Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/b4534e26-4f39-3711-b5e8-93ae3c1bf28b.roa
File:                     b4534e26-4f39-3711-b5e8-93ae3c1bf28b.roa (raw, json)
Hash identifier:          84eKh0QXA+FseA4DmLup4Y63F1Sv9eBAzGfbGc5k1G4=
Subject key identifier:   62:C7:FF:79:54:F5:B4:9A:22:E1:B5:0C:07:A9:E9:5E:FB:D1:C4:86
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F4328584F4112830DD0E48BF1E89DD380
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/b4534e26-4f39-3711-b5e8-93ae3c1bf28b.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     200658
IP address blocks:        134.195.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:83:0d:d0:e4:8b:f1:e8:9d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=769d686f-764f-4278-a213-79db9bbd87da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:78:01:42:c9:a0:1b:eb:96:df:52:20:71:
                    bd:7d:70:7e:e7:bd:5b:e4:27:8a:87:67:68:7c:61:
                    e9:f7:a3:3b:76:c5:b9:d3:6e:e3:2c:c7:f6:82:d8:
                    ac:e5:cf:f0:5a:af:62:eb:b0:fa:fe:a7:11:f0:d6:
                    39:6a:6b:0d:9d:f6:e7:3d:f0:c7:f2:4d:bd:f9:08:
                    6c:99:83:e3:86:51:63:d4:44:dc:83:73:22:ad:b0:
                    a7:e3:cb:81:7b:f4:ce:26:4d:37:98:a4:7d:42:f4:
                    a5:1a:4a:d5:fa:42:fc:5d:47:5a:ce:f1:34:8a:1b:
                    a6:b5:37:4d:94:1c:92:bb:58:d4:60:e9:83:1b:e1:
                    3f:ed:7a:3c:b2:75:44:c3:e8:40:57:8a:c9:62:3a:
                    39:da:7d:86:49:38:8a:57:3d:36:d5:ea:5b:fb:6d:
                    86:90:31:9b:9b:b5:bf:38:9f:8d:11:f0:41:a5:2e:
                    a5:2d:b2:c6:0e:b0:be:3a:b1:9f:1b:a4:6b:fe:dc:
                    99:d8:23:72:00:46:9e:4a:cd:18:92:e5:14:4f:50:
                    a9:7c:dc:0e:e9:e8:98:db:42:2c:b6:03:87:cc:1c:
                    a6:ad:2c:65:a3:11:0e:b7:a7:39:b7:6e:a2:59:7c:
                    74:5d:15:b7:82:0c:d4:f6:1d:b1:fc:2e:15:7c:57:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:FF:79:54:F5:B4:9A:22:E1:B5:0C:07:A9:E9:5E:FB:D1:C4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/b4534e26-4f39-3711-b5e8-93ae3c1bf28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:27:f5:fa:ee:b1:d1:a0:f8:ba:23:43:cb:10:77:3a:0a:
         39:90:f1:ab:b0:6f:c7:37:1e:e8:2c:db:49:c1:01:1d:d2:c0:
         ce:44:b2:e1:48:ce:fc:41:70:fd:1c:b0:1a:15:d8:95:67:de:
         60:c6:36:4e:84:a4:36:5c:e7:8f:54:f1:15:86:47:97:27:da:
         3f:90:91:fb:3b:4f:95:dd:db:8a:9c:f1:3c:75:36:9c:30:73:
         9d:c2:ae:b1:69:f7:ee:6f:fc:3c:95:19:4d:1c:36:63:05:7b:
         69:1e:cc:22:2a:ed:a0:11:0a:46:60:2b:9c:01:61:8b:ff:d7:
         03:2d:73:c4:4b:50:2f:3a:68:be:24:be:af:f8:f9:a8:32:7d:
         51:e6:82:cd:c7:40:10:06:ad:7e:f7:ce:67:eb:20:9f:7b:eb:
         83:cb:ca:1e:b0:12:3b:08:5a:fd:f0:28:22:ff:ec:c3:1b:32:
         9a:24:56:4d:85:66:24:79:fc:d8:6d:86:50:cd:8d:35:7c:38:
         b4:57:3c:3e:66:46:dc:2f:ee:17:1a:f1:ea:59:3e:07:74:f1:
         a8:8e:56:2b:a7:27:08:a8:9a:fc:28:9c:61:31:fe:1a:74:06:
         f0:08:04:f0:ee:a0:78:79:fd:66:0a:ba:1b:86:b7:e4:ce:a7:
         10:53:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:35:51 2026 by rpki-client