Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c21dcd73-733d-3c69-b0e5-e2d2614c178b.roa
File:                     c21dcd73-733d-3c69-b0e5-e2d2614c178b.roa (raw, json)
Hash identifier:          wr2HulxbmGVbUdMPBnkb7axrt7af+3HBDO1Anpim0lM=
Subject key identifier:   B0:5B:09:3D:9A:9F:15:AF:06:B6:62:72:0B:20:40:66:BA:59:03:20
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D2A06B6A4EF2C51CABA348
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c21dcd73-733d-3c69-b0e5-e2d2614c178b.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        204.85.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a0:6b:6a:4e:f2:c5:1c:ab:a3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=152e9cdd-2c8c-45e1-ad36-f5357a1f568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:d9:43:cc:d1:9b:53:98:3a:0d:91:0e:f1:
                    3a:64:d8:07:4a:8a:6a:11:95:33:c2:b5:a1:fd:fe:
                    7a:78:2f:08:32:bd:da:91:e9:7b:d0:a6:86:a9:3f:
                    1a:5f:82:ee:52:53:f4:e8:02:72:89:34:26:e8:20:
                    54:3f:86:3e:9f:22:e9:49:f9:5e:49:4d:1b:4d:2f:
                    3e:9a:66:af:70:9e:e6:1b:51:b1:df:c8:8a:12:fa:
                    0b:83:19:15:9f:47:78:20:dc:1c:29:54:32:2e:86:
                    7c:94:7a:04:48:4b:ec:67:c7:e7:bc:0c:54:93:2c:
                    2e:74:1b:bf:f2:14:db:18:e5:29:55:d1:e9:02:b0:
                    38:c6:bc:7d:7a:bd:13:20:1d:e3:45:9b:63:62:af:
                    af:0f:35:40:51:cd:d6:ed:bc:01:f6:2d:48:bd:9b:
                    0f:25:7c:e3:46:12:3b:5c:cc:11:1d:de:f9:0c:be:
                    fa:c7:08:5f:03:54:9c:ab:f7:9d:ef:da:d6:85:ba:
                    06:fe:5a:fd:34:17:76:21:26:dc:f4:55:31:02:d1:
                    31:70:10:56:5f:42:c1:33:f2:4b:ef:56:dc:29:03:
                    6b:d6:42:54:e9:5d:65:00:b9:11:89:91:55:92:e9:
                    76:79:96:68:27:ef:79:79:26:27:6a:e5:14:17:16:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5B:09:3D:9A:9F:15:AF:06:B6:62:72:0B:20:40:66:BA:59:03:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c21dcd73-733d-3c69-b0e5-e2d2614c178b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:e3:e2:0e:88:4b:e3:0a:d2:76:e4:ef:9d:b9:59:88:92:
         14:e1:b2:86:b4:c5:57:78:b2:a4:d6:bd:0f:e9:55:60:1e:33:
         5c:f7:ef:d7:6d:db:6b:ef:a7:fd:10:2a:f5:99:f1:0c:67:79:
         41:bd:52:c7:7b:e1:5c:16:aa:4c:10:26:1e:0b:12:9e:c3:7e:
         ad:0e:e8:78:eb:11:30:e4:8c:f0:77:6a:75:8c:4f:68:59:e5:
         8c:d1:76:63:17:a7:d5:47:e7:15:bb:1f:28:7c:ab:d1:57:11:
         9a:d0:ed:15:f9:2f:13:71:de:e1:61:59:0c:9f:1a:15:84:f7:
         43:81:fb:a2:91:92:28:bd:f0:9f:ed:0c:60:c8:9b:b5:86:21:
         6f:09:a7:8a:7f:29:70:d9:61:ac:72:58:16:46:a1:e7:03:c7:
         a8:d6:0d:2d:2c:af:84:54:4b:d1:40:84:7a:73:57:7b:86:24:
         43:c5:ad:ac:15:56:9b:b9:0f:1f:98:e5:78:7f:1a:be:5b:a8:
         6b:b6:05:f5:47:53:6e:71:69:a0:41:2c:81:e8:89:34:2a:67:
         2d:a3:64:84:d6:50:b1:ad:b0:9d:ec:a8:ce:06:71:26:f3:e5:
         3b:b6:50:0f:cd:50:4f:2d:7f:cb:e4:91:6a:68:a6:d4:01:dd:
         37:66:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:01:49 2026 by rpki-client