Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/788d5278-3896-3f0c-ae6d-497ecb333ffd.roa
File:                     788d5278-3896-3f0c-ae6d-497ecb333ffd.roa (raw, json)
Hash identifier:          IGC/07uCfLIYGHSAYBYT6IFcEWQJhaGfIadPuWr8ITQ=
Subject key identifier:   1A:C4:41:01:E0:15:3B:8F:B6:44:E3:47:5E:B4:4A:00:84:3F:2C:D6
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584F3B7D1FBC89FF48955FA84880
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/788d5278-3896-3f0c-ae6d-497ecb333ffd.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     398391
IP address blocks:        64.227.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:1f:bc:89:ff:48:95:5f:a8:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=15d9dc70-0ad8-4506-86cb-a8a57cd9a134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:26:64:0c:bc:0a:fd:4c:3f:86:04:98:c8:
                    df:41:17:23:4c:35:03:a0:bf:85:07:c3:54:a6:48:
                    ec:ce:78:22:cf:cb:d6:51:60:13:10:a1:50:9a:fa:
                    69:6d:e5:f6:a0:51:ae:14:e4:6b:8a:e0:00:7d:e1:
                    65:fb:c8:d4:a7:75:f6:8a:16:92:62:41:17:48:cf:
                    f5:d8:09:c9:c4:d7:59:6c:23:f4:52:43:4c:0d:11:
                    15:bf:5d:3f:94:86:6d:69:57:dd:44:62:a8:5d:a0:
                    c5:cd:d5:01:ed:5a:9c:47:61:da:70:17:7e:79:db:
                    a6:b4:d2:6f:dd:f7:1b:e1:2e:90:21:d6:81:dd:16:
                    81:3f:8d:77:81:0e:57:a2:9a:5b:51:98:16:dc:33:
                    24:26:e2:a7:7b:3d:e0:d5:50:2e:d7:11:a9:17:af:
                    6f:ae:49:76:db:c8:1d:ff:71:36:54:61:c9:a3:05:
                    2e:d2:94:72:d1:13:65:58:fd:f5:32:07:4c:8d:4a:
                    c9:a3:70:73:01:17:c0:6c:c7:37:c2:02:06:09:4d:
                    24:94:f1:3b:da:2e:f5:2c:1d:59:31:97:57:d7:d8:
                    30:1d:c2:74:17:ea:b8:6d:64:98:15:26:9e:89:cb:
                    3d:17:24:a3:d4:ae:c2:80:40:11:7a:91:87:6f:a8:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C4:41:01:E0:15:3B:8F:B6:44:E3:47:5E:B4:4A:00:84:3F:2C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/788d5278-3896-3f0c-ae6d-497ecb333ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:d3:e1:2f:cb:da:39:e1:3d:3e:53:10:37:4e:98:a8:4c:
         02:20:18:f6:7f:7d:4b:1d:1c:7a:30:90:e5:c3:a1:09:ef:c6:
         c9:cb:08:d3:c9:07:f2:8e:f5:09:5d:19:93:0e:aa:95:97:6b:
         80:ec:43:4a:c7:0d:ea:44:64:23:30:f8:60:09:d3:bf:b4:7e:
         4e:ca:a1:00:88:0f:02:ad:65:57:32:be:c8:9d:c8:f4:d6:da:
         62:78:04:ce:3c:e8:ca:a8:15:bd:33:d7:64:3a:c6:2c:df:74:
         69:b0:d2:78:df:94:11:f0:53:99:ad:7e:86:8b:87:6c:ce:ac:
         82:5b:79:83:d4:49:dd:d5:6d:73:a7:a8:e5:17:cd:4f:11:a6:
         9c:ef:95:57:10:6a:8f:64:50:29:58:7d:d9:c4:d0:2a:fe:5b:
         d9:a7:53:ee:98:4c:85:08:e8:40:9d:aa:11:76:34:75:78:6e:
         c4:7a:dd:08:3b:3e:80:7f:e9:e8:55:dd:93:7b:49:5a:50:89:
         99:1e:db:a0:dc:9d:15:7a:30:f0:e2:48:cc:4b:b9:bc:6c:c4:
         89:d7:94:d7:b5:1c:e7:3a:40:f9:13:4c:f8:29:0d:dc:fa:f7:
         1c:11:e1:4d:56:e0:cb:7b:98:7a:43:0c:33:20:b3:7b:09:d0:
         88:ad:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:36:29 2026 by rpki-client