Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa
File:                     b2cfa53d-a932-3912-aadb-d09c12415290.roa (raw, json)
Hash identifier:          MQ6fRVIKydA2l36zgZgI7inQDOucnW/e+JXTOQw+oHM=
Subject key identifier:   EB:F0:3C:01:91:86:F3:68:50:CD:E7:5A:E1:C3:A7:91:72:59:74:64
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DC6CB050A3D799F531F159E80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     271
IP address blocks:        209.87.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:05:0a:3d:79:9f:53:1f:15:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=240da1ee-7db2-4ca9-943f-2ccf2bd9591d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:a4:e4:f1:bc:e3:3a:64:74:dc:44:33:a3:
                    a8:33:51:32:6f:02:8d:54:a3:05:f5:2d:50:68:42:
                    87:50:5b:f7:cd:23:b0:e1:14:b6:b3:43:ce:78:d4:
                    3b:de:ad:39:11:aa:64:6e:b7:e8:d7:77:6f:00:d2:
                    35:16:c7:04:2d:1e:5d:55:66:7f:68:ff:41:07:04:
                    eb:99:5d:dc:ef:1b:e1:37:99:38:be:6d:5e:4f:7c:
                    f1:46:4e:b0:1c:de:e6:6d:a9:46:e1:ad:e6:3f:e9:
                    16:f0:31:e3:6d:8a:8f:c9:ed:d9:27:a1:07:b4:2c:
                    88:a7:f3:23:fc:c4:53:02:20:dc:f2:77:cb:4b:58:
                    45:c2:c6:2a:43:f6:82:2b:f6:bd:c1:7f:dd:22:1a:
                    06:bd:d0:00:a1:db:d3:23:94:10:ff:50:85:19:b4:
                    af:29:a2:2a:ec:37:60:5f:f0:08:dd:b0:05:7e:56:
                    a6:6a:7c:25:14:5c:7e:ad:db:49:c7:67:8c:88:a4:
                    f2:29:32:65:e5:ed:21:37:03:24:86:c4:5d:f7:96:
                    cd:07:10:18:b3:43:36:15:ed:2c:48:55:4d:1f:fa:
                    7b:8c:7d:5d:17:b4:06:59:ca:fb:76:41:1b:73:af:
                    bb:ce:a5:0f:c6:73:9f:7a:d0:6b:b2:3a:b9:89:c8:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:3C:01:91:86:F3:68:50:CD:E7:5A:E1:C3:A7:91:72:59:74:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:07:c6:13:1f:78:69:0d:b5:57:83:a5:24:53:86:87:1e:
         27:1f:93:e7:b9:5c:e9:48:e9:c7:b7:46:8a:06:3e:8a:b3:b4:
         0f:45:fa:54:11:7e:24:81:af:65:01:42:36:4e:8a:7f:7a:97:
         dc:e8:34:5b:03:f7:b5:e7:40:d7:33:dd:cd:79:93:47:f4:53:
         ed:a7:f7:c6:b1:0d:02:f5:49:c2:b6:02:fb:5d:52:31:6d:3e:
         ea:cc:14:c2:08:ec:8d:35:e9:72:e7:fb:49:fb:9b:f8:7f:a5:
         9a:41:06:4d:19:be:eb:00:66:0d:c6:2b:63:2a:b6:a9:0a:90:
         05:61:9a:0a:1b:76:fa:cf:2f:4d:93:98:af:41:d4:42:e2:23:
         01:c4:4b:b5:9c:fe:48:43:05:da:d1:5c:57:d7:8d:93:ce:a9:
         e8:79:ce:d4:34:5e:f9:56:d3:2a:66:78:55:47:33:fc:1c:7f:
         b4:17:90:64:32:cf:09:d3:9b:63:1b:da:3a:f4:71:55:b0:dd:
         b3:23:51:e8:b8:74:83:c7:e5:da:66:a9:91:5e:eb:eb:49:04:
         a5:c0:a9:e3:25:bf:e0:cb:f8:a2:29:14:f5:fc:e6:63:7e:8f:
         12:73:f7:94:b9:50:a0:f7:e2:d0:25:c7:07:10:04:4f:a2:64:
         d5:b1:8e:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywUKPXmfUx8VnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk
MjQwZGExZWUtN2RiMi00Y2E5LTk0M2YtMmNjZjJiZDk1OTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhmk5PG84zpkdNxEM6OoM1EybwKNVKMF9S1Q
aEKHUFv3zSOw4RS2s0POeNQ73q05Eapkbrfo13dvANI1FscELR5dVWZ/aP9BBwTr
mV3c7xvhN5k4vm1eT3zxRk6wHN7mbalG4a3mP+kW8DHjbYqPye3ZJ6EHtCyIp/Mj
/MRTAiDc8nfLS1hFwsYqQ/aCK/a9wX/dIhoGvdAAodvTI5QQ/1CFGbSvKaIq7Ddg
X/AI3bAFflamanwlFFx+rdtJx2eMiKTyKTJl5e0hNwMkhsRd95bNBxAYs0M2Fe0s
SFVNH/p7jH1dF7QGWcr7dkEbc6+7zqUPxnOfetBrsjq5icg0twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvwPAGRhvNoUM3nWuHDp5FyWXRkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjJjZmE1M2QtYTkzMi0z
OTEyLWFhZGItZDA5YzEyNDE1MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJu3B8YTH3hpDbVXg6UkU4aHHicfk+e5XOlI6ce3RooGPoqztA9F+lQR
fiSBr2UBQjZOin96l9zoNFsD97XnQNcz3c15k0f0U+2n98axDQL1ScK2AvtdUjFt
PurMFMII7I016XLn+0n7m/h/pZpBBk0ZvusAZg3GK2MqtqkKkAVhmgobdvrPL02T
mK9B1ELiIwHES7Wc/khDBdrRXFfXjZPOqeh5ztQ0XvlW0ypmeFVHM/wcf7QXkGQy
zwnTm2Mb2jr0cVWw3bMjUei4dIPH5dpmqZFe6+tJBKXAqeMlv+DL+KIpFPX85mN+
jxJz95S5UKD34tAlxwcQBE+iZNWxjsc=
-----END CERTIFICATE-----
Generated at Wed May 13 13:29:30 2026 by rpki-client