Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/9a2b42ab-bee7-3c41-9f6b-dc85b5c3ca1e.roa
File:                     9a2b42ab-bee7-3c41-9f6b-dc85b5c3ca1e.roa (raw, json)
Hash identifier:          hp1BhOXjZY65TDJkGnU4wKSkx8QrXzOH9HiWAi1kAwk=
Subject key identifier:   AA:4B:5D:CC:A7:8E:4A:F3:C5:90:35:3F:73:C7:DC:ED:DF:B3:A2:CA
Certificate issuer:       /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
Certificate serial:       010D0C9F4328584F4987748F335E6D935CA9A880
Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/9a2b42ab-bee7-3c41-9f6b-dc85b5c3ca1e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16851
IP address blocks:        209.94.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:74:8f:33:5e:6d:93:5c:a9:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6ea4c4a8-d688-4de4-82a4-e43c745869a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:88:3c:e0:da:63:3c:94:41:70:a9:33:7d:
                    98:30:14:39:0a:05:9e:b5:ce:da:39:75:e2:50:e6:
                    df:d6:76:14:6b:d9:b5:21:b7:5e:28:85:b4:e4:1d:
                    5d:b1:43:bd:cc:16:dc:ba:87:ef:65:9d:f1:44:d1:
                    49:e9:e8:7b:b1:7d:60:b0:b5:fe:9a:48:a1:c4:45:
                    f1:53:8c:09:db:22:0c:a8:b7:e0:e7:79:07:cc:83:
                    70:77:3e:68:ec:4a:ef:f0:da:29:90:4d:cf:eb:4c:
                    f3:54:07:c1:87:8a:8d:10:c2:26:ad:ca:09:40:dc:
                    43:bf:a5:92:aa:26:51:48:70:77:f4:18:d3:7c:19:
                    6d:85:0f:5f:4f:7f:d7:2c:95:af:d4:c8:b1:00:d7:
                    2a:d6:6e:18:c0:84:46:8f:47:b4:80:8f:f4:0e:2e:
                    a2:a4:71:6c:84:b4:79:d8:38:93:7b:25:5d:91:53:
                    57:60:53:04:6b:94:ff:de:bc:a2:f6:a9:c4:04:85:
                    71:80:67:28:54:a3:e9:62:70:b4:ae:5b:50:78:9d:
                    2a:90:b7:4f:cd:7c:26:a7:91:a3:6b:02:23:4c:97:
                    5d:88:69:98:b8:d4:2a:57:bd:b3:d3:62:d7:63:d3:
                    49:f4:6a:12:a7:42:02:71:e2:8d:a4:21:79:e9:5c:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4B:5D:CC:A7:8E:4A:F3:C5:90:35:3F:73:C7:DC:ED:DF:B3:A2:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/9a2b42ab-bee7-3c41-9f6b-dc85b5c3ca1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl

            X509v3 Authority Key Identifier:
                keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:b9:e0:06:da:f8:06:c3:4d:72:0c:a0:cf:ec:e3:0d:be:
         0d:78:64:8c:ed:dc:82:e3:a3:85:2b:2f:8a:93:74:02:5c:b1:
         3f:fe:c6:30:36:67:b5:53:b6:40:f9:c7:f6:da:da:f6:03:5d:
         a9:8e:09:e5:8b:26:e2:b3:0a:68:6c:fd:56:05:ca:0f:55:a1:
         de:fa:f6:da:78:cd:fd:77:ec:35:6c:1f:34:b5:65:ff:a0:6c:
         a4:e0:04:44:b3:02:e8:cb:04:b6:72:8d:0a:1b:db:be:1a:09:
         38:2a:a0:7f:86:d4:24:0a:1e:14:9b:fb:80:1a:67:34:a0:98:
         8c:ab:27:ec:ee:d3:ca:bb:ec:fb:ff:14:4b:f7:0b:b8:ac:70:
         48:be:f8:11:23:46:98:05:b5:08:9f:38:13:05:b2:c2:04:3f:
         fd:02:54:65:b6:5b:69:51:e8:ab:13:e1:4e:a0:75:02:87:d6:
         18:0f:0c:f2:9e:7c:86:a4:47:e0:71:fc:a1:b3:f8:f1:64:ba:
         d7:a1:15:26:d5:be:fa:62:31:38:fe:47:68:95:e8:8d:ae:10:
         f7:a9:93:11:20:1d:d0:8c:7e:c3:b7:b6:18:78:eb:fd:44:e8:
         85:a8:04:56:c6:6e:4a:1e:8c:c6:9f:09:63:6b:43:79:ff:e3:
         56:0c:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:23 2026 by rpki-client