Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dc4b8191-63b4-339b-9a65-c3cb696113dc.roa
File:                     dc4b8191-63b4-339b-9a65-c3cb696113dc.roa (raw, json)
Hash identifier:          mwA/5GcE4RDvwNwmr3nv8QcqBYD4T+/hHYBeXtytR7Y=
Subject key identifier:   8E:FA:40:FF:32:62:7F:E4:37:A9:58:DF:99:7D:8D:4D:8A:0E:23:8E
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F655D6AA6A9559C1794832200
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dc4b8191-63b4-339b-9a65-c3cb696113dc.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     62164
IP address blocks:        217.20.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6a:a6:a9:55:9c:17:94:83:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=e7ab91ae-9f37-4cb4-b6f6-c49ed9c2b873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:b3:1f:ac:ff:aa:ab:cf:50:64:59:db:a1:
                    b4:b2:94:77:2c:f8:28:66:33:9a:fa:25:bc:3d:af:
                    9c:54:f3:ec:65:6f:78:52:d4:d1:cd:11:80:4c:4c:
                    c3:c7:32:6c:d0:f7:9d:a5:14:f5:44:15:48:f8:e3:
                    3e:f8:96:38:95:23:f7:f8:1a:71:3b:42:1e:42:1b:
                    87:44:6d:d4:b6:b9:30:94:ac:07:04:99:83:a4:0b:
                    64:e2:cd:8f:28:f3:2d:54:11:97:99:a6:13:ef:69:
                    4c:63:4f:11:91:84:08:6a:d4:23:ab:fc:d3:11:73:
                    61:4e:5f:b9:20:4b:51:8b:97:68:49:36:b5:d7:c4:
                    62:3f:d9:45:81:a2:22:94:fc:b3:9a:46:2d:7f:b1:
                    c0:05:40:65:cf:ef:90:8d:db:8b:e0:7c:4e:ab:37:
                    0a:8e:57:54:3f:a4:21:80:a9:6e:a2:82:3e:63:63:
                    99:43:ea:00:d1:6c:1c:05:dd:41:3e:eb:ab:2a:cf:
                    06:c2:f7:0e:d9:59:00:23:f2:a7:f8:0e:6e:c4:70:
                    ea:74:e1:fb:fc:a5:37:ed:97:64:96:30:2f:50:fb:
                    16:90:d7:4b:69:d8:30:6a:65:f8:08:02:d4:96:1a:
                    56:3b:75:cb:65:f7:64:c0:7f:4a:e1:1c:85:64:38:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:40:FF:32:62:7F:E4:37:A9:58:DF:99:7D:8D:4D:8A:0E:23:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dc4b8191-63b4-339b-9a65-c3cb696113dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.20.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:48:97:2b:fa:95:2e:bb:3e:8b:31:fd:00:90:9e:5b:52:
         b1:02:ee:7d:02:44:9d:64:05:1e:92:70:92:e6:8d:cc:1d:17:
         e0:93:82:61:71:01:09:46:cd:85:3b:b7:94:27:fa:d9:8c:2e:
         66:f4:8e:9b:17:0e:4e:7b:57:37:bc:9e:82:25:e2:b3:a7:06:
         bc:e9:63:4f:b3:04:26:1f:50:66:d7:04:f1:6c:e3:46:91:54:
         b0:08:6a:d7:eb:bf:43:3a:41:b7:eb:75:36:21:63:e9:9c:07:
         62:94:16:61:32:39:74:1d:82:17:f1:43:ea:37:fd:c3:27:c9:
         ee:ab:52:79:a1:6b:ad:8c:58:a4:ee:84:5f:92:ce:4b:93:9d:
         2c:ba:b9:47:7f:0c:a7:2f:f6:3a:53:ac:8a:06:2e:f9:c7:a8:
         1d:b1:fd:37:95:a9:44:6d:0b:e6:f7:7b:35:e1:ae:83:ed:58:
         ac:9b:55:ec:45:a1:17:04:90:e2:a0:74:84:18:4a:2c:bd:17:
         83:6c:98:4a:af:1f:78:ce:fd:c5:70:8b:b8:51:46:19:a8:d3:
         c8:29:d4:e3:92:a9:53:cc:dc:c0:28:12:b2:f2:0d:9c:15:7b:
         de:94:97:c8:54:89:c7:d6:08:9e:c5:0e:e6:95:f4:ae:e4:92:
         98:37:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:57 2026 by rpki-client