Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/d832bc95-2901-35c5-8348-b7020d7cb0dd.roa
File:                     d832bc95-2901-35c5-8348-b7020d7cb0dd.roa (raw, json)
Hash identifier:          T287q7vJMFHNUTqDnRwyGmeaJJwn60P2VHS1KYn3kik=
Subject key identifier:   D6:52:21:C8:61:AE:0B:09:AF:CA:DF:B1:E8:7E:A5:F7:96:F6:B8:2F
Certificate issuer:       /CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
Certificate serial:       010D0C9F4328584F8C72F6242EDCDAA65CD2F8C0
Authority key identifier: 9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/d832bc95-2901-35c5-8348-b7020d7cb0dd.roa
Signing time:             Mon 19 Oct 2026 01:00:12 +0000
ROA not before:           Mon 19 Oct 2026 01:00:12 +0000
ROA not after:            Sun 17 Jan 2027 02:00:12 +0000
asID:                     14618
IP address blocks:        209.51.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8c:72:f6:24:2e:dc:da:a6:5c:d2:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
        Validity
            Not Before: Oct 19 01:00:12 2026 GMT
            Not After : Jan 17 02:00:12 2027 GMT
        Subject: CN=3eed9a89-82df-4b69-ba2d-1a5142e06d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:fe:b4:60:21:bf:62:73:ad:3e:64:22:d7:
                    64:9c:3d:1b:e9:ac:63:fb:34:07:73:a3:8f:9a:2f:
                    7e:b3:78:32:ce:63:c6:82:35:72:65:db:e2:6f:4b:
                    9e:ce:11:27:17:94:85:5b:3e:9a:d6:da:9d:0a:5d:
                    99:df:33:34:57:de:2e:18:03:08:6a:6b:33:77:17:
                    4a:92:8b:31:a3:6f:9a:4f:28:98:99:66:7e:c4:b6:
                    bd:b5:46:ee:be:4e:63:33:76:20:1b:4f:2f:4f:5b:
                    bb:f3:35:bd:2f:ab:47:8c:92:b9:d2:f3:b6:cd:4c:
                    a7:c1:dd:da:dc:36:a1:47:6c:c9:d0:07:ee:79:fa:
                    bb:7d:83:87:ee:c2:69:f8:d4:34:3a:85:85:21:f2:
                    27:d5:94:a7:81:63:70:27:72:e7:9f:eb:f0:3a:ce:
                    0a:7f:eb:cc:00:8a:2f:6d:ed:b7:e3:73:cb:47:45:
                    19:48:4f:61:23:83:28:74:9d:d9:6b:76:b3:ef:93:
                    c0:dd:d2:57:7a:b7:b7:98:91:36:3f:ec:f7:d3:df:
                    7d:63:62:00:cb:e5:4e:5d:bc:79:56:19:ef:ae:f5:
                    27:af:d8:fe:36:74:d8:ad:4a:13:91:fe:47:19:c3:
                    da:de:d3:f3:a9:97:76:82:6e:77:19:4d:58:02:15:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:52:21:C8:61:AE:0B:09:AF:CA:DF:B1:E8:7E:A5:F7:96:F6:B8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/d832bc95-2901-35c5-8348-b7020d7cb0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:80:32:8f:b2:7b:cf:85:7c:19:f2:96:6e:36:ea:46:9d:
         ea:9b:68:3c:e3:81:6d:de:f2:e3:45:f3:3a:11:25:08:1e:5b:
         74:ce:e1:c4:fd:ea:3f:07:06:17:f9:5d:17:c6:2a:2f:e6:1c:
         7d:1d:1d:c5:42:c4:6f:33:21:47:9c:11:f7:e7:aa:68:ce:98:
         06:23:9c:d1:91:49:45:70:c8:ca:d9:65:7d:0f:15:c1:a1:10:
         2d:06:ca:5e:ae:52:52:ab:65:7c:90:47:e0:24:b5:ab:43:70:
         fa:21:a5:49:97:1a:87:5c:7c:f5:e6:af:2c:f5:21:85:e7:04:
         b0:85:67:23:d6:2c:7e:f6:8e:da:0f:f1:2a:1a:a3:8a:0d:8c:
         67:e5:58:20:c7:c7:9f:b6:1e:42:18:56:c4:bc:a9:a2:29:4f:
         8f:6b:40:8f:c4:89:31:2d:2a:69:fb:38:aa:11:3f:71:23:a8:
         60:39:d6:e8:b0:22:d7:ae:85:fa:52:b9:28:11:55:cb:80:d5:
         29:17:96:41:d0:e2:26:8d:16:b5:6c:d8:11:c6:1d:c7:90:3c:
         c7:2c:ad:47:fe:3f:82:ac:7a:11:b6:b6:fe:80:c0:b9:4d:49:
         53:bf:17:5a:8b:aa:a7:e6:0d:15:fe:71:c7:3a:ee:a8:28:68:
         1b:0f:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:43 2026 by rpki-client