Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa
File:                     e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa (raw, json)
Hash identifier:          Wongm9TDgsS/jSeVLjtS9U9hYJULN4UTttBQl3Oqjfk=
Subject key identifier:   19:19:9A:92:14:9A:0F:F2:0C:F4:1A:A4:A9:91:BC:2A:02:89:47:2B
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584DA815852A48D50D0639E44100
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     11248
IP address blocks:        204.8.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:85:2a:48:d5:0d:06:39:e4:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=69f5ca45-bb3f-4e24-8a77-f8edf412a011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:ce:57:13:e4:bb:31:22:4f:28:82:d0:d4:
                    18:61:fc:79:4e:b3:0a:b4:1c:85:a9:b9:28:80:2e:
                    fe:e2:e1:55:d1:10:f2:2d:04:02:3f:dd:1d:4e:a0:
                    d1:ff:6d:d8:8f:b0:03:b8:dd:1d:fe:f3:a2:ad:9b:
                    4b:58:39:88:b9:91:7a:71:81:40:bd:cf:2a:15:8b:
                    49:07:f5:e1:46:d6:b7:0e:2a:31:60:62:e9:e2:04:
                    cf:17:26:95:4c:df:b8:58:79:9e:8f:17:0a:1b:e4:
                    cc:a8:63:82:c9:4e:9b:a9:0e:74:86:b4:d6:48:66:
                    fa:77:d1:78:85:44:f8:fd:16:24:b6:0e:66:6e:e2:
                    1d:99:26:35:98:66:1d:79:bc:4d:c9:74:10:91:33:
                    10:be:5a:a4:cc:1b:fe:d5:89:31:66:3b:2a:e5:38:
                    bd:d7:f9:5a:90:4a:3a:70:f8:7c:3d:ee:7a:b8:7b:
                    87:f4:1d:ba:8d:99:8f:fe:39:a7:95:d8:35:d1:48:
                    7c:11:8e:bd:66:4e:05:a1:32:e6:6b:53:26:a1:e9:
                    d9:59:3f:f4:4d:12:d9:42:05:94:a8:dd:25:c2:a7:
                    19:45:71:f2:5b:89:97:58:99:41:a9:0c:f3:92:d0:
                    59:8a:b3:17:4a:9b:bb:a1:c9:06:07:0d:2c:ae:82:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:19:9A:92:14:9A:0F:F2:0C:F4:1A:A4:A9:91:BC:2A:02:89:47:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:73:a9:cb:0b:c8:d6:d6:25:ff:8a:c3:ad:4e:35:fd:72:
         b3:f4:0c:d3:40:93:99:31:52:4b:31:3a:47:ab:69:01:ca:55:
         32:31:ea:27:72:cb:23:f2:25:a4:0a:fa:cd:a3:e1:21:e9:ab:
         a0:40:3b:ef:f0:dd:e7:2d:31:6f:7c:31:2f:3f:43:bf:ad:c2:
         b8:a4:70:71:e5:f3:17:a4:84:38:c2:cb:28:54:6a:b8:9d:90:
         30:03:51:60:d7:9d:0c:04:b2:96:e7:21:b6:e4:b0:46:3f:6f:
         45:6d:d8:65:0a:d2:77:86:95:4a:96:db:28:39:f1:6e:02:d8:
         84:d3:5c:8d:e9:f6:3e:c3:de:0d:7c:08:b0:c2:39:b6:39:dc:
         8d:f5:19:cf:9f:1d:02:a5:7e:1c:6d:69:c1:10:b0:83:83:30:
         9e:4d:54:9f:bc:c8:8b:3f:be:22:a4:a3:06:30:77:44:aa:0e:
         9b:c2:7f:57:e5:54:57:60:47:af:18:90:04:d4:5b:98:50:1d:
         9d:47:01:eb:9b:f8:5f:91:7e:3f:85:ea:0a:ea:08:96:8b:9b:
         9d:ff:db:33:28:fc:c1:04:73:17:66:cb:02:d3:f0:15:7e:84:
         64:c5:e1:a0:f3:ea:e4:aa:6e:05:e8:15:d7:a2:32:94:14:de:
         24:f1:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:49:23 2026 by rpki-client