Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dddab8e3-8167-36a2-99f7-a3a082810f56.roa
File:                     dddab8e3-8167-36a2-99f7-a3a082810f56.roa (raw, json)
Hash identifier:          uF6FgFAHViK+PaIN0tOr+rbMIKo/9ufGgQMFViI43Xk=
Subject key identifier:   F3:E1:0F:70:8E:6F:C0:80:5D:A1:47:A3:72:C2:B8:F4:93:2E:C5:07
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1B99004F4C3ED6CD7C4D8400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dddab8e3-8167-36a2-99f7-a3a082810f56.roa
Signing time:             Tue 08 Sep 2026 14:50:33 +0000
ROA not before:           Tue 08 Sep 2026 14:50:33 +0000
ROA not after:            Mon 07 Dec 2026 15:50:33 +0000
asID:                     273285
IP address blocks:        204.157.135.0/24 maxlen: 24
                          204.157.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:99:00:4f:4c:3e:d6:cd:7c:4d:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  8 14:50:33 2026 GMT
            Not After : Dec  7 15:50:33 2026 GMT
        Subject: CN=9620c8f6-4620-4343-bd98-23c3bbae03e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:e9:3f:b5:c7:e3:14:9a:fd:87:e9:6d:7e:
                    7a:64:3b:85:f3:2c:f5:f2:30:58:e4:f9:1f:6f:e0:
                    9c:6a:09:de:d8:6a:6d:15:66:25:59:f2:a8:56:89:
                    92:7b:cd:23:7d:89:d3:f0:c0:50:69:4d:2f:13:f3:
                    1a:c2:db:80:62:c6:97:66:12:9b:07:72:7f:de:f0:
                    1c:b2:f9:f2:6a:62:75:4f:6a:97:ad:e9:90:58:01:
                    96:99:f3:5a:2b:df:5b:55:e6:b6:28:ed:d1:eb:c2:
                    1f:7e:2a:b8:ac:05:f0:bc:44:05:4b:74:10:86:3a:
                    4e:c2:c2:34:34:93:3a:a5:ee:3c:94:c9:fc:1b:4d:
                    23:61:e6:11:70:46:58:db:bd:25:91:f6:fc:65:cb:
                    c9:6e:10:a4:90:aa:d7:19:10:05:5a:93:66:ea:25:
                    2e:12:0f:25:89:80:0d:7f:1b:eb:2f:a1:90:55:b8:
                    bb:ee:ee:ea:6c:3b:32:93:48:0d:9d:82:bb:16:b1:
                    25:06:9a:90:cc:ff:78:b6:d5:d8:95:e2:7a:09:be:
                    d1:b3:16:da:82:00:c4:34:0d:bb:64:f7:02:32:c3:
                    11:42:52:19:86:d1:78:00:5d:ed:4b:f0:0b:00:3e:
                    35:35:a1:51:ea:0c:bc:7b:0c:fa:e5:20:18:bb:51:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:0F:70:8E:6F:C0:80:5D:A1:47:A3:72:C2:B8:F4:93:2E:C5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dddab8e3-8167-36a2-99f7-a3a082810f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.135.0/24
                  204.157.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:65:9e:f9:49:1c:4b:9e:0f:1b:be:b3:6f:3b:f3:87:0a:
         0e:87:d1:17:eb:41:45:94:3d:13:06:a7:d9:12:65:b8:5c:b1:
         58:51:20:30:a0:d5:ea:c6:35:46:5e:1b:b0:39:b6:52:99:d1:
         2b:a6:fa:bb:50:c5:35:bc:0c:c7:96:63:08:82:ad:7d:7d:e1:
         57:15:07:b0:6c:6c:7d:62:74:62:46:f5:f2:65:a3:d6:8f:56:
         12:28:30:d4:5e:ca:3f:42:1e:0e:cd:ef:1c:8d:13:c1:ae:de:
         cd:a2:cc:94:26:38:76:4e:d6:f6:75:5c:c9:d3:b3:37:06:bf:
         ea:b5:a9:1b:30:0b:a1:76:f5:8a:fc:8c:6b:0e:f7:0d:92:e5:
         b8:a2:c6:c0:b3:55:b9:79:4e:f2:cf:f5:92:4f:01:83:cc:72:
         25:22:94:d5:10:73:a6:a2:65:aa:0b:09:2b:b3:72:00:53:bd:
         ad:b1:c0:a1:f5:ac:c9:88:b5:4f:69:0d:33:e8:7e:96:c2:8c:
         c0:98:20:f7:d7:29:68:7d:e5:1b:a5:15:72:cc:32:21:32:33:
         68:eb:a9:ba:71:67:a4:85:3b:a1:33:ae:03:e2:d2:2b:b6:54:
         f4:82:3f:fc:40:2f:0b:c5:f7:ed:3d:2b:bc:00:34:1a:dd:0f:
         b8:2a:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 15:52:32 2026 by rpki-client