Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333/e50ded2a-9e6b-356e-8595-728243d65326.roa
File:                     e50ded2a-9e6b-356e-8595-728243d65326.roa (raw, json)
Hash identifier:          ZbxfqpaQC7HLA1P+yLub0lLnyqm+YVIviTUXw/TMM54=
Subject key identifier:   88:0D:E4:78:E6:51:38:12:5C:49:2D:44:46:09:79:05:2F:DB:53:1C
Certificate issuer:       /CN=d8bc83fb-65f2-4994-8a73-dae732bfc333
Certificate serial:       010D0C9F4328584F268D0AC78FC2809D900D0B80
Authority key identifier: 1F:FA:18:AF:43:DD:52:54:9E:78:5A:3E:F9:66:BD:DC:B6:04:8C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333/e50ded2a-9e6b-356e-8595-728243d65326.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     13335
IP address blocks:        204.124.192.0/22 maxlen: 22
                          204.124.192.0/24 maxlen: 24
                          204.124.193.0/24 maxlen: 24
                          204.124.194.0/24 maxlen: 24
                          204.124.195.0/24 maxlen: 24
                          206.108.232.0/22 maxlen: 22
                          206.108.232.0/24 maxlen: 24
                          206.108.233.0/24 maxlen: 24
                          206.108.234.0/24 maxlen: 24
                          206.108.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333/d8bc83fb-65f2-4994-8a73-dae732bfc333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333/d8bc83fb-65f2-4994-8a73-dae732bfc333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:0a:c7:8f:c2:80:9d:90:0d:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8bc83fb-65f2-4994-8a73-dae732bfc333
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=b92df193-c73c-4e8e-ac1f-e7c9e5cc37c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:d0:d4:9e:39:7c:bc:4e:09:c7:63:01:1e:
                    a3:2f:a5:21:ad:17:c8:fb:1d:19:7b:82:cf:2c:e0:
                    93:97:c5:e4:e9:0d:30:11:d7:37:f8:22:bd:95:af:
                    dd:d9:52:80:75:ce:2a:ce:68:c0:fb:07:4f:da:c9:
                    1b:91:94:c3:af:b3:ce:d9:09:8b:75:23:56:06:d6:
                    74:62:0a:af:47:d2:2a:ab:6b:81:e9:7b:27:53:63:
                    37:b7:bd:6f:99:fd:d6:4e:16:7a:f1:92:c2:96:83:
                    88:34:4b:57:73:9a:de:15:d3:07:e7:34:78:59:70:
                    f5:74:15:80:e0:63:db:62:bf:07:e9:03:a4:0b:82:
                    d4:4c:58:90:ee:f7:95:62:2a:33:29:60:aa:49:de:
                    b8:64:33:1d:6f:98:b2:7b:65:f2:59:b8:0c:41:62:
                    3f:c3:43:ea:3c:97:c4:5d:be:4b:85:48:03:36:28:
                    bf:c8:54:c5:f9:43:62:5b:d1:7f:bb:f2:39:91:ba:
                    a3:18:79:ce:25:71:73:23:39:1b:35:6e:51:65:13:
                    57:94:95:21:57:5a:5f:9c:70:5a:d9:fc:52:0a:cf:
                    69:fa:62:c9:05:45:4c:86:c5:46:5c:d8:02:fb:30:
                    50:8b:fe:a7:02:72:92:8e:9e:68:52:b0:5e:23:45:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:E4:78:E6:51:38:12:5C:49:2D:44:46:09:79:05:2F:DB:53:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333/e50ded2a-9e6b-356e-8595-728243d65326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333/d8bc83fb-65f2-4994-8a73-dae732bfc333.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:18:AF:43:DD:52:54:9E:78:5A:3E:F9:66:BD:DC:B6:04:8C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d8bc83fb-65f2-4994-8a73-dae732bfc333.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.192.0/22
                  206.108.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:1f:44:25:ff:d6:1d:cc:0a:6f:e1:ad:db:ce:01:d0:6e:
         12:3b:5f:b1:d7:7a:10:dd:7b:65:35:ab:9e:62:ad:31:32:59:
         d2:41:36:28:af:cd:53:5c:72:1a:e1:0c:c5:a0:be:12:df:2f:
         ec:61:70:da:15:08:94:1f:78:37:c5:5f:71:05:ef:bd:39:97:
         ac:25:0c:73:e7:62:88:9b:fd:26:f6:f6:d6:d5:02:55:db:e1:
         f0:3a:3f:2d:54:bf:3d:78:cc:f1:b6:9d:7d:32:38:57:01:36:
         93:91:94:67:60:54:90:a3:93:0b:f8:ee:d3:38:d8:9f:4d:ac:
         2d:f3:83:77:06:39:7f:7e:c7:c9:b7:a0:9c:5e:cf:d1:42:b6:
         0c:5a:a7:4a:80:9b:65:d7:43:59:fa:cb:a7:61:dc:07:ed:de:
         20:60:54:f9:cf:db:cd:24:2a:a5:e4:81:b6:d7:fe:d0:81:57:
         51:e2:d3:73:ab:fc:ed:96:46:dd:b6:d5:7a:5f:76:a2:96:26:
         d0:ea:c7:7a:23:b1:d1:a0:b3:81:68:19:29:11:8f:e9:6e:ca:
         66:35:26:ad:1a:7a:ab:81:3a:5c:1d:13:a6:f2:40:ae:65:95:
         60:3d:c4:24:12:cf:7c:8f:86:1e:20:49:90:b1:64:1c:ed:19:
         30:4c:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:27:53 2026 by rpki-client