Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/9d07777d-088d-3360-b7db-aa8fef4ec681.roa
File:                     9d07777d-088d-3360-b7db-aa8fef4ec681.roa (raw, json)
Hash identifier:          twezUqYDpeyBHJAtO54HtRbg+3tuOSOBeUxowD8vB90=
Subject key identifier:   77:09:80:C4:A9:73:FD:9E:21:C9:AB:B1:49:35:3E:93:51:B1:42:1F
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F4328584F1DFD63957443CDB3E55BB100
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/9d07777d-088d-3360-b7db-aa8fef4ec681.roa
Signing time:             Wed 09 Sep 2026 11:24:26 +0000
ROA not before:           Wed 09 Sep 2026 11:24:26 +0000
ROA not after:            Tue 08 Dec 2026 12:24:26 +0000
asID:                     20473
IP address blocks:        104.224.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1d:fd:63:95:74:43:cd:b3:e5:5b:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Sep  9 11:24:26 2026 GMT
            Not After : Dec  8 12:24:26 2026 GMT
        Subject: CN=c56ac289-887c-4838-bfe2-8cfd2c2be748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:a6:e3:96:96:1a:a3:2f:8d:aa:1f:83:30:
                    73:bc:6f:d6:08:e7:e9:a6:96:76:74:ab:a4:0a:09:
                    80:2c:57:8c:86:65:46:9a:58:f4:a9:e6:e5:52:13:
                    d7:a2:19:26:74:da:e3:d9:4e:67:bc:af:80:20:53:
                    bd:45:ec:be:69:d4:76:ad:c6:27:98:8f:cc:7d:da:
                    d4:41:1d:48:ad:3b:8c:26:73:21:33:2f:bb:0c:5a:
                    75:43:1c:2f:55:4b:28:ec:03:9b:8e:94:cb:50:25:
                    8e:2c:8c:e4:15:13:a0:d3:07:56:88:9c:6b:76:47:
                    5d:4e:79:6d:94:16:6f:49:9b:2c:4c:d7:5f:91:79:
                    e1:f5:93:c1:18:48:b3:73:0b:d6:c8:31:fb:9c:f0:
                    9b:68:ad:b7:d6:01:db:e2:a8:ad:c9:c6:1d:d3:78:
                    83:90:00:c3:e2:d2:06:69:07:ad:0f:6b:7d:d9:38:
                    78:7f:4b:0d:86:f7:4d:c1:4a:33:c8:8f:06:59:2a:
                    d5:f8:e5:a4:86:e6:6c:c7:96:10:34:8b:a0:08:4c:
                    bd:aa:1c:59:4d:d6:a4:60:42:c8:86:8c:7d:45:4f:
                    01:8f:30:2a:52:5e:79:8f:cf:46:80:2f:25:82:37:
                    3c:55:3a:0d:59:48:cd:8d:d1:ca:c4:83:29:81:65:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:09:80:C4:A9:73:FD:9E:21:C9:AB:B1:49:35:3E:93:51:B1:42:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/9d07777d-088d-3360-b7db-aa8fef4ec681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c5:b6:f3:20:49:99:89:de:74:7a:1e:6a:40:ed:57:dd:e0:
         5a:8a:28:dd:9b:34:9a:08:65:68:e9:82:a6:e5:01:78:6f:a2:
         88:9a:2d:00:02:98:71:8a:5e:d1:fe:41:16:55:16:e1:e0:f2:
         2f:87:7d:9f:fd:bb:4d:01:83:25:82:02:52:77:05:eb:87:67:
         34:c0:6e:c3:b5:dd:04:7d:af:39:48:de:0d:ba:5b:2e:61:e6:
         50:a5:64:7e:25:81:b8:46:96:c5:01:21:82:fd:ef:45:cb:c0:
         98:1e:ef:03:1c:37:8d:f3:e0:9c:c7:a1:f1:85:92:eb:f4:c2:
         7b:e3:6b:d5:88:b9:e3:8b:88:14:0e:1c:01:ae:ff:2f:d2:76:
         a6:1c:e6:72:3e:3f:24:c0:b4:19:62:b0:5f:b4:04:a1:1f:4f:
         0e:68:39:76:42:57:cd:75:6d:59:55:21:76:a8:9f:bc:54:69:
         64:cd:17:b9:8c:b6:c4:00:29:2b:37:16:96:8b:57:70:46:2c:
         6b:20:cc:52:9f:57:2c:79:b6:b3:e3:a4:99:ca:a4:99:5f:fa:
         f0:67:e7:35:67:83:65:36:dc:26:5d:76:17:4d:44:a4:9c:0d:
         1f:2b:a5:d0:77:10:7b:e3:70:e7:b4:fb:00:43:29:e6:12:4a:
         45:c8:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:50:04 2026 by rpki-client