Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/92817a59-1c48-332f-b5a0-b7764ab2c364.roa
File:                     92817a59-1c48-332f-b5a0-b7764ab2c364.roa (raw, json)
Hash identifier:          oJck1wHIySdyRkdIhr8m1nPQt7GlQrfTDHZr/86IQsk=
Subject key identifier:   51:D2:C6:3D:04:9D:9D:EE:2C:B5:C3:8D:96:8B:79:39:76:3A:04:43
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584D71A5251261F7A55518257900
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/92817a59-1c48-332f-b5a0-b7764ab2c364.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     271
IP address blocks:        206.12.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:25:12:61:f7:a5:55:18:25:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=c615fb64-ee64-40b8-adf5-b45b99262be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:fe:7c:a7:43:c2:0d:b4:34:14:b3:11:4d:
                    87:e1:56:0f:b5:1f:f3:ba:2e:a9:05:78:7c:ec:92:
                    28:b9:cd:be:d0:5e:8d:6b:4f:94:ed:3f:b9:14:fc:
                    90:bd:44:57:e7:df:b8:50:69:6d:6d:c2:a2:ea:c1:
                    e6:68:60:6d:34:68:78:80:be:77:6c:8c:e5:80:92:
                    54:13:94:5d:76:0c:d4:70:6b:cc:b6:37:77:16:0b:
                    aa:80:ec:51:98:0c:80:d7:58:df:dd:85:ae:84:15:
                    b2:80:21:0f:97:b0:68:67:2d:6f:89:5b:98:dd:ef:
                    4a:43:a1:dd:46:75:8e:35:ec:95:49:2e:da:f1:4e:
                    fc:e1:bc:e5:e3:13:67:6e:36:8c:c5:54:a3:d8:0a:
                    9a:c3:fd:08:f1:0f:6a:94:41:bf:49:60:c6:71:f2:
                    a2:8c:d9:40:ef:15:2a:0a:75:12:0b:e8:31:7a:ef:
                    b6:75:04:f1:c6:0f:55:4f:ca:e0:ba:ff:6f:58:52:
                    8a:1c:01:40:a3:78:8a:92:87:a1:fd:b4:4e:48:55:
                    6e:32:b4:32:5a:cf:94:db:68:7c:4d:e1:36:2d:d0:
                    6b:1d:cb:e4:1b:03:a3:3b:83:b4:c5:98:8c:3e:a6:
                    b7:e5:30:ea:db:5e:d2:fe:93:c2:c6:2e:aa:af:14:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D2:C6:3D:04:9D:9D:EE:2C:B5:C3:8D:96:8B:79:39:76:3A:04:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/92817a59-1c48-332f-b5a0-b7764ab2c364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:b3:f7:15:bd:db:85:da:cd:93:c7:d1:a5:e6:5c:be:3f:
         c8:ac:56:d3:c3:4f:ff:63:30:95:8f:84:47:d8:8b:94:a7:f4:
         9d:1d:01:88:85:c6:b6:74:65:40:5f:93:28:98:2d:cb:50:79:
         be:9d:79:9d:79:5c:e1:33:2d:e7:1e:55:70:31:bb:8f:69:25:
         70:9a:50:98:51:41:54:99:1b:9e:06:e4:ba:70:05:99:3d:dc:
         8f:9e:dc:f1:f3:e7:85:05:b8:ca:aa:af:e4:ae:56:f4:7f:6c:
         ca:58:fb:ae:8e:ec:ee:57:59:67:70:e3:7c:ad:06:6f:7a:55:
         59:5e:5f:22:83:51:9e:8e:90:56:8d:23:0b:38:b4:d5:1e:49:
         07:fa:ac:1d:00:9e:0b:d7:11:d8:e7:50:76:2f:c7:b6:60:2e:
         84:dc:1c:c9:c7:26:e9:a4:2f:fa:a5:9c:4b:b3:03:e1:65:dc:
         5a:61:bc:5e:b0:bf:4d:62:8e:35:a8:eb:d5:e5:9b:6d:e3:a6:
         54:f9:ca:93:c1:d6:51:cc:0f:fb:03:9b:31:76:08:1b:80:18:
         13:bc:35:7a:d3:d1:7e:50:71:af:01:37:b9:99:12:52:bd:0f:
         12:e7:e0:26:cb:5b:72:27:80:ca:89:6c:03:43:d7:1a:1f:30:
         2d:bb:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:00 2026 by rpki-client