Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa
File:                     78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa (raw, json)
Hash identifier:          gBC7+PEHakqwniSb4oXryUZ48/PqsMDeCGCaNfNVU3o=
Subject key identifier:   BC:12:3C:43:B8:C8:67:BE:11:57:17:4A:A3:C3:4C:51:7F:E3:A3:B4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EE4F1FD727B292090A4E9D580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     397924
IP address blocks:        208.16.20.224/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:fd:72:7b:29:20:90:a4:e9:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=df4679ba-eca9-40af-9a5f-6cb6ad118802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:c0:59:ec:2b:fa:a9:e7:61:d2:fc:24:66:
                    8c:b9:41:df:e5:e2:33:89:fe:34:b3:9e:31:f0:d7:
                    04:66:38:de:6d:ce:8e:e4:38:a4:99:5b:6b:f6:50:
                    fc:58:1d:dd:e4:72:ec:0e:75:d7:b7:b4:4b:43:35:
                    04:31:10:21:29:89:cc:48:9c:af:12:47:53:47:21:
                    10:24:97:02:fd:6f:55:cf:00:6e:84:c8:13:56:88:
                    b3:8d:dc:86:03:1e:23:40:b3:c0:a5:f8:a1:b3:bd:
                    37:d6:86:af:e2:b5:77:8f:3a:8c:ac:de:69:4e:f2:
                    9f:0e:c8:e8:f9:d3:bf:66:26:a4:c4:58:22:cb:3a:
                    c2:40:2d:68:3f:b9:66:a4:08:1a:f9:d7:77:d4:19:
                    ff:89:83:f1:fc:de:aa:cd:3f:62:bf:b4:a6:b6:ad:
                    28:e5:b8:0f:a0:bc:4f:89:3f:d3:5b:67:96:71:e3:
                    fb:51:13:a1:9e:f9:a3:f5:2e:b3:1c:34:4a:23:03:
                    4b:bf:80:be:e5:69:99:98:9b:72:40:d4:cb:66:57:
                    28:6d:c6:44:3c:74:e8:15:ba:3f:08:fb:7c:21:df:
                    65:2c:58:65:d2:9c:46:cb:cc:51:86:13:75:48:6b:
                    dd:3b:59:69:d2:ab:97:be:31:e1:be:16:90:33:06:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:3C:43:B8:C8:67:BE:11:57:17:4A:A3:C3:4C:51:7F:E3:A3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.16.20.224/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:74:d1:f4:b3:23:e2:24:b0:da:b2:7d:50:4e:11:ac:ba:
         79:1e:c2:11:05:93:cf:ee:00:19:0f:ee:a1:4e:e2:e3:7d:90:
         96:b3:5a:00:f2:7e:b0:12:6e:71:f4:ca:9c:da:1d:77:40:fe:
         29:50:b2:20:70:86:5e:10:e6:8a:0b:6b:b0:59:56:5e:1a:09:
         6d:da:2f:df:ce:23:85:54:01:27:13:91:c7:59:6e:7f:d2:3f:
         98:77:da:38:e3:8f:aa:0b:84:6c:2d:aa:73:2c:73:52:2f:3d:
         f6:b5:fa:9f:2f:b0:11:1b:e4:da:de:69:ed:e3:31:6b:d8:6c:
         65:ef:c2:92:e6:76:03:bf:08:48:49:dd:79:75:15:d9:2b:44:
         af:92:96:3c:4d:f3:14:fd:24:a2:51:7f:4a:a1:90:37:c0:d5:
         35:ab:cd:b7:6d:5d:92:96:c3:8d:0c:0d:41:16:5c:0e:70:1b:
         81:0a:0a:68:d6:c4:54:f1:80:ec:75:0a:cb:3d:27:47:58:06:
         b5:1f:1b:b3:2e:c0:7e:a2:0d:db:e8:a4:ca:16:9b:d6:1f:6b:
         ec:bc:4a:1b:06:0f:75:43:7d:aa:7b:94:35:11:4b:2e:ba:f8:
         10:c5:4b:1e:c0:2a:96:17:a7:c4:58:21:36:a8:1f:f9:9d:59:
         ed:0a:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:51:10 2026 by rpki-client