Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa
File:                     4fd4fa78-7e3e-3862-af57-a4934092604d.roa (raw, json)
Hash identifier:          OrET5gv+IlqCasQAeQnB6bcJb4g4yvRdhTn/bHsIwDQ=
Subject key identifier:   D3:DF:E0:56:4A:83:4F:CC:12:36:FD:00:C9:2E:83:87:23:D2:D4:C5
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584F3E47E1518487E776A4F8AC00
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     55066
IP address blocks:        208.82.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e1:51:84:87:e7:76:a4:f8:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=e2347421-e4c0-40f2-8887-a5455882e383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:f1:0d:e6:d4:3f:d1:c4:87:6b:98:5f:50:
                    b6:c8:aa:48:82:ce:67:5e:81:ab:06:82:4d:be:a8:
                    56:fc:1f:c1:68:47:e5:65:34:a5:8a:5f:73:e6:72:
                    73:5d:c3:a3:2b:29:62:ac:c2:5f:c5:14:94:22:e0:
                    08:be:2a:eb:60:e2:ed:bc:4b:96:9b:1b:eb:cb:da:
                    a3:26:36:37:7e:93:eb:a2:69:c3:ad:4a:79:b7:e2:
                    1a:c0:80:3d:da:1d:8b:2d:f3:c8:18:0f:3a:d0:fd:
                    4f:15:4f:0d:23:c7:1d:fe:18:61:09:b7:c7:2f:ad:
                    d6:c3:81:de:c4:93:89:e5:7b:40:7d:af:c0:3e:7d:
                    3e:89:9e:02:fb:20:82:f5:38:38:be:ff:c8:5a:44:
                    6f:95:61:8a:0f:50:c3:a8:5d:f6:f8:d4:4c:8c:72:
                    8f:06:d8:5a:7f:8c:b0:84:38:d2:45:91:59:a8:92:
                    4a:75:d1:37:ef:c8:c1:c1:6f:08:96:f7:92:52:a8:
                    28:ca:7f:6c:9d:3c:35:2f:10:7f:7d:44:d3:44:43:
                    3a:29:44:96:fe:ac:23:32:56:0e:17:ad:1e:af:28:
                    23:55:76:fd:5e:cc:d7:3c:a4:fe:84:08:6b:cb:55:
                    82:2a:36:30:3f:fc:60:44:54:ea:1c:1a:da:10:ed:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:E0:56:4A:83:4F:CC:12:36:FD:00:C9:2E:83:87:23:D2:D4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:64:94:2d:7b:39:4a:b3:a9:a5:f3:85:37:3c:23:5d:5d:
         74:0c:5c:d4:30:97:8a:67:27:c8:44:78:cd:44:60:c4:e0:5d:
         4a:2f:8a:fa:78:8e:c9:83:1e:cb:be:a1:9a:af:90:d6:ae:09:
         34:00:5d:e5:6c:17:4d:c5:19:a0:56:1e:16:0e:f3:a7:d7:7a:
         4b:05:29:ed:b3:48:87:aa:9c:5a:5d:af:1f:53:20:0e:8a:de:
         77:20:44:13:da:e9:f9:31:78:1e:a7:2c:d3:70:3a:35:79:6b:
         4f:54:4c:43:f8:58:e3:6e:a6:c5:5b:83:f1:2f:a8:f1:45:bb:
         63:55:ad:76:32:19:b9:e8:95:5c:7c:cf:71:75:2e:2e:9b:e6:
         62:b0:1c:81:45:a0:24:90:34:8d:b7:4b:06:61:85:e2:72:06:
         a0:70:83:2f:77:1a:e0:75:18:b4:74:55:68:d1:e6:5a:27:14:
         c5:5f:d5:15:e6:e7:05:c1:76:38:bf:d6:91:48:c0:9b:9a:12:
         44:08:69:13:c8:82:f1:7f:91:06:4d:28:46:43:4e:80:e5:8b:
         d3:b5:73:9e:c6:27:6a:46:b6:4d:4f:fd:67:9a:da:2d:5e:c7:
         42:7f:b7:97:c8:b5:55:99:f8:ad:1e:f0:d2:7d:0f:21:31:8b:
         95:51:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:28:23 2026 by rpki-client