Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa
File:                     7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa (raw, json)
Hash identifier:          vrKjewmZFb0raXSRmGa5yZlRKcjuGuRIXNHFnV6kICs=
Subject key identifier:   D2:E3:26:4B:21:2C:CA:EE:EB:3F:F2:68:19:47:C2:16:2D:1D:59:58
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584F480D3B53CC1E93AF64F9F640
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     22580
IP address blocks:        209.173.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3b:53:cc:1e:93:af:64:f9:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=e168f8a7-93b4-4d85-b8c6-47f1b2f4b1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:45:71:b7:fa:9b:8d:9f:79:64:3e:71:0d:
                    33:26:1a:e0:94:b7:6d:df:be:74:9d:69:9a:d9:38:
                    f1:ef:0a:c2:9e:97:67:69:eb:ca:e6:49:94:27:66:
                    21:42:81:55:47:15:13:5e:55:cf:9c:0b:00:ec:c9:
                    77:f4:90:df:93:8c:cd:18:cf:a8:9c:cf:4e:62:27:
                    24:8a:07:61:50:0d:13:5c:6b:10:ab:8a:e1:e0:a6:
                    fb:be:79:2e:a3:e5:76:da:3f:aa:2d:60:cf:32:8c:
                    93:4f:ba:51:e9:83:04:4f:c6:5d:a1:84:82:99:47:
                    0d:21:a7:05:70:20:c6:7f:76:d7:14:1c:8b:7f:87:
                    1a:4c:08:05:61:05:88:ac:b5:ae:ad:bc:7a:b7:70:
                    d0:c9:52:68:ba:bd:91:21:bd:10:49:ce:d9:0a:b9:
                    11:5b:bb:ef:21:97:c4:08:cd:a7:20:5a:61:94:3a:
                    ac:9a:ef:d4:af:dd:c6:e5:5e:58:e2:d0:50:ff:e6:
                    d6:2d:46:60:64:72:46:40:9f:e8:14:a6:03:0d:f5:
                    b3:29:3b:c8:3d:20:76:0d:f9:96:11:dd:d4:23:d0:
                    ce:0d:ea:d3:23:35:87:1c:4b:d9:1a:1b:5d:d0:56:
                    46:0f:d6:a0:0d:07:8d:25:06:7e:d6:eb:eb:c5:d5:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E3:26:4B:21:2C:CA:EE:EB:3F:F2:68:19:47:C2:16:2D:1D:59:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b1:36:76:15:05:cd:9b:38:bf:39:23:c1:35:38:7e:a4:de:
         cc:4e:b3:7a:c8:5f:6f:50:bd:f7:66:34:42:36:75:86:58:62:
         18:ae:a0:14:75:84:7d:a6:e4:cb:df:ef:bf:d4:e9:09:7e:92:
         6d:6f:0a:f8:a9:d0:df:77:0b:cc:58:f0:df:1b:6a:1f:16:9b:
         0e:69:c6:10:1c:32:16:a8:fb:a5:2b:56:58:00:3c:b7:b9:ce:
         7c:62:b5:cb:98:a9:3c:b6:db:26:d3:d6:75:be:fc:58:b6:5e:
         50:44:06:3a:b5:60:c1:18:6b:35:92:94:0a:46:2a:e6:fd:69:
         99:b3:5e:b3:7c:ae:49:8d:8a:40:45:b9:f4:eb:fe:f9:1e:31:
         e9:c0:13:eb:4e:c9:2d:e6:20:a4:b4:91:82:f0:21:28:62:5b:
         5c:f9:0c:ee:36:d2:d5:79:c0:31:8b:6c:88:47:47:36:ec:14:
         70:e4:47:b3:e7:41:78:dc:2f:02:f5:aa:c8:5b:a7:a2:d6:f5:
         45:51:42:9e:9e:8b:68:54:c2:00:1c:02:a2:e9:1b:82:c6:a8:
         d5:5c:bc:37:45:3c:d0:91:ae:09:5a:09:d7:28:bb:fb:1d:ab:
         96:84:21:a1:62:57:b8:81:77:a8:58:6f:00:ff:a5:03:18:45:
         6e:e4:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:09 2026 by rpki-client