Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/42a224d2-3205-3f19-92d3-d4f7cc416310.roa
File:                     42a224d2-3205-3f19-92d3-d4f7cc416310.roa (raw, json)
Hash identifier:          ubbH6u0Gjhrd+NHkGalxTAWPi58SzsbE7x/YAJnAEB8=
Subject key identifier:   BC:CA:39:C8:2A:AA:99:D5:4A:97:A9:68:E2:14:09:07:24:D9:CF:73
Certificate issuer:       /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
Certificate serial:       010D0C9F4328584EF44CCC1D5714ECBC9FB26D80
Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/42a224d2-3205-3f19-92d3-d4f7cc416310.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     401224
IP address blocks:        216.109.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:cc:1d:57:14:ec:bc:9f:b2:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=98345ad2-4fc0-4d5e-b6de-e389a78cf733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:ef:90:46:2f:8c:e4:e7:95:03:6c:02:55:
                    b8:b6:28:76:a3:04:e1:71:d0:44:c2:04:5d:e0:19:
                    ec:23:26:53:00:0e:1c:f1:a2:c5:09:be:54:22:d1:
                    b8:0b:da:c9:88:19:dd:84:05:1c:86:e6:03:1a:d2:
                    d4:c1:e3:f3:78:f8:e9:5c:91:53:90:45:1d:c8:32:
                    4b:b5:73:4b:09:ab:6d:c8:fd:aa:55:71:dc:c0:62:
                    02:15:d6:e3:dc:e0:09:ee:2c:62:b0:b7:80:23:74:
                    18:ea:6d:ec:f5:da:76:0b:d5:c7:b9:0d:91:52:42:
                    74:73:0d:e2:7c:53:51:da:74:49:53:00:91:31:2b:
                    fb:47:d9:06:98:cf:c1:fe:0e:4e:dd:d5:6d:7a:ee:
                    09:5e:f4:f6:a9:91:dd:2a:99:e1:09:b4:c1:a3:04:
                    c2:0f:b1:2a:f4:51:2a:b5:f7:55:5e:39:fb:d1:76:
                    97:54:a1:d6:b7:27:b4:44:27:43:75:a9:76:55:1d:
                    9c:e9:97:6b:a4:5f:7c:fa:40:db:f5:3a:0f:19:88:
                    0b:59:26:bf:32:3f:a8:30:77:d6:34:41:30:9a:49:
                    f8:15:c7:5e:9e:c6:76:a6:c1:c5:c1:b8:3b:d0:f5:
                    9d:00:18:35:6b:c2:ad:1b:c3:f2:db:82:ca:60:f5:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CA:39:C8:2A:AA:99:D5:4A:97:A9:68:E2:14:09:07:24:D9:CF:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/42a224d2-3205-3f19-92d3-d4f7cc416310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl

            X509v3 Authority Key Identifier:
                keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:44:54:e8:e7:d1:38:1f:72:d9:31:10:ff:59:6f:87:73:b5:
         d4:a1:16:e7:a6:98:ff:3c:c5:9c:0a:95:dc:c0:84:7b:38:6d:
         03:8f:38:e5:eb:47:3d:44:e3:f7:a9:b2:04:8c:29:23:41:b8:
         42:ba:cb:79:a4:63:c1:97:fe:a1:7a:d8:79:76:3c:a1:62:bc:
         13:6c:78:8d:93:d3:f2:0e:6a:ee:ef:88:d3:48:ae:a8:97:0b:
         01:95:eb:38:f7:ad:c4:b2:27:24:13:e7:1b:37:3b:72:8b:1c:
         ee:ee:c0:1e:c9:95:ee:61:ae:81:a8:d1:1c:8f:ee:50:67:2e:
         ee:d3:46:1c:51:98:bb:6a:12:77:30:b1:29:7a:12:71:fa:d8:
         08:db:9e:ed:94:c2:d3:e1:8c:59:63:be:7f:c1:bc:ac:51:aa:
         d0:7f:19:81:65:9e:55:18:f3:65:4f:75:b7:16:3f:e7:79:9f:
         1d:38:ad:e2:d9:98:c3:7d:b6:81:5f:ee:68:0e:e9:ea:ff:16:
         17:6f:a9:0e:a7:4c:42:9a:54:e8:04:59:da:0e:e0:1d:f2:7e:
         e8:88:6a:a5:24:e6:c1:4b:56:1c:cf:8a:b6:df:cb:30:54:79:
         c8:de:8b:23:ef:22:76:a0:ff:d7:9d:f8:b6:b2:b9:2b:1a:b8:
         32:d1:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:23 2026 by rpki-client