:
         8c:57:a0:4a:8f:10:42:58:02:0d:5f:ce:b6:b7:81:01:2e:78:
         c4:51:73:9c:e6:58:12:d9:9c:eb:8c:e1:8c:9c:7f:4a:f4:f8:
         52:84:5f:68:b0:e1:65:d8:00:ab:4e:1f:c2:4c:9c:b5:c0:ce:
         07:b4:f0:7b:4c:de:fa:69:ac:46:66:a9:ac:e6:6e:58:e7:0f:
         11:94:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:39:17 2026 by rpki-client