Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/9dd1d6db-129b-393f-a276-bd09e28409f8.roa
File:                     9dd1d6db-129b-393f-a276-bd09e28409f8.roa (raw, json)
Hash identifier:          luNDfV6LZ0kJYfTFHEesNKWDfabIWKtMrsyfuCtY3ZY=
Subject key identifier:   E8:84:90:7E:93:8B:DE:CF:BE:E8:D3:B7:C0:EC:A5:27:66:F7:F2:D8
Certificate issuer:       /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
Certificate serial:       010D0C9F4328584F5C0E3BD39876CF904396B340
Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/9dd1d6db-129b-393f-a276-bd09e28409f8.roa
Signing time:             Thu 01 Oct 2026 16:58:30 +0000
ROA not before:           Thu 01 Oct 2026 16:58:30 +0000
ROA not after:            Wed 30 Dec 2026 17:58:30 +0000
asID:                     393699
IP address blocks:        172.83.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:0e:3b:d3:98:76:cf:90:43:96:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
        Validity
            Not Before: Oct  1 16:58:30 2026 GMT
            Not After : Dec 30 17:58:30 2026 GMT
        Subject: CN=a11893a0-83d5-4080-ac03-eb545ef022ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7c:00:bb:b0:af:74:29:19:fb:ee:23:c0:9b:
                    a7:b0:b9:47:fd:25:21:6c:c5:a6:b8:81:12:eb:9e:
                    f6:e0:cc:65:87:23:f2:e9:eb:a0:57:aa:0e:a2:43:
                    c7:d0:a7:b3:c6:eb:68:b6:c6:f2:27:ca:0c:40:94:
                    44:00:af:a8:f0:32:e8:09:4c:45:f4:9c:e4:ff:96:
                    18:5b:40:84:e2:07:b7:18:86:a4:f1:2a:13:b3:87:
                    59:c2:ac:16:85:1f:fe:13:c8:2f:c3:b9:7b:69:e0:
                    02:2b:10:75:ef:f8:b2:f2:e8:58:13:27:c2:02:86:
                    ca:3f:b2:96:e2:ba:1d:4b:ee:95:9a:48:7d:26:3b:
                    21:69:e2:6e:a1:cd:0e:3b:2d:06:40:87:8e:47:fc:
                    7c:77:cf:1b:18:7f:c2:f8:99:e3:24:14:5d:2a:a6:
                    76:1a:a6:cc:0c:13:0b:85:a0:42:74:79:6c:ff:3e:
                    ad:84:13:98:f2:f1:ca:09:44:53:1f:6a:ed:06:9a:
                    2f:12:12:44:77:c4:1e:ba:42:13:36:3c:9e:2e:83:
                    bd:0c:d8:81:6f:e8:b6:42:0c:cb:2c:31:82:f7:4f:
                    e5:39:bb:2c:c6:9f:0a:82:8d:44:d4:d1:1c:f1:03:
                    a3:0a:6a:15:3f:2e:49:c2:37:fb:18:21:c3:bf:05:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:84:90:7E:93:8B:DE:CF:BE:E8:D3:B7:C0:EC:A5:27:66:F7:F2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/9dd1d6db-129b-393f-a276-bd09e28409f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl

            X509v3 Authority Key Identifier:
                keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:25:1b:09:6e:2a:c0:13:a9:65:40:79:a4:55:01:5a:3f:
         15:84:ad:20:3a:c5:6e:b1:cd:1d:b6:82:70:49:70:ab:93:a2:
         01:11:9a:13:5a:0b:09:7f:2e:02:23:41:ca:b8:50:f4:87:21:
         a5:74:de:26:b7:69:51:14:89:5f:33:cf:bd:d4:35:c0:a7:d4:
         1f:81:0c:f0:0e:e1:41:a9:ec:c4:a0:3e:ef:9d:06:b9:63:8b:
         2d:a9:1b:80:a1:e5:74:ee:26:0e:21:60:cb:d0:f7:17:66:0d:
         d5:9c:a2:08:90:79:0d:5e:8c:06:22:88:ca:66:20:03:4a:74:
         31:ec:f0:17:a0:6b:fa:f0:ac:a8:40:e9:9e:3a:89:58:f0:b5:
         a1:cd:86:6a:d1:5b:4f:f7:2a:b5:4b:55:98:3e:a3:79:27:9c:
         6f:a1:84:58:be:00:af:2f:3e:e5:43:b1:e5:43:16:a3:97:c2:
         da:ae:a8:f7:f8:08:07:95:ed:ff:3e:a8:88:8a:22:c7:0d:69:
         87:1c:99:10:41:aa:24:81:52:dc:90:25:d3:98:3b:cb:29:14:
         64:30:41:29:0e:93:59:fe:7f:46:0a:82:e4:02:c2:29:8c:89:
         ad:33:52:32:6c:6d:cc:b6:05:a6:0a:84:ae:18:fe:37:b0:c0:
         dc:6c:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:08:38 2026 by rpki-client