Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa
File:                     edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa (raw, json)
Hash identifier:          v64Js5w9ymb4UiXW4L2gbQ1iO1h1XP3H4cQ/0gH7zkE=
Subject key identifier:   D9:72:A4:80:3E:F9:6A:FF:6A:41:A8:D6:75:4D:5D:A0:90:15:3E:BE
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F5767FF62B29710AEC0361F60
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     150436
IP address blocks:        128.1.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:ff:62:b2:97:10:ae:c0:36:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=3a291ee8-0de6-4116-bcc7-352c2d6a251d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:d3:07:a4:98:24:0e:3a:fe:32:22:be:1d:
                    e9:7a:64:85:6d:9a:2f:25:65:a5:3b:89:ae:df:4f:
                    20:6a:e6:fe:60:d1:24:b4:71:0f:2b:98:ff:f6:74:
                    35:43:22:30:b5:19:95:dd:2d:70:2f:af:12:12:87:
                    c7:2a:ac:94:d2:68:99:eb:93:46:aa:83:df:a6:cb:
                    f5:59:c0:c5:80:8f:06:60:1f:1d:d8:c0:c8:aa:76:
                    97:29:d5:49:c2:10:f8:b4:57:29:11:b5:3f:18:e1:
                    53:e1:87:db:28:e4:49:6d:84:01:32:c9:ef:91:43:
                    c9:c8:db:e8:32:c6:bc:fa:39:a9:c5:48:51:62:0f:
                    d2:38:c0:9a:82:75:9f:e7:5b:d6:e3:d0:54:8c:a5:
                    2e:fb:5b:16:e3:dd:7f:40:c8:2f:58:d2:21:6d:3d:
                    bb:1c:4a:f1:84:34:de:8c:0b:1f:55:c3:dc:cd:c5:
                    ca:62:85:81:6b:e1:3e:b0:74:cb:85:93:3f:bb:ee:
                    1d:ea:b5:57:c0:56:0b:b8:69:fe:90:db:2b:e3:b6:
                    e7:df:ed:8e:2a:31:9b:53:b4:3d:f6:7b:f3:4c:b5:
                    18:45:01:b7:b7:8c:69:cb:4e:d2:b7:59:5c:a6:a1:
                    b7:84:6a:00:29:3c:03:c6:cc:95:e9:13:39:00:c0:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:A4:80:3E:F9:6A:FF:6A:41:A8:D6:75:4D:5D:A0:90:15:3E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:71:66:52:28:48:f3:92:73:a7:da:4b:a0:11:c1:32:bd:
         af:ec:05:83:5b:23:c5:07:96:81:ef:01:d5:20:94:d1:0b:c6:
         b8:3a:28:c7:ba:98:c2:dd:bf:b1:b3:dc:f0:3a:f4:33:78:f4:
         41:0d:b4:55:88:a6:95:36:a1:be:0f:7a:01:40:c9:cd:b4:35:
         c4:54:36:13:39:84:41:ba:ed:1b:6e:6e:57:82:e2:76:a5:6f:
         ff:32:56:8e:d6:75:cc:e0:21:41:db:11:9f:14:5b:f0:62:3b:
         a2:11:4c:ef:c2:6c:17:9e:53:3a:bb:c3:88:34:ae:e8:ba:b3:
         79:c6:cb:2e:cc:4e:5b:c9:9a:af:56:74:ab:e7:8e:6d:1f:f4:
         0e:ac:00:0e:28:93:fe:4f:05:cd:de:d6:c6:cc:af:43:ed:bc:
         65:a9:e2:16:c8:90:3d:56:10:31:cc:9a:d5:6e:a2:2a:ad:19:
         41:7b:39:40:9c:67:80:4f:14:ba:59:e2:ae:94:70:f3:7b:d4:
         93:8d:53:a6:73:97:d9:52:51:12:47:3e:a4:5c:dc:ce:34:01:
         ba:e6:ff:80:a7:f4:ac:23:64:8f:de:52:a2:e0:53:c8:8d:8a:
         44:9a:e6:ee:29:6d:ef:40:ef:9a:a5:1f:ce:4b:52:df:f0:69:
         5c:90:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:28:38 2026 by rpki-client