Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/270834eb-0a0f-3c2c-84a1-6a887cba89d9.roa
File:                     270834eb-0a0f-3c2c-84a1-6a887cba89d9.roa (raw, json)
Hash identifier:          8PN5u6X7WACy4HIzFolgI+BJQxYsRwbS8Ozl3RCvqa8=
Subject key identifier:   82:A0:6E:08:1A:F4:85:D3:2A:D7:57:1C:EE:91:2E:35:C0:FF:4F:02
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F4328584F4976CDA323B9177A56B30180
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/270834eb-0a0f-3c2c-84a1-6a887cba89d9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10616
IP address blocks:        204.193.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:cd:a3:23:b9:17:7a:56:b3:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=98a4c78b-cc4b-4c21-b0a1-fc137963a0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:69:64:5c:d1:02:b3:12:67:2c:95:47:95:
                    4b:a7:6a:32:12:77:bf:4c:db:be:ee:1b:13:81:0b:
                    8e:65:e0:bb:9a:67:ad:e5:a4:f5:ff:74:03:d7:1f:
                    b6:d8:d6:25:59:00:6c:54:99:00:66:01:4c:1d:5f:
                    71:9a:c1:fa:9e:d0:d1:21:f5:64:5e:54:94:54:a3:
                    9e:cc:6e:4d:1d:be:09:29:77:a3:fb:5a:a0:32:2a:
                    7b:9b:6d:8a:e7:33:d0:a8:b9:d1:d2:f5:f0:69:48:
                    65:f5:00:28:4f:f4:d7:30:31:81:1e:fd:8c:ce:08:
                    86:75:0a:99:97:57:c4:6e:55:f4:a7:8f:5e:0f:b4:
                    04:35:f3:c2:e1:e1:ae:8c:d0:4d:5f:48:df:08:91:
                    9d:fc:f4:0e:3f:23:f1:5f:48:4d:27:87:98:58:65:
                    06:a4:f0:b1:93:51:e1:94:37:d0:58:89:17:b7:59:
                    43:f3:cc:bc:f3:b7:6e:14:4a:3d:8e:ee:61:f8:e1:
                    e4:88:66:37:01:92:45:02:d7:17:1d:75:27:91:45:
                    fb:e8:e1:6b:13:57:c3:25:3e:55:c4:b4:e6:67:32:
                    69:b5:de:90:b1:36:23:9f:a9:ff:b5:26:e2:92:43:
                    9e:0d:41:66:69:29:39:12:c5:b4:a2:74:eb:e9:a7:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A0:6E:08:1A:F4:85:D3:2A:D7:57:1C:EE:91:2E:35:C0:FF:4F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/270834eb-0a0f-3c2c-84a1-6a887cba89d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.193.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:df:73:46:1e:13:ea:86:9f:c1:db:31:84:0f:f4:54:79:f3:
         94:30:af:a3:86:f2:70:9e:68:12:8f:ce:ac:04:a6:8e:eb:50:
         ea:b4:75:42:20:91:03:6f:27:05:16:7d:7c:5d:9c:86:ad:2a:
         78:e8:7a:d0:94:3e:ab:04:1d:94:65:91:b9:60:44:dc:5d:0e:
         df:99:5a:e4:48:30:1c:2a:d9:ff:c9:7e:9c:22:b5:25:b2:a1:
         71:71:ce:98:28:08:e3:a7:cd:f7:aa:fb:ff:2d:21:b8:48:10:
         78:ef:4d:c4:2f:56:6d:d3:b3:a6:d8:4a:bf:7f:bb:93:25:64:
         1a:e1:66:37:73:a5:a0:3e:36:d6:e3:43:9c:62:b8:f2:40:a4:
         7d:9f:d7:de:1a:05:6a:e8:b0:20:f3:c3:2a:b4:91:15:f6:59:
         1b:ad:08:1c:07:a2:9c:ed:6c:b3:75:50:15:21:0e:88:87:76:
         cf:3b:f3:62:d2:e5:cb:9b:7b:67:d7:c5:c2:64:9f:3d:c8:01:
         9b:18:29:29:9d:d8:ad:5a:e6:34:bd:3d:f4:0e:41:a8:59:91:
         06:4f:33:9d:dd:d2:e5:15:67:ba:e5:e7:5d:e8:88:6d:2b:cc:
         ba:c9:e9:0e:0a:14:42:82:fa:f7:aa:3d:e3:e0:c6:d0:66:d4:
         5c:cb:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:46:54 2026 by rpki-client