Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/fff19177-f8d7-3c67-94cd-cfc4c8623970.roa
File:                     fff19177-f8d7-3c67-94cd-cfc4c8623970.roa (raw, json)
Hash identifier:          0SiyH6qLsUctECiyed+GdR0RXeBUn/X72kPrDWCFvhs=
Subject key identifier:   F1:78:2A:89:D1:CB:A0:10:B2:97:3A:9E:81:9D:BC:E6:C6:89:BD:EF
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584EF717B81DB14E4A9772926C00
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/fff19177-f8d7-3c67-94cd-cfc4c8623970.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     30687
IP address blocks:        216.38.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:b8:1d:b1:4e:4a:97:72:92:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=49199e72-d5de-455a-9393-80651e64ea59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:23:1e:bb:9f:be:74:02:02:22:53:b6:38:3c:
                    0f:5c:89:ab:17:8d:ac:5a:80:44:12:fb:d7:8d:ea:
                    a9:ec:d1:75:1d:79:93:c3:a7:30:d9:f8:8c:1a:96:
                    29:5b:51:90:33:af:f3:59:47:6e:6d:68:c5:20:02:
                    97:9b:44:5b:51:ed:5a:d1:82:74:13:76:9e:16:b6:
                    4b:d8:af:6f:ad:e3:42:05:aa:10:3d:f0:b0:c8:05:
                    88:f1:ae:17:3a:47:be:47:9c:5a:3d:5a:5f:85:0a:
                    d4:1a:69:28:7f:56:16:08:bc:34:31:a7:1f:88:8b:
                    54:ec:3b:d5:38:a9:b8:59:d2:b0:db:fb:e0:95:48:
                    2a:fb:75:a9:e2:5f:ca:4b:ba:39:d4:70:3c:b4:fa:
                    b9:49:d3:eb:35:9e:75:87:4c:48:81:5a:01:52:77:
                    dd:65:a4:e4:f6:0a:e6:72:a9:b1:82:0d:15:ea:8c:
                    c9:96:7f:32:ea:ae:9b:9f:36:db:23:40:2e:cf:21:
                    4c:3e:85:1b:4e:9b:22:07:80:b0:c8:72:4f:06:fd:
                    cb:d5:8f:3a:20:c6:d6:f2:a4:a6:85:10:e7:71:92:
                    ef:78:fe:94:0c:16:dc:b8:85:b5:4a:73:75:fd:10:
                    aa:1e:7f:44:6b:a8:5c:04:42:31:69:60:71:e3:b6:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:78:2A:89:D1:CB:A0:10:B2:97:3A:9E:81:9D:BC:E6:C6:89:BD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/fff19177-f8d7-3c67-94cd-cfc4c8623970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:14:bd:c8:33:15:78:03:a7:94:9d:a6:0b:7e:cd:5d:1c:4f:
         12:fa:11:07:50:b5:3c:69:e6:7d:48:5f:e4:e3:98:4e:94:49:
         83:84:61:96:0c:62:68:15:68:79:1e:43:14:b3:5a:4f:33:3a:
         c8:d6:a2:b3:a7:ef:b6:6c:f0:23:a1:45:73:e3:47:1d:d8:d2:
         4c:cc:f3:fe:78:35:d4:3e:48:58:8d:1b:6a:86:b1:1b:0f:97:
         7e:a2:42:93:5f:00:9b:cc:1a:b8:7f:0c:0f:fb:f1:d3:5c:dd:
         3e:34:dd:7d:50:bd:92:32:ca:84:78:2f:ea:75:76:0b:a8:93:
         74:34:cd:f6:91:2d:bc:e6:ff:c9:18:34:77:d6:89:fb:6d:a1:
         3b:34:24:a0:60:17:f6:a5:04:43:9a:bb:da:d0:6f:66:e0:55:
         0f:5e:70:07:9b:26:b0:1e:bd:95:28:f4:e3:56:e8:3d:c5:6c:
         e7:e0:83:d9:41:4a:43:94:8d:b2:23:58:61:07:79:ff:7f:44:
         58:3f:77:af:c3:dc:2e:f3:d1:f9:8b:54:4d:be:e7:40:5e:1a:
         c7:c1:f8:5a:d9:43:c8:bd:aa:2d:a4:c7:c8:46:25:cc:3e:bf:
         c0:19:2b:f6:9e:a1:7b:b9:4f:40:1c:6d:a8:f3:2f:6b:44:80:
         4c:c9:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:07 2026 by rpki-client