Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e7a8441b-6c21-38a7-bd41-683f5ce646a8.roa
File:                     e7a8441b-6c21-38a7-bd41-683f5ce646a8.roa (raw, json)
Hash identifier:          Gi20AE1CKp/xG342mAVdj2xri/XTHbx/bIE6p23AJlI=
Subject key identifier:   60:AB:00:8E:CE:B4:90:5D:AF:DF:B6:86:FE:65:8D:0B:CC:90:3F:33
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EFB4762FD4AF4179DD5FA0A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e7a8441b-6c21-38a7-bd41-683f5ce646a8.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        168.93.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:62:fd:4a:f4:17:9d:d5:fa:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=387e3a0c-ff83-4ba0-971e-fc9682721418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1c:db:5d:6c:8e:4f:00:35:77:d8:6c:02:ce:
                    56:31:8f:01:45:bc:98:db:56:44:01:cb:43:21:7f:
                    b7:30:34:87:97:97:34:d8:f8:13:d9:af:ee:a2:49:
                    5f:f9:0c:c1:62:87:87:ed:65:63:08:34:f2:6f:d3:
                    d3:e0:c6:c9:0a:6f:5b:66:44:ca:0b:8a:9e:35:0d:
                    bf:bf:5e:95:40:cd:92:ae:8a:e5:03:a5:7d:5e:58:
                    db:8b:af:37:0f:21:12:54:cb:70:47:b4:94:bb:02:
                    36:5d:2c:ca:e9:a0:75:e1:b7:8c:10:ba:93:a1:13:
                    ab:a8:26:60:a4:43:a5:44:d6:05:a3:6d:3c:c3:75:
                    7a:29:a7:28:d1:d3:e1:58:16:33:96:cc:55:97:57:
                    d4:73:d1:0d:93:dc:af:8f:90:a5:67:d9:9a:56:57:
                    14:eb:a2:58:14:8a:41:6d:00:e7:7e:9d:40:b3:1b:
                    1d:75:ae:e7:42:b7:04:83:17:7b:22:c9:cf:44:49:
                    68:6a:f1:2a:86:17:10:cf:68:48:23:98:b2:9a:b7:
                    bc:1a:87:30:6c:9c:c3:ad:74:54:5e:0e:91:87:65:
                    f7:be:46:14:7a:47:43:06:3c:19:a4:5f:18:29:91:
                    fc:70:9c:1e:11:30:00:f2:19:ff:ed:17:73:14:18:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:00:8E:CE:B4:90:5D:AF:DF:B6:86:FE:65:8D:0B:CC:90:3F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e7a8441b-6c21-38a7-bd41-683f5ce646a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:3a:03:03:07:14:60:fe:4c:e6:f2:9e:0b:f1:5b:9e:17:
         f1:fb:f6:cb:e0:5e:fc:e3:8a:c1:2b:ee:81:ad:d8:9e:65:15:
         cc:12:ea:eb:01:84:4e:a1:3d:0c:bc:80:a3:8e:8c:49:06:46:
         39:0d:63:19:5e:b0:4e:87:f0:a5:0b:7b:df:46:8b:1d:63:a8:
         f0:8d:43:a3:72:e7:40:f2:a9:67:c8:7b:6e:3a:d0:61:03:c3:
         15:29:1e:a7:45:aa:90:0f:77:a2:40:88:4d:46:2e:9f:32:5b:
         6d:09:7a:a3:af:36:30:5f:1b:43:3c:d3:62:4a:ae:4e:30:0e:
         c0:94:9f:13:b4:08:a2:86:11:09:ce:76:04:d6:72:a6:ef:8b:
         61:f9:cf:7a:93:f7:82:9f:bf:8e:09:f5:78:cf:ec:60:6c:86:
         9c:f5:7d:c5:b8:cc:35:e5:67:4a:ca:05:61:f9:fa:12:07:14:
         1e:14:d5:7d:ef:93:b9:54:0c:fa:19:c2:f1:f5:d2:8a:2e:02:
         16:4b:ff:eb:55:43:be:e4:de:b1:ef:99:0c:a5:79:4b:4e:7a:
         10:16:36:4b:39:c1:8e:df:bc:17:bf:19:fb:f8:4e:97:37:83:
         a5:29:33:72:b2:c5:0a:f6:da:e1:a6:4f:46:86:5a:52:25:84:
         ec:21:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:30 2026 by rpki-client