Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/467aa121-b602-3377-a9a2-c9d47cd14a83.roa
File:                     467aa121-b602-3377-a9a2-c9d47cd14a83.roa (raw, json)
Hash identifier:          sYqOMkE4iNkDrAWhcRFTL0I7fqqn6dvPBdrYM/OTn30=
Subject key identifier:   62:DC:27:3B:04:3C:AD:E3:70:E7:51:E9:C4:FA:04:ED:38:87:FA:A7
Certificate issuer:       /CN=24be1fd9-9c64-4c2e-bbee-069ffff5ec0e
Certificate serial:       010D0C9F4328584EE7BCAEF5FF3AA21FE9F05C80
Authority key identifier: F9:FC:26:4C:13:4E:86:C9:03:1A:A6:09:FC:FB:24:77:77:E9:5F:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/467aa121-b602-3377-a9a2-c9d47cd14a83.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        172.83.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ae:f5:ff:3a:a2:1f:e9:f0:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24be1fd9-9c64-4c2e-bbee-069ffff5ec0e
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=5b3e2a47-3beb-4058-afa8-8282c3544c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:b6:42:e6:41:49:ec:c9:d5:8f:07:a9:aa:
                    10:7a:3b:30:8d:c4:dc:16:99:fb:c1:55:04:4d:cd:
                    f9:55:fe:3b:ab:cd:da:71:2c:4c:11:47:5d:6f:86:
                    28:57:57:6d:61:2c:f7:0a:70:a8:74:15:63:58:90:
                    f1:b0:ff:7d:ae:5b:b4:3c:f6:fe:0a:fa:b9:c0:6b:
                    ad:f7:38:a4:0a:d2:e0:b2:e0:cf:5b:19:e5:22:7f:
                    f6:58:ed:29:9d:9e:9a:07:81:dd:32:ca:e2:f1:97:
                    94:20:7d:12:97:3b:02:ed:b1:19:9d:da:4f:b8:1b:
                    b6:3f:69:7f:d6:dd:18:1f:bb:4b:cc:71:a6:b1:1a:
                    be:55:68:78:3b:62:de:39:d2:d6:2e:88:ae:ea:28:
                    7c:e3:6b:b1:c6:91:d1:2f:ac:f5:4b:47:a3:cf:f4:
                    40:5c:fa:03:4a:2f:46:f8:b2:18:5a:32:e8:90:51:
                    1b:de:a7:d4:ba:f3:a6:53:ef:ed:36:26:1b:dc:7a:
                    37:c2:4c:39:9a:f8:cf:7f:21:31:86:53:50:b2:56:
                    73:67:e5:b9:f3:5d:1d:5e:04:11:2c:c8:e4:dd:d1:
                    b9:44:b4:6f:cb:15:22:3e:d9:67:79:2e:d5:63:6b:
                    f4:bf:89:c2:1c:4f:e9:91:b3:6f:f7:bb:82:1f:9d:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DC:27:3B:04:3C:AD:E3:70:E7:51:E9:C4:FA:04:ED:38:87:FA:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/467aa121-b602-3377-a9a2-c9d47cd14a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FC:26:4C:13:4E:86:C9:03:1A:A6:09:FC:FB:24:77:77:E9:5F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/24be1fd9-9c64-4c2e-bbee-069ffff5ec0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5a:e7:80:94:e0:42:2e:52:d9:7e:df:c2:b0:11:78:06:06:
         7a:44:66:55:c1:a3:2a:6e:1e:78:97:5c:6f:1e:26:a7:79:4e:
         dd:96:41:05:e1:9d:73:0e:28:66:37:0b:96:0a:13:79:c4:12:
         1d:9c:c1:78:01:34:cd:50:3b:4f:32:0c:55:4c:0a:9c:eb:38:
         37:5e:d6:c9:74:e7:81:c9:de:93:1e:bd:d3:13:cd:b7:ee:8e:
         7d:44:d1:16:1d:f0:00:84:4a:09:d7:a4:30:a4:28:9b:09:53:
         7a:86:24:2a:5a:f1:8f:a5:f0:07:f4:96:01:e8:0e:43:ce:fa:
         35:ac:0a:79:32:88:a2:56:8e:c8:09:ae:34:d9:40:f9:2c:2a:
         cd:d9:8a:fa:52:e5:c5:17:fe:94:d6:1b:24:89:64:16:94:70:
         1c:ec:51:39:97:b3:f0:b4:7b:03:f8:46:2a:3c:41:3c:03:81:
         44:32:36:69:8e:e6:89:e4:65:8d:c8:0d:59:58:96:69:42:93:
         49:65:69:3f:9f:74:61:f6:30:33:e8:95:25:90:84:84:22:78:
         29:1b:27:5e:bc:39:6b:e3:c1:40:f9:fe:90:81:96:92:af:c5:
         92:14:1b:73:3c:44:0a:00:86:4d:2d:4c:29:c8:f8:34:10:17:
         89:9f:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:58:25 2026 by rpki-client