Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa
File:                     dca748a7-33a1-3825-aba7-e83549aaa4f0.roa (raw, json)
Hash identifier:          g4H/s7i2o5+ZHOI4gooUMw1aghgo2vacoNbvL9zH9EM=
Subject key identifier:   6B:D3:52:BC:B9:E3:CE:27:F2:7E:3D:68:F2:04:60:E7:1A:64:F4:E4
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584D09125250BEFF7F85C9CA9AC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     271
IP address blocks:        209.87.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:52:50:be:ff:7f:85:c9:ca:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=905063ad-0bcb-40a1-9f84-b7cf7983e056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:7e:e3:43:f5:98:72:29:48:11:bc:15:0b:
                    ab:78:b0:c5:8b:c1:01:21:42:db:ad:a3:c1:b6:17:
                    f8:a8:35:2f:f5:78:06:a3:0f:f6:23:ca:8b:99:48:
                    3f:46:a7:9c:30:0d:ac:a5:70:0b:69:6c:f1:c5:88:
                    d0:9e:ba:09:a3:66:61:a2:1e:d0:b5:44:4d:21:19:
                    2f:17:fe:0d:14:5b:40:de:82:31:a3:c9:e3:97:af:
                    5f:12:c8:e7:59:94:45:39:41:5f:d5:60:75:40:70:
                    45:d9:07:50:7e:23:1b:d6:cc:33:36:12:1a:2d:dc:
                    b3:c3:64:1d:49:bd:40:cb:e2:1c:8d:47:c4:1c:19:
                    2d:9b:77:6e:c3:d6:44:2a:8f:c0:85:43:18:94:42:
                    c0:75:7c:87:7a:1d:a1:4b:1b:a2:77:7b:b0:06:fc:
                    2b:52:42:89:20:01:69:a5:22:03:fe:b7:54:e3:d3:
                    a1:3d:b8:12:a1:d1:4a:c0:8a:f4:dc:c9:55:98:a0:
                    4e:82:7d:3d:86:79:40:32:53:e1:00:21:02:30:27:
                    80:d6:58:bd:34:de:0b:8b:69:6d:ac:54:c4:26:9e:
                    d4:c4:d9:f5:fd:0e:be:55:f1:c8:0c:4a:de:11:0e:
                    8b:12:26:cc:b0:e3:ce:68:1d:c3:06:d3:ac:58:e1:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D3:52:BC:B9:E3:CE:27:F2:7E:3D:68:F2:04:60:E7:1A:64:F4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:de:05:61:cf:7c:42:df:79:17:e2:57:51:e7:fd:7f:24:07:
         bc:6b:8d:cf:4f:08:ed:f5:02:56:19:f6:bd:92:de:4b:4e:b0:
         69:66:5e:19:26:d4:4d:65:c5:d4:e9:24:4b:e1:32:8a:54:82:
         25:3d:93:b6:4a:fb:1c:0f:c2:8b:7c:71:b8:c7:8b:85:ab:b7:
         ca:25:7d:a4:4f:39:53:7f:08:f7:e4:4f:03:a1:0b:90:9b:80:
         f3:dd:33:3e:1b:ca:72:13:31:72:35:22:3e:46:14:4b:1f:3f:
         9b:7f:6b:e2:a8:2f:84:d0:f1:c0:8e:9a:64:c1:00:e5:36:ea:
         4c:d1:0c:9e:af:d8:52:7e:de:72:16:58:1e:79:d4:37:2f:fa:
         17:4d:f1:11:72:22:ce:64:61:7e:e5:d4:be:90:29:88:a4:63:
         a5:07:37:43:13:23:2e:36:83:c4:60:c2:f2:5c:5f:f1:68:71:
         9a:e8:c0:3e:cf:87:c6:b3:0a:64:d1:17:e8:1b:55:6e:82:41:
         96:41:5a:76:03:6b:55:10:fa:28:15:38:7f:ef:18:f1:05:f4:
         65:b4:13:52:ef:b3:2c:00:20:c4:a2:71:bc:ef:f7:83:f6:a8:
         ba:d5:e6:11:84:20:67:f0:d1:40:4f:11:b4:d4:54:42:e1:76:
         fb:8e:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 12:17:28 2026 by rpki-client