Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/00a93dfd-55f3-3959-a641-9807f5662430.roa
File:                     00a93dfd-55f3-3959-a641-9807f5662430.roa (raw, json)
Hash identifier:          OpaZYaSQM1/SoyGQ7FMrS6PeWM1DziotSJDDN5sNdhI=
Subject key identifier:   63:7E:A2:20:91:2E:C0:02:4B:C0:1D:7D:83:95:B8:86:32:3E:14:0F
Certificate issuer:       /CN=86203c54-64ec-4eb5-83b1-fe00dfa4f2fb
Certificate serial:       010D0C9F4328584F45428340DB6113BEFBA112C0
Authority key identifier: 9E:E0:9E:D9:21:71:C0:83:30:75:CA:BE:BB:84:A2:A6:A7:5E:F1:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/00a93dfd-55f3-3959-a641-9807f5662430.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     399266
IP address blocks:        209.177.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:83:40:db:61:13:be:fb:a1:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86203c54-64ec-4eb5-83b1-fe00dfa4f2fb
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=a382a4bf-08cf-4107-8d48-b5f8ae6334b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:57:4e:83:fc:8f:d0:d9:05:43:12:bf:62:
                    95:7c:9f:06:89:e0:24:93:34:c6:43:5d:6c:27:1a:
                    58:ed:86:a9:09:85:ee:90:cd:cf:ad:b1:4f:6b:02:
                    0d:1e:97:0f:ec:bc:34:fb:b2:61:48:dd:4c:e7:a2:
                    4d:27:8b:39:4a:6c:60:63:3f:22:7c:24:fe:29:dc:
                    76:b4:8c:25:f0:cb:7a:2e:d2:be:65:fe:f0:71:77:
                    ba:da:5f:0f:c0:aa:14:be:a3:90:45:fc:5a:59:fa:
                    78:be:38:65:5e:e6:55:bb:d2:aa:dd:1f:e6:59:fd:
                    b2:aa:97:58:1f:da:8e:6e:8e:c3:83:46:a9:a1:1f:
                    44:fe:d3:3e:c2:eb:3a:71:8e:37:5e:08:08:6e:a8:
                    38:c6:bc:f4:db:80:18:7d:90:7f:34:89:0a:68:e0:
                    b1:89:61:70:a1:ef:cc:4d:22:8f:63:e4:79:e6:04:
                    94:1a:ee:00:db:30:26:9e:ca:89:0e:97:f0:da:6b:
                    58:e8:0f:98:ea:12:a9:52:e5:fa:7e:77:80:d5:6a:
                    d1:d2:b6:02:41:13:5a:fa:04:40:49:ad:87:78:59:
                    35:fc:56:e3:56:e3:69:27:0d:fb:62:2a:97:32:32:
                    f0:18:60:47:65:9c:85:8c:10:48:26:db:6e:33:7c:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7E:A2:20:91:2E:C0:02:4B:C0:1D:7D:83:95:B8:86:32:3E:14:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/00a93dfd-55f3-3959-a641-9807f5662430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.crl

            X509v3 Authority Key Identifier:
                keyid:9E:E0:9E:D9:21:71:C0:83:30:75:CA:BE:BB:84:A2:A6:A7:5E:F1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.177.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:27:4f:73:4f:c3:89:8f:a4:39:88:20:25:3b:76:fb:b7:
         39:16:8a:45:bd:d0:68:6a:5d:fc:5e:82:dc:5c:f4:d1:d3:4e:
         0a:5e:c9:96:64:65:d8:2b:e7:fb:15:1d:e7:d5:f5:81:98:66:
         5a:0a:43:ee:9d:89:7a:82:87:14:43:2d:10:25:bf:f6:ba:8a:
         da:8b:5c:cc:3e:2e:b9:27:2c:d6:54:6b:1a:63:c7:3a:2c:2a:
         94:c0:a4:28:db:46:7e:87:6d:ab:46:a8:62:b6:52:dd:6d:d5:
         1d:04:e1:e4:a9:0a:7e:10:ff:c0:ad:09:46:12:63:d4:73:51:
         df:b8:9a:53:e1:f9:22:97:37:5e:1e:f8:73:b6:e5:ee:f9:ea:
         0f:1b:8e:cb:2e:d5:0e:3f:1a:01:b3:a2:94:55:1a:57:f2:bf:
         74:0f:eb:34:2c:d6:fa:69:6d:ef:4b:0f:b2:ca:90:97:8d:ff:
         c3:5c:c4:f9:bb:97:6a:1a:6e:35:91:a5:4c:7a:8f:6e:ee:26:
         0e:ad:f6:5e:0c:33:e9:ff:49:65:d5:b6:8a:3a:02:59:4d:dc:
         a3:90:5a:3f:6c:c0:db:f2:87:8d:f5:76:2a:b7:a3:23:27:6b:
         fd:43:7a:40:96:f6:d9:81:28:ce:42:d3:c8:22:c9:1b:2a:b4:
         9b:25:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:22:52 2026 by rpki-client