Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa
File:                     9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa (raw, json)
Hash identifier:          rnvXi7+KXpelhWcInSkApw3HnWKgjr2QE+tzTV3x7KM=
Subject key identifier:   87:A8:FA:AE:6C:B9:0E:A1:DB:A8:CD:C7:0A:51:5E:C7:AD:BA:8A:72
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584FCCC693578AB4486881BE4D00
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa
Signing time:             Wed 11 Nov 2026 02:00:12 +0000
ROA not before:           Wed 11 Nov 2026 02:00:12 +0000
ROA not after:            Tue 09 Feb 2027 02:00:12 +0000
asID:                     16509
IP address blocks:        204.8.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cc:c6:93:57:8a:b4:48:68:81:be:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Nov 11 02:00:12 2026 GMT
            Not After : Feb  9 02:00:12 2027 GMT
        Subject: CN=9681cb0f-cb82-4b16-ab5a-3072180e159f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:fd:2f:b5:21:24:f3:7c:e8:2d:ea:fb:32:
                    ad:00:eb:53:fc:e3:15:71:1a:51:6a:75:f3:f5:a9:
                    8e:33:48:ab:f3:28:d1:d1:e1:cb:41:8c:5a:ad:16:
                    36:a3:8e:c4:58:9d:ab:c8:c0:3e:5c:c8:25:21:f0:
                    90:54:7d:a8:b0:93:48:e3:15:18:b2:6a:d0:7f:3e:
                    27:45:9a:52:4c:a5:9d:2c:cb:03:56:95:e1:93:a5:
                    e7:f0:ab:9e:89:a9:15:57:ea:0e:f9:c3:45:0e:bb:
                    2a:5d:d9:24:f6:f7:f6:48:2d:be:73:a1:a7:ea:59:
                    7b:1a:02:22:50:31:07:1f:d2:83:1f:d6:9f:12:de:
                    ec:05:73:36:c8:1c:0f:a6:1c:15:36:3a:21:c6:d9:
                    7f:00:3f:ac:5e:5d:56:b8:94:ad:b4:01:ae:d4:61:
                    9e:dc:d0:09:3f:bf:47:f5:da:9b:ff:c0:7d:cc:20:
                    06:bc:af:91:30:1b:35:c4:bc:30:32:13:01:54:8b:
                    7a:f2:06:0e:06:cd:6f:32:fb:08:ac:3f:a1:df:01:
                    66:4c:a8:b9:36:00:33:37:3c:db:8b:26:a9:b3:2e:
                    5c:8d:53:bf:9f:f0:27:16:f3:53:cd:d3:56:06:33:
                    38:84:33:72:e9:b4:9d:a2:f9:57:b2:b3:a5:47:e0:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:FA:AE:6C:B9:0E:A1:DB:A8:CD:C7:0A:51:5E:C7:AD:BA:8A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/9c6cd09f-5a93-3c8f-8e14-d75a1e512d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4b:65:e2:01:7a:ef:48:c1:34:1f:fc:4d:f7:c1:bf:37:fc:
         6f:05:40:f8:a5:73:39:c6:a4:45:a8:2f:c0:aa:a7:9f:95:d5:
         c3:b8:09:36:0b:60:68:93:db:f1:49:6d:a7:94:95:13:d9:6d:
         f3:d4:e9:f7:30:3b:0b:a2:20:bd:09:a2:7c:be:39:57:88:84:
         a5:49:35:23:11:32:92:36:04:d4:46:e7:6d:ef:cc:67:66:82:
         02:15:72:dd:89:f5:92:c2:cb:52:4c:d3:96:d2:07:ce:8b:09:
         cf:47:38:e0:f5:c6:13:a2:25:8b:cb:68:f1:e8:b8:35:6b:b5:
         d4:14:fa:52:27:5c:d5:e4:ce:42:ec:02:43:fe:64:50:95:8b:
         4d:8e:e0:b6:5e:53:2e:db:86:66:c5:5c:04:c5:ff:bd:e0:a0:
         03:5f:7e:52:d4:47:1c:7c:94:61:6a:92:35:46:63:b0:24:93:
         25:8e:a4:42:89:f8:70:c7:db:47:59:f5:bc:2c:3b:9c:2a:24:
         74:4e:b6:bf:25:fa:01:7e:41:b5:56:e5:f5:22:fa:35:32:66:
         e1:0d:07:d4:ad:05:53:76:2e:18:60:db:c5:cb:d6:b3:69:89:
         f5:0c:6f:3b:ba:22:c8:66:92:a1:06:14:d5:ee:cd:6d:4a:7b:
         15:28:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:31:58 2026 by rpki-client