Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa
File:                     6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa (raw, json)
Hash identifier:          SmXhFpyKV78/tTR8OXXFUoBwtAnjPYgoEaYEaj+kHjg=
Subject key identifier:   02:45:ED:3B:4E:81:39:A1:14:4B:26:C5:3D:54:8C:94:64:21:18:5D
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584F2ABD202222BD9CEB73EA5760
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     11248
IP address blocks:        204.8.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:20:22:22:bd:9c:eb:73:ea:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=79107abd-8b50-42ae-b514-18475983841c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:bd:37:8a:4a:80:9d:31:ce:2b:34:22:fa:
                    ee:59:f3:9c:ea:5f:66:be:c3:06:84:a3:25:b4:d2:
                    0e:f3:c5:18:20:32:9c:71:6a:0c:6c:f6:de:5b:d6:
                    78:cf:d2:19:4e:ef:5c:32:31:66:17:c8:c4:cc:bd:
                    df:c9:bf:29:28:9b:ae:6c:1c:93:2c:05:92:73:3d:
                    9d:3e:82:ae:f8:3a:cb:12:fa:a0:cd:dd:81:90:54:
                    6e:4d:20:45:85:6d:84:9d:3e:0b:99:13:b6:24:e5:
                    0c:42:26:e1:46:ce:79:16:2b:3b:d6:7c:0b:eb:0a:
                    57:ee:60:5a:7c:48:f4:08:15:9e:83:94:25:f6:43:
                    61:c3:b5:b2:f4:57:cb:9f:fe:a0:c7:b1:86:e3:32:
                    fc:f7:aa:e3:78:05:fc:22:c8:14:a3:28:ce:71:15:
                    84:30:e2:cb:c6:4e:9e:56:8b:2a:96:bf:00:b7:7d:
                    d2:38:4b:41:c2:10:3b:37:97:8f:14:19:c6:c1:d0:
                    d9:3a:77:8e:a6:ee:70:e8:14:a4:29:d3:3d:d7:b1:
                    51:e6:67:c4:a3:ea:ae:57:12:03:d6:f5:e3:c8:a4:
                    9c:5e:2d:02:ec:c1:6a:61:42:f5:55:84:ba:78:34:
                    98:0c:78:1a:d3:85:83:e4:f2:92:b6:10:6f:e9:82:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:45:ED:3B:4E:81:39:A1:14:4B:26:C5:3D:54:8C:94:64:21:18:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/6b0124d7-a777-3fc7-ba7a-063c7b588ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:2a:7a:1d:98:54:d2:d0:2d:93:a6:b5:02:59:43:c4:1a:
         18:28:90:97:44:24:52:f0:fb:00:33:87:56:80:00:58:82:5c:
         e0:3f:b9:7f:da:db:05:39:cf:96:02:0d:4b:0e:e9:b2:ef:ec:
         37:2c:12:97:91:0d:08:ac:b2:0e:2d:4d:73:2b:0b:51:14:e4:
         54:cc:93:57:d0:ca:27:59:92:a2:d3:63:10:39:ab:cd:56:44:
         fb:96:c7:de:1c:99:24:35:43:a0:40:41:c4:3f:c2:aa:77:0a:
         bd:74:86:10:cc:d0:ee:ab:30:f7:5f:90:36:3d:17:66:75:a8:
         b9:fa:0f:1f:27:4c:10:14:83:4c:16:37:0b:ef:3a:81:71:05:
         78:7d:c7:9d:8d:ea:de:fe:eb:8e:38:7b:cf:4f:a6:ba:d7:4e:
         31:88:8b:4a:2a:ae:da:50:0f:b8:2c:6c:e4:59:6c:33:74:e8:
         48:c6:5d:dc:84:77:c6:9c:66:74:fe:43:81:a0:33:b4:33:55:
         04:15:f4:86:52:c4:cb:f4:81:3a:7c:92:86:93:d4:53:bf:2c:
         c2:02:af:f3:ab:e3:ad:bd:f5:95:f4:c8:91:21:dd:27:ee:94:
         bb:8f:c2:81:3e:0a:ec:19:aa:15:95:c8:cb:a6:c0:f4:ff:48:
         da:82:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:53:35 2026 by rpki-client