Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/95012e72-cf7f-3ec9-81c7-21449033d8c1.roa
File:                     95012e72-cf7f-3ec9-81c7-21449033d8c1.roa (raw, json)
Hash identifier:          lDjm8ngCE9SMQPY3ROTOBKoF5PhV7MxTsm2TproalaU=
Subject key identifier:   DC:9F:D6:67:AD:D5:5A:BE:01:D7:53:D9:2D:4F:95:30:57:F2:87:C2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D2A051F04140ABA1DC88E8
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/95012e72-cf7f-3ec9-81c7-21449033d8c1.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        204.85.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a0:51:f0:41:40:ab:a1:dc:88:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=c1389dcc-0dd1-48e7-a3b2-4d10463ddbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:de:b2:fc:de:6d:f3:50:4f:55:b6:48:10:
                    0f:4a:d6:33:b5:5c:f3:e0:7a:f9:3e:73:35:29:ff:
                    9e:c6:62:e2:28:9e:e2:5c:d5:11:ff:d3:e8:5a:db:
                    b7:18:1b:1a:fe:ad:a8:29:9f:be:2a:80:c6:5b:b7:
                    2d:56:1b:6b:2f:b4:1b:4e:7d:63:67:b0:04:94:9b:
                    39:dc:bd:66:2a:6e:98:6f:ab:3b:54:96:24:a2:32:
                    95:f1:69:be:cc:d8:af:a8:aa:d7:0e:80:e7:1b:8b:
                    41:a1:8b:ab:73:d8:d3:f7:03:79:23:3a:0c:2c:75:
                    07:04:54:73:67:ba:f7:d4:cb:be:a2:e9:17:71:c5:
                    bc:87:57:28:bf:6c:7e:0e:05:f6:51:cf:58:6e:e0:
                    ab:ac:a2:4f:bf:37:65:f4:7e:4b:08:2d:50:0a:2b:
                    6c:b1:c6:3e:69:16:6f:aa:f9:ac:76:81:3a:cf:6f:
                    f3:95:29:13:67:33:e4:3c:54:71:42:b8:8c:4e:86:
                    b5:5c:a6:75:18:dd:79:3c:5d:8d:a4:2f:f8:fb:fe:
                    c2:49:e7:cb:d1:e3:ee:de:25:6a:ea:b5:bf:8f:9c:
                    85:5e:75:b5:64:62:3c:4f:5a:37:78:87:45:a8:fd:
                    43:d1:25:2f:bc:fb:40:0c:eb:19:14:6d:bf:db:e8:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9F:D6:67:AD:D5:5A:BE:01:D7:53:D9:2D:4F:95:30:57:F2:87:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/95012e72-cf7f-3ec9-81c7-21449033d8c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:90:53:e9:da:c4:6a:21:11:10:82:d1:ba:ec:33:98:a0:7c:
         e0:85:64:a5:11:4b:0e:3d:0d:8e:37:0d:53:79:3e:d8:70:ed:
         78:01:15:7c:7f:4f:e7:4c:57:5c:cd:06:33:72:43:24:e0:7a:
         9d:69:36:02:5e:c6:72:c5:ce:ee:b4:1c:03:6e:82:55:19:28:
         54:e8:65:98:95:49:07:af:e3:8a:ca:01:ba:70:e3:05:af:5a:
         3b:fd:40:b2:80:d0:84:d3:bf:84:d2:fc:84:62:d6:3b:b8:c7:
         1a:06:28:ae:60:18:ec:be:dd:cd:15:48:61:02:aa:fe:8f:cf:
         5a:02:be:ed:cb:95:c6:3f:36:22:87:37:19:20:b2:51:3c:bc:
         95:3d:06:f0:15:84:5f:87:ea:0c:04:5e:9d:ab:5d:c7:28:ad:
         ab:a7:12:3b:3b:f1:6f:c7:59:19:b2:48:f7:81:d4:e5:76:58:
         07:60:ee:b0:d5:e5:20:4a:39:b5:c8:f6:01:8e:20:0e:33:8a:
         af:51:25:1b:75:b0:b4:51:be:ca:21:8f:95:b5:ff:80:00:ee:
         bb:f7:b4:53:38:12:db:5c:fa:89:c5:92:5e:39:0a:52:56:c5:
         73:41:85:f8:e8:81:7d:fe:49:e8:18:03:d9:6d:b4:4b:ce:b6:
         2e:d2:bb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:54:04 2026 by rpki-client