Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa
File:                     0422ce09-e192-36ef-995a-0fb6ffb452b6.roa (raw, json)
Hash identifier:          DA0IpeYAMrhe1IvQHUXn+Om1ixWNYu9XXN2jjkTQHmo=
Subject key identifier:   78:A0:14:EB:DD:D0:03:45:B5:AD:ED:7E:E5:6A:99:3D:5C:4E:02:C5
Certificate issuer:       /CN=a3ce9b72-308c-4401-abcd-f0002bb1a70a
Certificate serial:       010D0C9F4328584F71EDA0B14AECE3404E029400
Authority key identifier: BE:12:C6:8A:8D:98:2B:3C:C0:19:ED:CD:27:FC:A1:D3:94:3A:1C:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     8075
IP address blocks:        204.155.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a0:b1:4a:ec:e3:40:4e:02:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ce9b72-308c-4401-abcd-f0002bb1a70a
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=11df6c3a-a924-4748-8b5c-7f948d4e11ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:4a:83:a7:af:06:2f:a4:e4:46:c6:7a:ad:
                    e2:41:80:bc:d7:30:9f:63:bf:17:17:4d:03:4a:d8:
                    6a:c5:64:af:3e:3b:f1:99:0e:67:e2:5d:49:10:88:
                    60:63:bb:2c:ee:7e:8a:5f:38:ba:ed:95:86:4e:aa:
                    92:d4:0e:b3:f2:f6:dc:6e:1a:b5:57:69:8d:82:ce:
                    7f:cb:2f:8e:d8:5b:1f:c2:8f:04:f2:4e:c5:14:be:
                    6e:da:0c:1d:ff:20:1e:48:de:0a:a0:29:d4:44:aa:
                    fe:7b:d4:f5:57:c6:aa:5b:77:a4:53:39:0a:35:ac:
                    0d:8c:28:a8:17:bf:e0:27:84:b3:9b:35:32:de:e3:
                    a6:e4:2d:ee:32:58:49:6a:38:82:4e:7f:51:f5:58:
                    58:b1:dc:19:03:a0:2e:02:98:fa:d8:9a:e8:a7:a5:
                    bd:93:5a:20:3c:e0:72:28:3b:a4:4a:71:37:fb:4a:
                    2e:fd:6d:48:cb:5e:01:0b:87:eb:7c:3e:4d:f4:5b:
                    e0:4a:af:29:89:84:af:c9:3d:e8:ea:88:56:b1:42:
                    e2:52:00:d6:36:d4:fe:0e:86:57:1d:cd:dc:7b:04:
                    e1:37:12:ab:a3:26:de:58:97:9c:6b:8c:49:7f:e1:
                    a1:ca:eb:1c:54:4b:c5:6f:e7:d7:94:98:ec:42:75:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A0:14:EB:DD:D0:03:45:B5:AD:ED:7E:E5:6A:99:3D:5C:4E:02:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.crl

            X509v3 Authority Key Identifier:
                keyid:BE:12:C6:8A:8D:98:2B:3C:C0:19:ED:CD:27:FC:A1:D3:94:3A:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f8:0d:e7:0e:30:1f:09:1d:59:a9:d6:68:98:bc:8a:11:0c:
         14:9f:f9:45:41:64:7a:c8:5f:1b:84:bf:cc:35:31:fd:3f:9a:
         b0:88:60:12:61:d9:73:44:76:a5:93:bd:20:aa:e3:1e:2d:54:
         7f:2a:2c:49:2b:34:f6:82:5c:3c:56:dc:68:b2:9b:5c:0b:b4:
         45:d5:82:ec:cd:a0:6c:49:c6:7b:c6:c2:40:ff:42:26:af:6c:
         98:db:5f:93:32:bb:b6:35:fa:8d:96:99:de:66:fc:1b:ab:ed:
         de:da:04:b1:62:a3:9d:00:e6:09:55:54:1d:d4:92:48:e5:99:
         1a:13:50:cf:fb:cd:5a:84:f1:cd:de:56:36:17:90:85:0a:3f:
         f4:0c:da:89:aa:5b:5c:43:86:12:af:85:6b:d5:7b:6a:90:1f:
         f9:51:bf:27:9b:9f:eb:c0:4f:a9:13:84:9b:d3:e2:ef:8c:5f:
         db:3b:b0:09:ad:d9:d7:3f:07:04:74:e8:1f:1a:e3:c2:ab:3f:
         82:f6:4a:61:01:ed:fd:0f:f5:58:15:9b:65:f8:ad:a9:d1:9b:
         b2:aa:5a:93:fb:be:9d:70:52:e8:bb:93:06:00:33:ee:06:d2:
         25:34:68:c5:6e:99:51:c2:c1:4e:9f:5e:a3:cd:00:ba:b4:f1:
         bf:33:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:20:01 2026 by rpki-client