Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa
File:                     827d8887-e52b-303b-a249-a9d675c75f4f.roa (raw, json)
Hash identifier:          4mMJXZCuGh+h1zVnraTNkv+98HV/tjhx1+3gaDVj2JI=
Subject key identifier:   9F:EA:4F:4D:27:D7:98:49:C7:4F:D1:D2:7E:33:9D:71:FB:72:4A:3E
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584F8DD851414DDA841282A1F240
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     394625
IP address blocks:        199.38.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:51:41:4d:da:84:12:82:a1:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=98c3ee6a-a96a-400f-9d63-a37e25c8de10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:a4:e6:f1:7a:3a:16:dd:3c:34:9d:86:da:
                    3b:2e:38:10:57:c5:13:86:2e:31:56:b3:f3:52:19:
                    d4:3a:c6:33:7b:bf:09:86:21:9c:ef:f5:a7:1d:86:
                    e9:25:5e:5e:48:96:ab:df:2d:43:58:dd:f9:49:37:
                    18:c5:a2:3d:a5:4d:1e:8b:25:2a:24:39:33:2c:30:
                    e9:7a:a6:a4:35:9e:a1:70:d3:1a:12:5f:38:ff:09:
                    e8:d8:80:74:ba:87:4f:0d:22:9c:2c:8a:13:b0:56:
                    ed:7b:6d:c8:0d:f7:7b:63:09:99:1b:7e:c7:f3:a2:
                    ef:38:6d:db:68:63:7b:46:39:e4:d3:e9:69:e2:07:
                    0f:82:b7:a9:99:54:68:dd:ac:0c:f4:fb:ef:a5:a9:
                    81:74:f6:6c:db:bc:fb:f2:25:a6:03:61:90:ef:f2:
                    6e:d2:fd:df:5c:cb:b0:f8:09:43:89:d5:66:eb:9b:
                    17:2a:92:f8:27:77:9f:ca:5e:9c:0b:ce:9c:f4:9e:
                    16:ee:3f:dc:65:43:ba:2c:fa:c2:2c:41:63:12:b0:
                    9e:fb:be:4a:55:18:76:79:a6:2f:a4:c9:cd:2f:33:
                    53:29:6f:e0:f6:bf:d7:9d:67:6c:7d:5d:90:fe:60:
                    8a:b6:74:1a:40:aa:82:b7:9e:ad:fc:44:a8:7b:f4:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EA:4F:4D:27:D7:98:49:C7:4F:D1:D2:7E:33:9D:71:FB:72:4A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:c8:9f:06:31:f8:d1:76:97:02:a4:4b:69:f0:17:6f:c2:
         71:48:76:46:ac:7a:ac:1b:73:69:98:3c:6e:d3:8d:5a:25:94:
         9b:6a:b4:e1:a3:7d:b1:2f:6c:ab:86:35:b8:58:9d:18:80:4c:
         ef:31:fa:e2:d7:04:1f:f6:54:f4:05:51:53:73:ad:91:1a:07:
         ad:43:20:1c:14:ea:e6:5a:da:d8:b7:c2:d8:0e:c4:3d:ee:64:
         f4:75:b3:e8:4a:4b:09:80:9a:63:02:e5:11:d4:02:a7:20:c4:
         6e:22:2a:c1:2b:05:2f:53:9e:a0:6b:0c:ed:77:a1:a1:16:77:
         92:19:df:88:1f:79:9d:11:d1:45:36:84:1e:b7:3f:c3:57:60:
         5a:4e:73:83:12:07:90:34:2f:a7:40:fc:f7:e4:5e:c5:3a:9b:
         2e:51:2c:51:8c:c1:1c:2d:56:c6:c1:c0:92:e7:9a:0e:1a:21:
         e7:c4:18:33:d8:65:79:79:72:bd:1c:b3:c7:fc:9f:57:7e:a3:
         f4:ef:4d:b9:03:2e:88:ff:8a:b5:12:59:81:cd:a7:5c:94:c5:
         4a:ef:dc:02:1d:97:74:75:15:48:d5:fe:cd:58:4b:c0:ad:da:
         91:a8:1c:4d:fd:cc:55:b6:44:f9:e4:7e:4a:41:54:4d:9b:f8:
         e7:ed:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:25:46 2026 by rpki-client