Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa
File:                     4847252c-0d24-3537-a84b-ad62cb2938b3.roa (raw, json)
Hash identifier:          PG8wGxuhI1Uy+k2mnRFGsRVZCaaMvXHPszkgwnXMRtk=
Subject key identifier:   52:63:37:E8:BD:CD:FF:EC:58:8D:73:A1:75:2D:B3:FE:D4:CC:0C:D4
Certificate issuer:       /CN=24c594b2-08c8-4864-afae-a607d79beb73
Certificate serial:       010D0C9F4328584F374D2E549A8AF6BA56ECD0D0
Authority key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     398178
IP address blocks:        138.43.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2e:54:9a:8a:f6:ba:56:ec:d0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c594b2-08c8-4864-afae-a607d79beb73
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=f1069315-9b51-48bf-8192-54838cddf679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:b6:95:78:df:42:16:ac:83:ec:d9:1d:2a:
                    fa:a4:67:17:24:33:13:26:fe:e3:2e:08:ed:a1:f2:
                    41:ee:48:2a:c2:3a:50:e3:eb:31:b6:26:a5:86:34:
                    a2:6d:fe:b5:b4:f1:ff:b4:c7:d9:0b:e7:8b:a5:cb:
                    d3:ce:d7:a0:ab:79:89:7c:d9:70:03:5d:77:5a:86:
                    63:83:c7:ec:cb:e6:85:4a:3a:43:05:ec:dc:f2:c5:
                    a0:ca:60:ba:94:28:7e:3b:70:af:9a:06:51:6f:5d:
                    93:66:56:d0:f1:39:da:c0:50:80:b3:d6:3b:92:8a:
                    d0:de:b1:56:5a:da:d3:19:f0:b8:9a:de:2c:7e:37:
                    30:4f:3f:74:1b:c2:d4:ee:1e:30:f3:60:6b:82:8a:
                    28:ed:c3:2a:61:d7:d2:07:9c:65:0d:b2:1d:1f:c5:
                    ea:3e:8d:e6:4e:ea:46:a2:1b:0b:c2:7b:94:59:31:
                    24:68:6a:80:59:85:6c:e4:d8:72:ac:a2:04:80:ed:
                    6f:c0:21:48:a3:fb:78:64:02:58:75:2a:e5:c4:1c:
                    56:2d:c7:7f:db:bc:4f:5c:d8:cd:dd:08:28:09:a8:
                    55:98:7a:bf:0e:bf:a5:49:63:fd:cc:d8:3c:ee:88:
                    d3:cc:db:d2:d3:4a:ef:98:18:bd:77:d1:26:08:c9:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:63:37:E8:BD:CD:FF:EC:58:8D:73:A1:75:2D:B3:FE:D4:CC:0C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl

            X509v3 Authority Key Identifier:
                keyid:82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:e2:5b:94:28:f4:60:10:28:85:c9:9c:34:bc:88:20:62:
         1d:f0:6c:f0:56:40:1c:c2:41:98:56:5c:d4:38:cf:44:5f:5e:
         2b:7d:cc:93:93:b4:08:ab:eb:e9:89:76:e6:81:b9:fe:9e:9a:
         c5:78:81:ad:5c:52:67:b7:5b:3a:17:f6:cb:60:53:ec:43:04:
         e4:7e:7d:b6:c4:e7:ca:eb:a9:5c:e3:17:91:b1:96:dd:6a:76:
         f8:f1:60:95:69:06:27:1a:d7:64:1a:12:6f:50:1e:4c:67:a4:
         eb:ec:3c:e5:e4:54:ff:7b:6c:92:59:1f:16:5f:cf:53:f5:f4:
         81:b9:c0:d0:f4:9a:77:01:01:cc:1f:10:2d:cd:d3:84:b0:d1:
         4e:31:53:69:0d:13:97:f2:93:3d:46:8b:7c:f6:06:c0:7a:41:
         12:aa:7d:35:bc:0f:cf:c8:20:53:82:ed:71:33:e1:6c:fd:6f:
         78:14:99:c8:7b:45:9d:33:4f:86:b1:4e:84:d1:a3:c4:18:95:
         48:b4:a8:95:bc:a1:ee:0a:39:fc:8d:ec:02:43:3d:d6:f7:86:
         e4:fd:fd:b6:d8:51:bc:9b:61:87:60:2e:34:7f:d4:0f:48:20:
         ab:07:0f:27:ec:3d:1f:c2:c0:ae:2c:92:55:91:00:f2:1f:30:
         6b:04:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:37:04 2026 by rpki-client