Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa
File:                     17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa (raw, json)
Hash identifier:          7jXelwm9MbDTzkFTtD4tD1aySuuGf5lyQ6EQGDFfa90=
Subject key identifier:   64:92:6F:34:EE:D5:F9:0C:A2:4B:BA:47:52:41:7D:42:64:9E:DF:F9
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584F498A68ABF5E3601921FF1440
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400928
IP address blocks:        204.89.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:68:ab:f5:e3:60:19:21:ff:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f3161015-695e-4bbe-8339-d4ac67c311d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:1a:88:dd:63:b9:b6:70:95:a9:53:78:ed:
                    b9:35:4a:8c:80:86:45:5e:e4:25:2a:93:6a:94:33:
                    6e:86:d3:97:7e:1a:69:46:57:41:2f:e6:2b:8e:04:
                    f4:f5:62:d7:f9:b5:3d:cb:38:3c:7b:f7:5f:93:6a:
                    15:0b:2b:86:7b:c0:41:29:1b:35:cf:e8:3a:5c:8b:
                    ab:53:9a:50:4d:b6:3b:29:22:9d:d5:87:88:7b:3d:
                    00:ae:2a:b6:bd:9e:80:ab:0e:14:67:97:6d:57:97:
                    47:02:8f:5a:c0:24:f8:4b:76:23:0a:f9:e3:c4:2d:
                    47:6f:28:f4:bf:c3:39:41:81:83:e2:3c:ad:fe:f2:
                    dc:07:54:e2:f7:b2:8e:90:16:27:00:5b:b7:ac:29:
                    f3:4b:16:1d:7d:92:99:be:84:69:86:49:2d:a4:af:
                    64:c5:b6:61:8f:a2:94:15:87:cd:31:8f:d8:08:3e:
                    3d:63:24:1e:f4:99:2e:cd:28:3a:82:c9:e4:0f:3c:
                    f1:44:73:da:0d:c7:fb:ee:47:72:2f:b1:e0:31:d4:
                    0c:6b:f5:01:1b:b4:c1:6b:53:94:6b:6d:0c:fc:6d:
                    82:67:9e:8f:e8:35:1f:70:cc:06:57:2a:42:87:75:
                    5e:0b:0f:ec:b9:a4:28:b3:41:42:f3:76:99:36:32:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:92:6F:34:EE:D5:F9:0C:A2:4B:BA:47:52:41:7D:42:64:9E:DF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:47:71:c3:5b:6a:0b:0a:80:f7:4f:43:94:05:aa:42:79:
         87:35:91:c4:f8:67:63:d6:99:72:ba:63:9e:4c:81:03:7d:5d:
         28:73:5c:d1:7e:9e:61:94:1c:34:7e:62:8a:2f:58:1c:7f:6c:
         43:f4:5c:66:bb:8e:6e:23:8b:30:a5:af:41:b3:27:ca:c9:01:
         a9:9d:3a:e4:d8:d9:6c:10:be:70:95:a9:cb:46:25:7a:c9:06:
         41:13:49:6b:8a:04:a1:bb:1f:07:5d:a5:f8:dd:5d:c3:6e:e6:
         65:6a:57:d4:57:6b:a4:2a:45:22:09:fa:35:ea:d8:75:bb:cd:
         c3:e5:b9:e0:e0:fc:38:73:bd:5a:e5:70:19:53:82:1b:20:b2:
         c3:cc:49:dc:7f:4f:e4:a3:9a:99:69:10:ba:f3:65:c8:6e:c4:
         25:c1:f6:82:91:80:85:d8:0b:a9:16:37:e9:95:a0:2e:55:20:
         a4:98:f1:3f:41:42:f9:2f:83:c4:dd:70:d8:3d:5e:7a:d7:19:
         fe:2e:3b:e3:fc:8a:a6:5f:6d:1f:e8:dc:63:80:a1:48:7d:e9:
         c3:bf:da:e4:b3:44:ee:49:28:3e:d6:2b:9a:82:b2:1c:5c:65:
         2d:6e:d1:34:b5:87:16:ab:7d:34:01:18:36:af:0d:61:d8:c4:
         bb:4e:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:32:48 2026 by rpki-client