Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa
File:                     4df36641-222d-32f6-a628-9d7a11fed67f.roa (raw, json)
Hash identifier:          IBklzOc1w640V7bFzD9Sd3Tacaigzqo9i4fcJS1A/xQ=
Subject key identifier:   D3:BB:9E:73:65:02:0B:F5:07:1A:CB:D7:D5:F1:FA:B0:07:30:7D:DA
Certificate issuer:       /CN=4051554a-224d-4a2b-8646-85ee8bbdb883
Certificate serial:       010D0C9F4328584F02424104E79896284B150680
Authority key identifier: 7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     8095
IP address blocks:        204.128.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:41:04:e7:98:96:28:4b:15:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4051554a-224d-4a2b-8646-85ee8bbdb883
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=8f354143-4258-42b7-8d80-0a3e02c6bad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:33:36:32:9e:2f:22:24:b9:f7:7c:12:49:
                    9f:23:38:de:d0:61:ae:9d:ce:0d:79:9e:c9:5f:27:
                    83:dc:75:bf:71:f1:cc:93:a7:3b:bb:42:0c:46:26:
                    c1:f8:d3:ae:c8:e5:0f:10:8f:a9:a9:3a:9b:94:65:
                    27:06:a1:02:c7:d1:04:5d:a2:9f:d4:0b:98:ea:b6:
                    d8:e3:73:02:a5:81:39:a6:0f:71:0b:2f:0b:0c:be:
                    0e:3a:24:83:bb:0d:2c:b0:83:5f:37:e8:5c:43:7a:
                    35:b1:fa:ff:5c:37:01:94:6e:06:14:e8:1f:41:3a:
                    1d:ca:26:e8:6b:b2:5f:e1:e1:dd:7c:03:e6:c4:2b:
                    50:e8:2e:9c:b9:f8:bb:5f:34:96:fc:1e:33:0d:99:
                    67:f3:bf:d6:9f:a1:fa:30:6f:2d:2f:e8:d1:17:02:
                    55:bf:a8:0e:ba:a8:c0:2e:98:7c:53:37:12:ad:9e:
                    f8:32:1e:cb:f2:8b:30:c7:ec:f2:64:4c:4e:87:a5:
                    6a:92:64:7f:e6:9b:1d:bd:cd:73:ad:a2:a6:5a:35:
                    df:d8:b5:39:4d:74:3a:21:d4:fe:5c:59:fd:0e:10:
                    e6:93:c4:01:6a:cf:4e:6e:c9:5b:78:e8:b5:66:11:
                    28:cf:c1:22:e1:0a:d7:ea:d1:7a:c8:88:57:10:55:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:9E:73:65:02:0B:F5:07:1A:CB:D7:D5:F1:FA:B0:07:30:7D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.crl

            X509v3 Authority Key Identifier:
                keyid:7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:56:a4:c5:55:0b:09:6a:b8:b3:25:40:1f:72:92:4f:64:
         49:6e:87:6e:22:6b:c1:02:ae:15:d9:ac:7e:f7:30:ef:b4:c0:
         b8:58:77:62:03:38:91:78:7b:fb:6b:26:66:85:3b:9a:5b:c2:
         d1:d0:ef:a3:43:08:df:ba:c2:a9:6d:82:03:d0:86:36:1d:d6:
         ca:1e:0d:a4:cd:3b:9b:e3:ed:05:be:b0:e6:6f:a9:57:d8:78:
         2d:e4:db:a9:d5:b9:06:98:69:34:26:de:e2:89:84:8e:84:01:
         35:00:f1:a1:c9:09:06:bb:10:21:20:ac:26:b1:0e:3c:bc:16:
         70:cb:b1:f7:06:d4:d3:11:86:e4:9b:f9:7b:b9:c3:6e:4d:5b:
         1a:73:5c:0b:ef:b9:d9:27:a1:7a:e7:dd:d2:1a:7b:93:d8:73:
         47:a1:4b:1d:0b:f3:43:2b:2a:90:20:91:11:2e:26:92:e3:c6:
         e5:dc:77:63:c7:0d:73:58:b4:08:84:98:9d:01:45:cc:98:04:
         d8:f3:87:33:da:c0:80:3f:dc:61:09:ba:c9:2f:9a:b3:47:d0:
         a6:0c:18:96:2d:ea:d3:90:50:ba:c3:22:c2:88:9e:71:ba:08:
         6c:c6:5d:fe:fb:81:22:0d:a5:71:d8:6a:4a:4a:8a:d5:93:a8:
         45:f0:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:41:39 2026 by rpki-client