Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c54d778-09d4-3d95-8d2b-67232ca23413.roa
File:                     1c54d778-09d4-3d95-8d2b-67232ca23413.roa (raw, json)
Hash identifier:          cqOZ7OcjKi5Vdb1TZ2mn9Xzwih+vg2eN8X4ju4X9TGw=
Subject key identifier:   2D:DC:41:99:12:CB:1B:4D:B2:AF:53:EE:CF:99:CA:E8:D3:EF:E1:44
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F331D258224432211625EABC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c54d778-09d4-3d95-8d2b-67232ca23413.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     8881
IP address blocks:        168.93.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:25:82:24:43:22:11:62:5e:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=ee6ef782-b27f-43be-874f-5dcf5e79b194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:8c:b7:ac:96:06:6f:27:20:32:ad:4c:81:
                    89:a8:18:98:2d:d3:3b:b4:4a:8a:b7:f7:08:93:fd:
                    02:ca:a7:17:e5:16:2c:44:da:ac:70:9a:df:96:31:
                    54:b9:55:73:fc:f7:97:a7:06:86:83:d6:30:c3:46:
                    eb:62:87:37:8c:06:fe:80:06:01:ca:39:8a:94:54:
                    85:39:da:13:48:5c:d3:b7:17:41:b4:69:a9:48:6d:
                    9e:67:51:3c:75:e5:88:83:50:9e:da:87:4c:75:72:
                    1c:6d:34:7a:43:97:29:37:8f:80:fe:fa:df:5b:79:
                    17:bb:17:6f:49:f5:74:a0:32:87:87:38:24:e2:59:
                    f2:20:9a:bb:e0:af:29:df:f1:00:cf:8c:59:db:30:
                    59:08:0c:ed:b5:1e:ed:46:a3:e8:81:05:23:82:62:
                    5f:23:53:7c:b4:e2:6e:fd:c6:73:e8:c4:73:3f:b4:
                    a4:e0:b2:91:af:e3:44:a4:47:10:cf:bb:ee:b4:97:
                    9e:80:1e:95:89:07:fe:ee:de:c0:66:82:7b:b4:30:
                    7b:4c:e8:10:a4:30:d6:67:6c:d0:91:fc:ca:83:44:
                    7d:51:0d:fd:b8:90:c9:8e:a6:6d:4f:53:10:ce:d9:
                    b0:91:eb:43:cb:b4:3b:6e:3e:f4:c2:2f:f8:9b:f5:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DC:41:99:12:CB:1B:4D:B2:AF:53:EE:CF:99:CA:E8:D3:EF:E1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c54d778-09d4-3d95-8d2b-67232ca23413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:ad:51:44:30:c6:da:6a:7c:c9:4b:a0:8e:4b:32:3b:48:
         d9:46:a5:15:76:dc:10:22:63:04:9a:a6:b4:35:00:a6:50:96:
         64:ec:95:1d:df:70:2f:18:aa:3f:9c:17:ee:e1:49:6e:08:6d:
         98:aa:89:7a:24:71:9b:40:1a:f5:19:1a:af:8b:3d:d4:b7:1e:
         a9:40:01:80:53:0e:fa:ef:27:cd:a1:73:35:4d:54:6c:5a:6e:
         57:be:ba:d4:72:16:43:81:a5:e3:60:4f:28:11:98:8c:f3:a7:
         1a:53:81:95:6d:b9:9a:a8:37:10:d4:d5:c9:fe:c6:cd:05:10:
         a4:7e:45:f3:27:6a:5e:d8:9f:f7:73:c2:23:69:4b:9b:c1:7c:
         d8:84:f1:8c:79:b4:59:86:cf:0f:a8:85:87:83:0a:32:4d:b3:
         63:5f:76:51:d7:55:8f:0e:60:8a:71:42:6c:85:11:23:b1:8e:
         ba:a8:ff:e6:57:bb:cb:17:a2:13:9a:4b:6b:25:52:c6:9c:2a:
         2a:18:e1:f1:11:4a:c7:d6:49:f5:8d:29:8a:6f:a2:fb:a1:63:
         b3:d6:01:fd:91:e3:10:53:85:a6:e1:5e:e7:79:24:bb:ad:b2:
         5e:78:05:30:29:d5:86:92:9d:d4:fa:1f:a9:e6:87:7b:e0:7f:
         28:07:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:17:15 2026 by rpki-client