Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa
File:                     e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa (raw, json)
Hash identifier:          dKEv55vnP3JtsnvBO3CCeZBUa0P8KXJBqKIou8v82jY=
Subject key identifier:   78:EE:3A:9C:EE:51:91:BF:39:7D:84:B2:A2:25:74:72:26:81:CD:56
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584F2ABD2069B8ECBF9A4D440580
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     11248
IP address blocks:        204.8.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:20:69:b8:ec:bf:9a:4d:44:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=0513d93d-eb69-4416-acbe-cc45e20e958c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:bd:c8:94:a8:fc:db:03:b1:72:c3:6c:54:
                    84:0d:69:23:0e:24:ee:6a:83:d0:f1:6a:8c:7a:40:
                    88:96:77:35:b6:99:50:c3:12:3b:59:7b:ed:57:69:
                    52:99:f8:ac:4a:ba:28:35:c3:3e:d0:6d:16:c7:1f:
                    82:da:42:5f:13:6b:b4:78:ca:35:c5:f0:d0:e3:30:
                    0a:15:bd:4e:07:c8:2e:fe:50:3d:0a:c4:8d:7e:a5:
                    89:34:75:ef:2d:b1:b9:08:20:30:6f:13:3b:3f:8b:
                    0c:23:e9:c6:0a:ac:25:55:68:db:39:44:fb:49:84:
                    b4:00:9a:c4:56:07:6a:48:9a:10:2c:0e:f6:e0:d1:
                    69:ad:bf:8d:73:ad:a9:d4:cc:f2:19:ac:09:e0:a0:
                    dc:6d:cd:7b:4a:f9:a1:40:f5:e6:44:61:a4:e2:02:
                    13:fd:93:ff:8a:ba:2b:ca:9d:5c:17:12:14:60:e6:
                    dd:1d:99:5b:27:97:94:78:d4:34:cb:40:a2:93:5b:
                    91:ac:f8:31:de:d4:f2:37:37:9a:63:67:30:5a:d4:
                    8a:36:dc:5b:ce:22:4b:8a:ba:c3:0b:c6:78:4b:f9:
                    89:3a:db:a9:b8:4f:87:bf:ca:34:0d:8c:4a:ea:26:
                    e5:67:78:39:92:15:a7:4c:e7:16:2e:96:02:86:bc:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EE:3A:9C:EE:51:91:BF:39:7D:84:B2:A2:25:74:72:26:81:CD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:66:99:bf:6a:6f:dc:c1:9f:ab:bc:7b:4f:26:71:30:ed:
         ba:4d:79:39:5a:d6:35:cc:26:a4:c5:71:56:0e:66:4b:5c:d6:
         63:5c:95:2f:c3:29:c2:bf:22:e6:9d:ed:af:fe:1e:71:df:6b:
         39:22:86:cf:90:63:a1:6f:3b:90:c4:2a:ea:a1:a3:46:07:f4:
         88:be:62:da:05:4a:4e:8d:35:70:11:26:73:37:f0:46:c5:9c:
         cf:e8:96:49:dc:f0:80:e2:7e:83:21:ba:ea:2c:34:d8:d2:ff:
         20:f3:a4:43:1d:72:f8:60:ad:74:34:dd:bf:d3:93:45:c5:81:
         13:53:95:4e:62:c6:16:4d:7a:1b:4e:bb:b3:b8:1c:e9:0e:78:
         8c:7d:cc:a9:9a:93:b0:41:c2:56:a1:05:ce:e3:9e:17:f1:68:
         c1:d4:a1:3c:7f:02:e2:a7:d6:15:be:fc:10:9a:f2:5c:5e:4c:
         14:e7:cf:6e:db:9f:78:e9:f3:10:bb:6d:50:c3:82:32:07:8c:
         25:a2:40:c4:63:bb:15:86:b7:69:53:f7:4f:ce:a0:fa:2f:68:
         43:b1:47:de:23:71:b1:0d:bc:80:77:d7:e5:c8:a4:9f:8a:05:
         91:93:ac:33:a1:52:5b:68:59:66:22:96:b2:9f:51:96:36:f9:
         7c:80:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:06:30 2026 by rpki-client