Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/83b617ed-3a71-379f-a728-b96070c0351d.roa
File:                     83b617ed-3a71-379f-a728-b96070c0351d.roa (raw, json)
Hash identifier:          BbO641jQIH1HN5oCr0t8q4A68ay9flz5TAnAUbdlMfU=
Subject key identifier:   2A:98:EE:50:0B:84:AF:99:55:3E:FE:0C:7B:B6:18:27:63:BB:1B:FD
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584F51D2A1E8023D5EB7E2C8E100
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/83b617ed-3a71-379f-a728-b96070c0351d.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     53555
IP address blocks:        24.38.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a1:e8:02:3d:5e:b7:e2:c8:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=ed9de678-74e3-45cc-a7f1-c91edd349bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:eb:dd:67:bc:4d:c1:a4:4f:53:fd:33:86:
                    9f:c7:64:de:18:4a:68:83:38:9b:92:9f:d6:7e:e4:
                    1f:58:92:86:46:82:17:8d:89:1f:e7:1f:26:db:c0:
                    73:a9:71:80:8d:c9:7c:aa:80:53:ee:a0:86:41:9f:
                    45:ce:54:90:4e:46:ff:25:a3:88:fc:46:74:b9:d8:
                    d8:90:b4:cc:5b:cd:bf:c4:94:13:fa:15:e3:85:39:
                    1f:ff:f6:d5:16:3c:38:6a:28:96:0f:f5:b4:7f:78:
                    13:f7:17:8b:92:67:bf:3f:d4:a7:86:8f:31:7c:e5:
                    2c:af:81:cc:1c:6f:17:0d:51:e7:80:dd:f7:50:3b:
                    95:63:02:e2:d1:6a:09:cd:c6:2e:93:ce:2c:80:46:
                    35:9c:27:d8:ee:2b:93:23:0c:06:7b:65:a6:83:6a:
                    67:54:7d:f4:97:ec:3b:fa:39:77:bc:90:4f:aa:12:
                    2a:dd:ea:11:f7:67:6b:04:9e:58:55:84:cb:23:a6:
                    1c:e0:19:90:79:98:30:a2:ed:95:4c:3b:de:8a:02:
                    e2:38:68:03:3c:b8:e8:77:80:15:cb:74:81:fa:bf:
                    c9:99:48:4c:af:92:46:8e:3f:cb:d2:51:d2:10:b9:
                    e8:06:99:06:af:02:57:6d:1f:62:9c:e1:54:db:fd:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:98:EE:50:0B:84:AF:99:55:3E:FE:0C:7B:B6:18:27:63:BB:1B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/83b617ed-3a71-379f-a728-b96070c0351d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9c:dd:36:48:2e:f2:65:9e:9a:17:1d:5d:e2:dc:59:1e:09:
         53:4a:96:9f:94:2b:bc:ca:74:83:d1:6d:27:d6:98:42:50:db:
         8b:ac:2a:84:2b:d0:a8:f2:ed:38:5a:ef:11:15:8c:9a:48:7f:
         1e:94:0d:3e:e7:c5:f7:cf:b2:74:9c:39:f2:6a:55:e5:b5:65:
         ec:df:8a:a2:83:f9:03:10:cb:20:ec:bc:cf:c1:49:21:3e:6c:
         16:45:1c:e8:57:b6:15:cb:78:4f:5e:bf:5d:21:a6:58:f9:1d:
         ac:31:6c:fa:71:b0:ae:61:0b:65:19:9a:6f:cf:b6:37:b2:27:
         c1:3e:97:06:dc:94:6c:ea:bf:8a:f2:b8:63:9d:ba:e7:b0:9f:
         cf:bc:4b:dc:3d:56:e6:18:1c:95:03:95:f5:b6:a6:3a:6f:b0:
         b2:79:d2:ab:9f:5c:9e:5b:60:66:ee:76:44:da:b0:fc:a0:e2:
         9f:21:fe:b2:23:fc:c5:df:c5:4d:49:d0:20:a6:75:64:11:26:
         15:de:6d:5f:a6:ba:39:b8:f7:41:a3:3a:a2:0a:d8:d8:04:c8:
         d9:42:96:f8:fa:75:1c:7a:63:e8:95:17:c4:cb:65:2d:d8:59:
         40:0e:8b:82:2a:d8:8e:bb:83:43:e7:43:e9:13:5c:c4:8a:e5:
         cc:0e:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:22:24 2026 by rpki-client