Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa
File:                     bf6962bd-45db-33f1-9637-5ec4531b2b48.roa (raw, json)
Hash identifier:          +Rsq9jiFUBAbaIvWpQYiHCTz23S8DDVSYT9OLTiUYr4=
Subject key identifier:   0F:EF:BD:F2:38:69:2D:0D:A1:73:ED:F0:F3:9A:5E:63:9A:1C:3E:23
Certificate issuer:       /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
Certificate serial:       010D0C9F4328584F4F0809285776AD899BED0BA0
Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     30277
IP address blocks:        72.9.144.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:09:28:57:76:ad:89:9b:ed:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=0d83de2d-7212-431c-92fa-03a6bb742509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:57:60:3e:3b:d9:b2:a2:3d:e7:c1:61:38:
                    ca:e2:54:bf:33:34:6c:fd:17:6c:a0:6f:a0:c9:df:
                    81:eb:fa:08:03:64:49:e6:1e:10:56:15:2b:25:bc:
                    0d:39:15:8b:0b:c4:84:ed:85:6f:68:d5:b5:0b:8f:
                    f7:46:6a:3f:9a:0c:e7:51:5e:da:bf:83:27:60:54:
                    c0:16:5f:71:7e:8f:51:6f:2c:e0:df:d7:39:68:af:
                    36:26:36:06:29:76:23:f6:4d:70:fc:09:20:bc:d5:
                    bd:b0:b0:59:3b:f6:18:34:e6:ce:d5:76:93:12:69:
                    0f:28:d0:57:60:9a:e7:72:45:a2:fa:b5:7d:98:95:
                    79:3b:1e:34:c9:b4:2a:cd:10:92:e3:cc:6a:2e:34:
                    42:a9:05:38:9c:ab:d6:26:3d:4f:22:f7:1d:75:b5:
                    53:e3:6f:89:f9:f8:4e:78:3a:b6:f4:00:a3:5d:5f:
                    55:66:46:33:3c:bd:8b:62:2e:9c:bc:86:ef:11:46:
                    10:f7:2d:ab:a7:a4:07:98:e0:0c:23:55:3d:cc:76:
                    db:c6:62:5a:a6:3d:2e:1b:37:40:31:6f:d0:fe:22:
                    80:4d:1a:65:fa:ab:d0:14:9d:2c:28:e1:cf:e2:8e:
                    e7:19:69:d8:1e:88:fd:7c:45:cf:3d:5c:2e:9a:cb:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EF:BD:F2:38:69:2D:0D:A1:73:ED:F0:F3:9A:5E:63:9A:1C:3E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl

            X509v3 Authority Key Identifier:
                keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d6:1b:5d:6d:46:51:fc:24:2a:f7:66:82:d8:39:87:b8:9d:
         ed:a4:9e:bc:54:e9:57:65:9a:3c:80:c8:4c:0a:61:2b:d8:f0:
         34:79:2d:3f:9d:e8:3c:46:51:51:8b:ca:52:c2:45:bd:c2:b2:
         42:93:a5:95:e5:32:f1:d1:b7:e9:4a:fb:64:fe:cf:ae:95:b4:
         2a:c3:04:a9:ef:c8:97:b2:72:60:76:f8:91:70:fc:be:c1:0f:
         83:c7:22:31:39:72:fe:9e:66:f8:41:7a:61:a5:47:74:af:65:
         20:97:51:16:18:69:60:6b:90:af:5c:9c:c3:c8:f0:a9:12:1c:
         ab:a7:11:73:9e:a7:cf:9f:fa:9f:62:7b:85:9f:29:a0:31:ab:
         1b:e9:cf:09:73:ca:f8:b9:cf:86:fe:6f:c9:52:49:ea:4e:da:
         92:07:3d:b0:91:26:57:ca:54:c0:6d:87:05:3a:84:ba:db:ac:
         7b:ed:38:31:c4:a5:03:58:2d:e8:9c:d7:e7:35:c4:c4:82:e3:
         22:53:70:6e:40:2f:c7:8a:af:b7:e6:ca:73:c3:93:2f:84:37:
         73:31:14:3b:94:b7:a3:ee:65:1d:06:12:fa:8a:6d:33:47:61:
         3e:a1:8f:77:19:7e:fc:fe:ff:af:01:77:ab:3e:c0:3e:fc:5d:
         03:08:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:36:54 2026 by rpki-client