Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa
File:                     a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa (raw, json)
Hash identifier:          AHyqh8u3YTVN/7+jqO/h6u++IQSmdKSP1H5zB4WQV8k=
Subject key identifier:   BC:E7:C6:C2:40:E3:46:28:9C:E5:E2:93:C7:4A:0E:A1:C1:96:E6:C5
Certificate issuer:       /CN=4171706d-65e0-4ab5-bbb3-8d0f79345c7b
Certificate serial:       010D0C9F4328584F7A8B4B1D7535A1EF68D9B4C0
Authority key identifier: 64:C4:F3:81:41:41:01:CA:54:69:CB:43:47:F3:57:0F:0A:07:0A:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa
Signing time:             Mon 12 Oct 2026 15:04:44 +0000
ROA not before:           Mon 12 Oct 2026 15:04:44 +0000
ROA not after:            Sun 10 Jan 2027 16:04:44 +0000
asID:                     47022
IP address blocks:        199.87.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:8b:4b:1d:75:35:a1:ef:68:d9:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4171706d-65e0-4ab5-bbb3-8d0f79345c7b
        Validity
            Not Before: Oct 12 15:04:44 2026 GMT
            Not After : Jan 10 16:04:44 2027 GMT
        Subject: CN=f2ac30ed-dd35-4fe7-a312-2d7b832fce1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:06:72:25:8d:1b:d7:35:c7:9e:09:2d:b4:
                    72:4d:ce:60:49:55:c9:88:7b:5b:08:19:99:18:b8:
                    2c:5d:79:d3:86:84:d4:a1:24:30:fa:29:f9:46:58:
                    81:f5:fd:50:bb:0a:0f:f0:84:47:fa:0a:63:56:25:
                    67:28:1e:f3:51:e9:a6:a5:1d:2c:1b:d7:f8:a9:07:
                    7d:43:d6:d3:35:9b:32:8e:6b:78:17:54:b4:e2:f1:
                    ce:ef:0f:d9:2d:28:1a:30:b2:5e:a8:ed:c3:e1:0d:
                    99:69:fc:81:9f:dd:19:b2:4d:25:84:9e:ff:89:d3:
                    13:8c:24:c4:f3:72:90:7c:54:54:fd:34:db:8c:90:
                    41:74:10:eb:d5:7a:14:46:61:3f:6e:e0:bc:db:4b:
                    d5:89:79:72:c1:3c:86:6c:0c:6c:af:1d:fc:3f:65:
                    cc:8b:d5:b1:18:3d:d1:63:84:d6:21:21:05:15:c1:
                    06:44:b3:79:36:43:21:96:a5:da:0c:11:6e:89:b5:
                    49:f1:2e:17:cd:73:50:b3:6c:36:6c:ab:8e:02:a1:
                    1c:c7:14:5a:80:65:da:9b:62:d1:9b:ca:7a:0e:dd:
                    2f:5a:53:64:c5:3c:cb:8a:05:24:33:75:9d:07:27:
                    c5:de:76:28:ca:1e:e1:9a:0b:f4:0e:1e:a7:ff:e7:
                    cc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:C6:C2:40:E3:46:28:9C:E5:E2:93:C7:4A:0E:A1:C1:96:E6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/a31f7f4c-9f05-3ad9-8712-c44091976fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.crl

            X509v3 Authority Key Identifier:
                keyid:64:C4:F3:81:41:41:01:CA:54:69:CB:43:47:F3:57:0F:0A:07:0A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:73:e1:a6:e9:6b:70:94:16:44:06:f8:00:ca:99:83:b0:0d:
         5a:a9:46:44:f9:8a:a4:89:27:f9:ad:71:97:11:93:ac:79:73:
         e3:51:ac:f4:68:c0:41:48:d4:6d:9e:ec:f1:a9:54:58:a4:42:
         93:af:c0:8a:4e:9b:29:60:e5:03:79:8c:73:d2:c8:5d:68:cb:
         c0:1d:5b:f2:d3:cf:3b:57:80:b9:cc:c4:cc:a2:dd:3a:71:1c:
         14:c2:18:5c:88:44:ae:18:69:0e:e3:40:14:c7:5f:95:00:20:
         26:92:93:da:e2:eb:99:6d:1d:c0:ba:19:cc:78:9e:3a:26:7b:
         d6:9a:5a:71:48:98:c3:63:2c:b9:2a:b4:75:23:40:07:d0:63:
         da:47:5a:be:a4:80:8e:ed:dc:b8:bb:82:59:7d:45:6f:7b:1e:
         b5:81:86:5d:28:6d:56:c1:6e:17:1e:72:93:80:7a:ab:95:13:
         15:68:a7:4a:87:f4:59:bd:f1:48:b7:d7:05:ff:c8:05:6a:df:
         c0:3a:4f:e0:12:3b:05:24:07:49:33:51:c3:cb:48:55:43:3b:
         0f:91:23:9b:2d:9f:c1:4e:c9:54:1a:eb:9c:0a:2c:b2:81:97:
         83:5b:1a:4d:62:9b:ad:af:95:3f:af:7d:da:69:1a:71:bd:0b:
         fc:8e:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:16:37 2026 by rpki-client