Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/809fd0eb-0d01-3c93-9c42-a269dff69e20.roa
File:                     809fd0eb-0d01-3c93-9c42-a269dff69e20.roa (raw, json)
Hash identifier:          ZNKyBPoBXjSsvhnLP2atcGs90SHKWhLeTxtVN9ogc/o=
Subject key identifier:   59:83:51:D3:71:92:45:0A:B4:9E:2B:58:40:83:99:5F:3E:41:CE:84
Certificate issuer:       /CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
Certificate serial:       010D0C9F4328584F5A32A22A461722B01F75CE00
Authority key identifier: DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/809fd0eb-0d01-3c93-9c42-a269dff69e20.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     393406
IP address blocks:        208.92.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a2:2a:46:17:22:b0:1f:75:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=7fac9526-8142-43de-9e85-1eb894aaf755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:38:61:39:fa:c5:19:82:d0:a0:5e:e3:84:
                    09:cb:10:3a:61:4d:bd:45:74:81:7f:2e:69:13:2a:
                    e6:ca:69:9b:68:39:93:84:f1:01:19:54:d0:d4:46:
                    7d:84:0d:e3:87:e6:6e:14:30:af:af:1d:84:d8:1f:
                    3b:b6:b0:0d:58:0d:0f:6c:4c:24:db:75:ee:25:0d:
                    ff:94:79:b2:9f:7b:4e:d8:84:8b:0a:76:31:16:1b:
                    30:06:f3:5f:40:d4:bd:bf:a0:e9:8e:47:6b:ec:3d:
                    db:d5:26:e6:c6:84:4b:58:9f:2f:44:b0:36:7b:7f:
                    82:87:03:3a:a2:f0:72:b6:8d:03:72:43:4e:d2:f4:
                    1d:b0:14:17:b1:00:c7:f0:2c:0c:1c:de:11:0d:e8:
                    d0:ca:b4:7f:4c:45:88:cd:54:ed:27:3a:f4:dc:0c:
                    b2:dc:83:06:64:b3:c9:30:88:c7:ab:60:43:6d:4c:
                    35:87:d3:f9:f8:44:f5:6c:56:c2:ad:45:4f:9e:18:
                    87:79:40:a0:31:ba:bd:74:74:f7:bf:a8:a0:b2:ba:
                    c7:39:64:6f:aa:69:6b:c0:41:25:25:f1:93:6a:2f:
                    0a:ec:95:b5:8a:18:fd:10:e0:fd:5d:20:7d:1f:c9:
                    a5:9a:7c:d4:cb:a2:2c:f4:ab:bd:7a:46:8c:d3:8a:
                    3c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:51:D3:71:92:45:0A:B4:9E:2B:58:40:83:99:5F:3E:41:CE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/809fd0eb-0d01-3c93-9c42-a269dff69e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl

            X509v3 Authority Key Identifier:
                keyid:DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:55:7d:d9:28:af:99:35:87:90:de:81:db:76:ca:1f:fc:
         38:09:92:ec:ba:dc:c7:5a:04:3e:7c:53:ce:b7:2b:54:77:b2:
         f4:5a:5d:dd:f8:f9:bc:ae:6f:2c:f7:5c:f7:b0:12:de:e3:a2:
         67:e2:11:8d:b8:84:bc:a0:86:31:85:75:1a:d2:26:27:15:80:
         2c:a8:99:0d:ff:3a:c0:f3:f7:fe:4b:21:9c:f2:54:34:c3:90:
         b8:bc:a5:87:7a:70:b9:9f:2f:69:d3:a5:b6:43:ae:ef:64:e9:
         c6:39:4e:62:cc:b7:6d:39:66:9b:48:ca:a6:56:d3:7f:9f:5d:
         6d:b6:36:fd:14:57:ad:b1:74:09:ff:39:bf:13:63:c8:bd:a4:
         5c:bb:48:11:58:da:52:18:4b:5c:d6:b9:4f:fc:0a:69:26:3c:
         57:a8:08:b5:ac:cc:a1:a0:52:5b:99:83:f4:df:75:bd:91:8d:
         e1:68:54:3e:41:81:c9:e0:b4:e8:63:c2:dc:8e:20:c8:6b:55:
         7d:79:d3:01:1f:eb:a2:57:7c:7d:6a:82:c9:84:d3:a8:0b:b2:
         38:f2:6e:9d:1d:3b:aa:70:79:33:95:b5:e7:ec:7b:bb:c0:91:
         a4:85:60:65:3b:68:c6:06:71:a3:30:04:db:69:1b:dc:40:e6:
         d2:e0:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:47:44 2026 by rpki-client