Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa
File:                     ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa (raw, json)
Hash identifier:          qbzQ3hTMrEv37iJwNocc3t+neq/1xfKqXU0YlW8vnaM=
Subject key identifier:   BC:D4:82:CA:F7:FF:FF:36:5D:56:D1:2B:B4:A0:20:B2:C7:6B:3A:8C
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584F3A17D353CA9328D298683380
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     4540
IP address blocks:        204.8.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d3:53:ca:93:28:d2:98:68:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=6b4a41af-c008-41b7-b922-00ff3a78e36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:c7:72:63:5d:b5:ed:b4:5a:63:ab:e5:c2:
                    22:d5:9b:31:95:1e:db:39:9a:71:d1:44:4c:cd:14:
                    94:64:68:45:11:55:2b:c4:82:dd:8e:13:57:7b:ae:
                    cf:a9:f5:1c:25:a4:7b:b5:9d:05:c3:f1:dc:61:25:
                    67:76:b8:dc:83:49:d9:a2:8c:c6:45:82:83:12:3c:
                    aa:4d:3b:c6:d6:57:f1:2c:9b:02:73:89:fb:3a:af:
                    ca:e7:86:c7:01:63:ae:3f:98:78:85:d6:e3:04:78:
                    74:bf:fd:b4:5f:e0:6a:a9:54:dd:b4:f5:ca:6d:00:
                    c6:13:8c:a5:02:55:f1:df:c8:bd:be:df:93:06:00:
                    45:e2:5c:ea:82:57:29:0d:e0:2b:ab:50:6d:55:e7:
                    68:84:62:b6:f2:5b:17:c3:be:ec:c1:c8:23:bd:94:
                    a0:1e:0f:ea:b1:75:02:91:a6:ec:54:70:b9:f3:37:
                    57:9a:a0:7b:91:a0:b1:17:ea:ed:bc:4c:d1:51:03:
                    79:4b:ba:56:57:9b:97:82:84:82:4c:7b:c2:71:3c:
                    ea:55:71:6f:f4:7d:b7:73:a3:29:d4:06:94:79:7c:
                    9a:cf:13:2b:63:c9:72:88:1c:59:db:1b:0d:d7:e4:
                    a8:2c:c3:3a:28:98:60:41:e9:9e:3e:62:ba:7b:49:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D4:82:CA:F7:FF:FF:36:5D:56:D1:2B:B4:A0:20:B2:C7:6B:3A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ccee52f9-5da8-364e-b6fb-6c8d09d63930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:80:9f:9d:cb:48:2b:1a:41:17:61:32:25:a6:da:25:67:18:
         b5:7c:2e:72:28:0d:74:9d:59:b6:87:f1:2b:de:eb:41:85:50:
         b5:3e:2c:cc:06:80:c9:0a:9e:7a:ce:50:e6:a1:35:0d:e7:12:
         57:8e:86:50:5d:7f:19:8b:70:9c:f7:6a:b1:fd:c4:85:b2:21:
         5a:e9:b2:aa:34:81:17:11:3b:c4:75:28:69:d0:1f:97:ff:63:
         04:6a:a2:71:02:96:d7:eb:95:4e:d8:45:9e:f9:e8:ea:cb:2c:
         dd:de:0b:cb:3f:ec:3e:3d:a7:e0:2f:88:9f:c8:c9:1d:f8:b0:
         9f:c5:81:c2:bb:8a:a9:2f:cd:00:28:94:9d:1f:6a:fd:20:eb:
         e4:45:ad:f7:6c:ad:29:6c:6a:e6:7b:5f:f6:de:09:a2:ed:01:
         0d:b4:8b:15:c7:95:ef:e2:ce:26:c1:f3:18:32:11:0f:ca:09:
         d3:04:02:49:ba:73:ce:52:1d:3e:b7:24:16:42:ec:96:ec:96:
         8f:3e:fd:dd:80:41:cc:40:49:0c:d2:33:30:b0:78:31:e4:2e:
         19:8d:bc:8a:d2:df:f5:cf:ab:48:0a:cc:f1:f4:22:5e:85:01:
         99:04:4b:a3:97:01:9f:4c:aa:7c:87:97:96:37:42:ad:88:41:
         c3:2a:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:06:31 2026 by rpki-client