Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa
File:                     d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa (raw, json)
Hash identifier:          e+u+AgTMvXigrapkr6/5dYBZeZk0uOJE0jg0rnEGOH4=
Subject key identifier:   AC:60:A8:0F:E2:59:E8:7A:72:AE:28:98:AE:48:24:A4:C7:8A:98:9C
Certificate issuer:       /CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
Certificate serial:       010D0C9F4328584F4C3D46B9FD323A559C3F67C0
Authority key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     203107
IP address blocks:        162.217.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:46:b9:fd:32:3a:55:9c:3f:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=7dcf83f1-7156-4fe5-b0e1-d60361888924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:9c:ce:4d:32:30:df:25:00:cd:a6:79:08:
                    48:17:42:b3:4d:11:2c:a3:88:c6:a2:47:13:3c:cd:
                    98:0a:bb:1b:0c:f6:78:82:ea:ba:c4:ee:18:4f:6d:
                    61:ee:a1:12:91:af:f7:8b:93:d2:b5:63:b4:f6:40:
                    31:2a:4d:39:d8:2c:d7:f3:38:dd:a6:ae:49:ee:ff:
                    f8:b6:06:f0:fe:80:ce:6f:2a:97:e9:6a:dd:af:ae:
                    33:72:c9:de:5a:6b:df:0a:50:0b:93:f5:7a:89:5f:
                    78:24:e3:9b:1a:96:a2:1c:ba:97:69:6b:1b:d6:9f:
                    ec:ac:ac:c2:76:7b:b7:55:1b:5e:4a:bd:e2:d0:99:
                    6c:7f:31:6d:ed:1a:d9:35:d2:3e:8e:84:21:35:d0:
                    c6:7c:77:69:94:59:a6:4f:56:37:14:ad:2a:96:4c:
                    8c:bb:59:5d:9f:75:ba:f7:7b:7c:bd:c0:97:4c:4c:
                    6c:cb:db:6d:50:79:7d:71:98:e4:39:02:7f:fe:4b:
                    3a:82:dd:d1:48:8c:a5:d0:3c:3e:05:de:39:1e:a9:
                    3b:34:53:34:74:b1:e2:c6:83:e9:36:35:cb:c7:4b:
                    80:40:29:86:5a:59:ae:54:87:bd:c5:60:1f:df:fe:
                    75:b4:ab:b9:39:be:23:ef:b1:30:a8:79:2f:4d:f3:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:A8:0F:E2:59:E8:7A:72:AE:28:98:AE:48:24:A4:C7:8A:98:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/d9774c9f-9706-3c6d-aa0a-593b7d53ed97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl

            X509v3 Authority Key Identifier:
                keyid:16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:f7:40:62:71:d5:86:26:96:70:af:84:5a:8a:92:89:33:
         76:33:17:a7:92:5a:84:62:8e:f7:19:9d:ee:03:dc:96:c4:5f:
         ff:b5:9a:ba:01:f6:07:d4:8f:ae:d2:a3:f7:6a:cc:1a:f4:c0:
         fa:2e:5e:d8:d3:91:cb:3e:1b:99:de:b4:85:cc:32:36:9d:42:
         d3:10:88:65:46:a9:62:cb:88:c6:49:0a:4d:45:47:30:66:69:
         d3:d2:84:9d:2c:47:eb:e2:e0:ae:2d:64:b1:1e:df:95:5d:3a:
         74:f9:10:7c:e6:51:73:da:82:6d:c0:3f:69:ba:71:1a:bf:24:
         7d:30:9b:94:85:87:a5:96:be:5c:b7:50:6d:69:33:62:d5:ca:
         87:3f:b6:59:a0:65:87:e6:43:e3:5e:0b:cc:c8:aa:dc:7d:54:
         cf:70:e4:78:9d:81:5e:47:98:ae:25:e0:51:10:93:2a:b5:0a:
         c8:f9:69:56:12:c1:f8:52:68:2a:9d:07:43:a3:38:4b:fe:ac:
         3b:db:bb:3b:2d:16:cb:7a:34:52:1c:a9:33:c5:7d:a3:96:d2:
         77:cf:6f:f7:68:5b:8b:89:4d:bb:92:aa:d5:86:e3:71:44:38:
         24:50:4c:26:30:df:1d:0d:46:b3:06:99:90:19:3e:8c:ac:32:
         68:ab:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:34:37 2026 by rpki-client