Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/4d47a0d6-a2fd-3afb-b7ba-29db39da23d8.roa
File:                     4d47a0d6-a2fd-3afb-b7ba-29db39da23d8.roa (raw, json)
Hash identifier:          s5RFF6dWYM26RrEQlD4wB5rWELAf1c4rwKk6ATmxvJ8=
Subject key identifier:   72:B0:3D:39:CB:B6:64:4E:95:C4:09:A0:32:12:2C:17:37:09:62:32
Certificate issuer:       /CN=c327d959-17ff-4ba3-9e1b-4137bf227cf8
Certificate serial:       010D0C9F4328584F6090F78FC90F3DF163F451B8
Authority key identifier: 47:25:67:E6:7A:AC:25:61:39:54:DD:2F:A8:79:85:F8:61:8E:76:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/4d47a0d6-a2fd-3afb-b7ba-29db39da23d8.roa
Signing time:             Sat 03 Oct 2026 07:45:09 +0000
ROA not before:           Sat 03 Oct 2026 07:45:09 +0000
ROA not after:            Fri 01 Jan 2027 08:45:09 +0000
asID:                     402467
IP address blocks:        209.127.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/c327d959-17ff-4ba3-9e1b-4137bf227cf8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/c327d959-17ff-4ba3-9e1b-4137bf227cf8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:60:90:f7:8f:c9:0f:3d:f1:63:f4:51:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c327d959-17ff-4ba3-9e1b-4137bf227cf8
        Validity
            Not Before: Oct  3 07:45:09 2026 GMT
            Not After : Jan  1 08:45:09 2027 GMT
        Subject: CN=a595b534-2322-4bbf-844b-b862b73dd19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:59:da:fd:25:99:6d:63:dc:96:06:d2:b9:
                    b9:e6:3f:56:19:ce:a2:f2:62:15:8f:8f:56:8a:ea:
                    ca:04:92:9c:55:61:36:c9:4b:7f:28:d9:99:32:37:
                    d4:fd:61:27:47:90:6b:5e:40:75:ec:fe:60:b0:1e:
                    6a:a9:96:f4:73:dc:ff:3f:6a:c6:47:5b:12:8a:d2:
                    bd:a0:48:da:28:5e:7c:b3:92:18:0d:f7:54:62:e3:
                    f2:aa:28:06:77:f6:1c:e4:67:93:07:2e:bb:2e:6e:
                    bc:f6:4b:bd:b9:17:a3:3f:6c:47:a0:a3:48:26:0f:
                    e7:8e:50:ae:8a:f8:09:68:a3:d8:39:8c:fc:72:ad:
                    2e:40:42:ef:ac:b5:07:9f:f7:8b:0b:2b:2e:24:97:
                    ba:de:1e:70:dc:c1:98:48:fe:5b:17:c5:c2:9a:c2:
                    f9:e5:ad:54:5f:19:9b:24:d5:b8:3e:38:03:ba:de:
                    30:fd:21:cb:68:63:c3:3e:70:c8:9f:6c:ea:93:70:
                    3d:8e:dd:a8:62:da:ce:c5:2f:e0:5b:28:7a:c9:d3:
                    7d:d2:aa:5e:4b:9e:bc:2c:73:51:9d:3a:50:19:ac:
                    85:bc:57:27:41:44:34:aa:fc:66:91:64:6b:6d:3b:
                    24:36:1a:85:83:96:20:30:e9:e0:4e:af:2f:43:b0:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B0:3D:39:CB:B6:64:4E:95:C4:09:A0:32:12:2C:17:37:09:62:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/4d47a0d6-a2fd-3afb-b7ba-29db39da23d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/c327d959-17ff-4ba3-9e1b-4137bf227cf8.crl

            X509v3 Authority Key Identifier:
                keyid:47:25:67:E6:7A:AC:25:61:39:54:DD:2F:A8:79:85:F8:61:8E:76:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:5b:eb:b8:e2:7a:eb:29:94:0f:54:77:1c:55:c9:1b:38:
         52:6f:a4:f9:17:b9:c3:b2:19:34:e0:5d:30:d2:fd:57:46:c4:
         c5:06:ef:43:ea:46:8c:be:a2:55:30:fe:18:56:2b:91:46:f9:
         b0:9b:30:f2:96:3f:15:d7:12:14:28:49:b3:e3:11:73:c6:05:
         19:ac:e7:89:fa:c1:ad:69:cb:1f:29:b9:0f:53:13:31:6c:72:
         1b:d6:60:9d:e4:98:f7:fa:bd:f3:12:af:9b:65:54:7e:a9:b2:
         65:c7:bd:9b:7e:3f:07:42:c0:95:4b:06:48:e7:dc:ac:7a:52:
         31:de:2e:94:4d:7a:5f:8b:48:e2:09:5e:eb:97:a8:9e:9d:16:
         a7:6d:ef:fc:71:2f:b7:f2:32:ae:80:ad:e8:3a:d7:20:78:05:
         2a:37:a3:d3:7a:46:5c:aa:89:51:b1:2b:8a:dd:25:e5:1d:b9:
         f3:11:d8:f7:79:62:9a:63:f2:20:db:e5:8f:cd:2a:d8:c7:44:
         c5:cf:a2:10:69:0d:b1:fe:a3:5b:4c:bf:9e:4b:3d:ee:d5:e9:
         46:37:ec:e9:04:b8:ac:8b:e8:34:b4:1c:66:3f:33:2d:3f:5c:
         21:46:c6:ed:ce:b4:80:63:7a:a3:59:92:54:fc:da:9a:0e:e3:
         07:04:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:31:54 2026 by rpki-client