Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa
File:                     24b85252-04e1-3fd2-b188-843b7481b99e.roa (raw, json)
Hash identifier:          TD0uBuP9XDvqv6NcoLN4twyuQdvjH2LsnvYSx30ifus=
Subject key identifier:   27:4D:CB:93:30:76:38:BE:EA:A8:B0:F1:4F:77:9D:2B:EF:50:70:7B
Certificate issuer:       /CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc
Certificate serial:       010D0C9F4328584F2D87B00C2C2B937A26A38500
Authority key identifier: 60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     402127
IP address blocks:        199.245.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b0:0c:2c:2b:93:7a:26:a3:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=cfd897bb-0990-474a-85ab-8bd64809ef34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:92:35:fb:78:c7:81:c8:40:dd:e4:e0:05:
                    7d:35:cb:7a:81:2a:c9:e5:1b:94:48:9d:2b:d9:3f:
                    2d:54:6e:f9:10:37:26:cf:13:11:83:a1:17:03:f1:
                    70:3e:85:1d:86:e4:bf:28:91:03:32:11:67:ff:d9:
                    e3:dd:c3:5d:22:f1:f1:e4:8e:2c:22:a9:22:90:bd:
                    13:a5:72:81:67:87:10:69:a7:c2:33:29:38:af:e2:
                    7d:5f:a0:c3:61:fb:32:aa:7f:ba:dd:44:5c:9f:cd:
                    6c:8a:d6:ae:bf:c3:7f:04:17:9e:58:03:66:d1:34:
                    02:12:5f:43:6e:a1:72:38:5d:f3:df:1b:2f:24:98:
                    14:ed:43:ca:10:04:7c:cc:56:31:26:af:06:b6:7e:
                    08:7e:23:dd:a0:88:27:f1:79:4b:b7:4a:ce:8a:35:
                    bc:43:e7:53:b1:0a:35:81:2b:01:6f:5a:19:fa:79:
                    70:d7:68:4e:54:23:fc:68:2d:b7:bf:01:b9:22:55:
                    90:bc:38:a1:37:9e:d9:96:2a:c0:2b:a0:f4:26:85:
                    e9:c3:0c:dd:8f:2f:a0:9b:43:71:e5:16:c8:8f:2f:
                    db:ea:cf:11:14:12:82:90:05:4a:b7:d7:53:9b:2e:
                    f6:26:47:c0:e7:03:ab:ae:ed:02:65:01:ec:95:5a:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:CB:93:30:76:38:BE:EA:A8:B0:F1:4F:77:9D:2B:EF:50:70:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.crl

            X509v3 Authority Key Identifier:
                keyid:60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:92:9e:b8:60:86:5e:64:a5:c5:d0:95:1d:d8:49:a9:90:
         df:0b:89:18:41:4c:3f:72:ff:71:a5:d8:30:96:ce:99:fa:aa:
         ca:f3:84:82:53:ad:6d:89:2f:38:d5:1e:6c:2a:d5:9a:59:5c:
         6a:c0:c6:91:62:ed:6a:88:60:e8:fc:cf:55:c2:6f:5a:ad:fd:
         96:95:14:66:5f:66:f6:7b:13:05:b8:54:a4:ae:e2:4c:73:fb:
         44:f8:35:f0:fb:e8:4e:13:df:1e:96:e6:a2:13:64:43:3d:59:
         dd:05:d5:2f:55:1a:fb:05:e7:da:a3:eb:c9:27:25:14:68:00:
         a9:cb:ab:56:c9:07:57:98:54:10:c7:d2:f7:a7:a6:2d:4d:4a:
         65:87:1e:81:e6:e9:61:af:0e:f1:35:27:eb:f2:e4:61:24:5a:
         a1:1a:35:79:b7:df:af:3c:f4:89:d1:2a:04:0d:21:68:5a:13:
         62:56:15:ee:a5:43:05:d6:ff:07:8c:c5:e1:f2:46:82:35:b6:
         13:12:dd:d7:49:25:13:17:22:72:64:40:d9:09:3d:25:07:6b:
         03:cf:93:ef:4d:83:ee:08:71:17:eb:c8:0d:81:d9:3f:6f:15:
         34:46:84:e9:cb:27:f1:47:2e:48:39:cf:65:82:db:09:80:53:
         63:9a:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:27:30 2026 by rpki-client