Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa
File:                     5317c311-b69c-3892-b288-522c8ee207cf.roa (raw, json)
Hash identifier:          R7lANqdSHZkZgaNpLq51ZwBuJ2oZkFV7VAfSn100sOU=
Subject key identifier:   22:C5:F0:0B:A8:7A:AA:F8:B0:40:99:55:01:E8:9A:0D:A5:2D:3B:5D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F51D2AC01D049DD5726D45040
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     3949
IP address blocks:        204.2.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:ac:01:d0:49:dd:57:26:d4:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=eda77f6d-fcbc-4d2f-aba3-eefc018663c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:f1:2a:a6:61:d9:f6:fb:30:29:68:97:ee:
                    77:aa:a9:c2:04:25:5f:7e:d2:27:0a:94:06:11:2d:
                    38:ef:f5:38:82:7e:c6:53:e8:b0:3f:93:83:3c:5a:
                    b8:9d:6b:f3:90:67:96:01:76:5f:ad:fc:0e:f8:86:
                    82:0a:54:6b:dc:9f:41:43:42:7b:2a:b2:bf:50:43:
                    0e:e6:49:2a:ed:83:59:61:3f:c1:fb:85:50:de:a5:
                    46:36:73:98:d2:c9:28:65:f1:e7:bd:50:a9:02:88:
                    d8:64:83:e8:9c:b0:7f:1a:ff:b9:1c:73:ed:3f:c3:
                    17:c4:63:b0:53:0a:8c:45:9d:4a:8c:e5:fd:46:76:
                    c9:fa:0f:9a:c9:48:39:c5:1a:48:1c:af:b6:93:05:
                    57:7d:1c:ec:dc:75:ac:48:48:0e:7e:4a:34:a0:0b:
                    f0:9c:ce:d9:5d:7d:3d:4e:a0:79:17:2d:68:c3:9f:
                    ae:8f:9e:22:c9:ed:ab:4d:6e:d3:92:70:86:8a:c2:
                    e7:76:c6:c2:a3:3a:ec:05:c2:27:fe:9b:4a:09:83:
                    47:7d:a4:21:f1:5f:27:d3:70:67:e6:77:d9:c3:40:
                    8b:6f:f6:1d:c4:d2:12:8c:37:e7:5c:69:28:26:92:
                    68:98:c0:d8:79:7a:87:86:0e:0c:54:12:4c:d0:ba:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:F0:0B:A8:7A:AA:F8:B0:40:99:55:01:E8:9A:0D:A5:2D:3B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:31:f4:51:df:0b:8e:d8:ed:04:68:d5:5d:23:21:2d:fb:63:
         a6:82:df:41:dc:53:f1:02:81:72:1d:f1:40:68:c4:37:c6:4d:
         71:d3:ce:da:bc:76:77:25:80:a1:a4:a9:d0:dc:69:94:db:36:
         8b:ce:6e:53:99:6f:a5:35:67:e4:7d:01:1c:c1:5e:bc:87:d4:
         3f:10:70:15:86:f6:39:7a:60:6d:d9:0e:4b:aa:5a:b2:cb:f7:
         1b:8d:6e:72:95:0a:d4:89:93:5a:b0:f6:90:fc:b2:eb:8d:d4:
         05:cf:eb:50:46:d1:63:0c:03:78:b9:4b:1f:d0:23:8d:69:e0:
         13:b8:10:79:d0:09:53:c6:d6:f7:10:e0:f6:cd:86:81:96:b8:
         c4:58:2f:6b:c6:8b:9f:47:a3:27:da:0d:c8:0b:9e:ef:a2:e3:
         11:e5:c9:eb:b7:3f:fc:ef:e7:a4:f6:e3:a0:75:b1:25:6c:06:
         0c:5a:32:c9:ec:e0:53:d0:66:9f:97:c2:17:b4:6b:88:9e:d0:
         3d:60:10:11:ad:8a:26:83:ff:21:ba:54:d6:5c:5c:c8:97:9e:
         f2:3c:68:c2:db:11:04:d0:89:8f:36:c7:7a:cd:b1:b9:2c:fa:
         23:d0:9b:6b:a8:a7:f2:00:22:6e:65:91:bc:89:3e:c1:57:96:
         bf:ca:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:09:17 2026 by rpki-client