Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/8d898e1f-f0e7-3bec-8836-b5c7f5429f98.roa
File:                     8d898e1f-f0e7-3bec-8836-b5c7f5429f98.roa (raw, json)
Hash identifier:          fhVhM9EO+0KbyK03R2PQQNn28kFzg1ZmkRSEglcomzw=
Subject key identifier:   97:1E:62:DD:47:FB:88:74:78:0C:25:7B:B3:FF:F4:37:86:AA:C5:2E
Certificate issuer:       /CN=9a22d04d-6f88-4738-8ecf-c41ae7da9b73
Certificate serial:       010D0C9F4328584EF9E4F05283146819BC9CA400
Authority key identifier: 44:0D:5A:2B:EC:B8:BA:21:3E:A5:82:6D:7C:6A:4A:A2:F2:14:A6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/8d898e1f-f0e7-3bec-8836-b5c7f5429f98.roa
Signing time:             Thu 27 Aug 2026 13:06:04 +0000
ROA not before:           Thu 27 Aug 2026 13:06:04 +0000
ROA not after:            Wed 25 Nov 2026 14:06:04 +0000
asID:                     9304
IP address blocks:        204.16.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e4:f0:52:83:14:68:19:bc:9c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a22d04d-6f88-4738-8ecf-c41ae7da9b73
        Validity
            Not Before: Aug 27 13:06:04 2026 GMT
            Not After : Nov 25 14:06:04 2026 GMT
        Subject: CN=4ca902ab-3558-4c77-839e-a71f4351092c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:28:6b:a2:0a:65:a7:64:78:18:80:c0:e2:
                    a8:84:9e:7b:7e:fd:4a:26:78:4a:39:bd:fd:c1:a4:
                    a1:d7:b5:9b:53:c4:6c:98:ab:ae:27:f0:e6:e7:77:
                    16:b1:22:6f:4f:61:3d:6d:10:79:65:ce:81:41:44:
                    47:dd:00:0b:db:81:38:23:f6:ef:46:02:42:b9:d9:
                    91:c6:4a:d5:95:42:7e:84:04:b4:3b:a3:99:1f:44:
                    b7:d2:dc:a4:5f:ed:ae:ea:33:0e:bf:c2:4b:d9:54:
                    8f:c6:68:44:27:c6:ab:66:e5:67:34:c5:15:c6:03:
                    cf:25:06:f2:4d:82:b6:29:9a:4d:b0:12:6c:f6:93:
                    f4:63:6d:54:89:79:1d:92:db:85:2c:05:6b:25:d0:
                    d9:78:d3:01:ee:ce:7d:69:07:7c:f1:f2:6c:3f:d4:
                    07:cf:3c:41:30:00:c5:7d:ae:a9:8e:79:0c:25:3e:
                    dd:fb:a3:95:01:bf:ad:e1:b0:97:db:44:65:d0:41:
                    9a:81:fa:ff:93:8a:19:a7:38:46:76:98:9e:39:91:
                    99:b0:0e:0a:9d:da:b6:44:49:0a:5c:3f:c6:86:a0:
                    a1:54:4e:e2:85:3c:28:25:bb:ec:9a:b2:3e:d4:28:
                    3d:87:5f:b2:be:eb:da:83:c6:f2:1c:31:28:a9:5f:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1E:62:DD:47:FB:88:74:78:0C:25:7B:B3:FF:F4:37:86:AA:C5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/8d898e1f-f0e7-3bec-8836-b5c7f5429f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.crl

            X509v3 Authority Key Identifier:
                keyid:44:0D:5A:2B:EC:B8:BA:21:3E:A5:82:6D:7C:6A:4A:A2:F2:14:A6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:78:30:f4:14:ec:64:b1:0f:30:23:be:8d:a5:af:5b:24:23:
         d3:b2:f9:28:f2:15:4e:53:a9:ca:3a:c5:84:ab:f2:cf:49:24:
         40:cf:de:c7:74:46:c3:ce:e3:fa:4b:27:20:32:a8:12:46:d1:
         85:56:cd:c0:3a:6f:ef:4d:4a:76:41:fd:76:6c:21:5a:eb:64:
         31:ba:b6:6a:e1:60:54:92:3d:99:a0:11:7c:73:99:98:23:de:
         01:d1:47:8b:96:19:db:7f:b3:4b:be:bf:94:a8:9c:fb:fb:76:
         6f:1c:57:9c:f6:07:84:25:5c:9c:23:b0:a1:40:b5:8b:c5:54:
         bb:1c:59:0a:db:38:d7:7a:49:10:d4:5d:8f:06:98:65:fe:f3:
         37:2a:7d:ac:1f:8c:47:d7:23:3b:ca:64:be:26:b9:f6:cb:5c:
         12:bd:2e:a8:af:b5:03:90:29:4b:c1:e6:8b:e5:a7:38:cf:66:
         17:de:c0:e4:71:b5:dd:d7:7b:1a:0c:ef:3a:99:6c:36:01:34:
         09:a8:d7:f4:53:a7:16:c0:a3:65:d8:e0:0a:40:bd:df:15:29:
         86:e1:4a:61:73:76:79:c1:9e:9a:3d:a1:34:f0:1c:59:45:ab:
         5f:1d:33:c8:28:51:d9:40:50:ac:53:50:18:2f:c6:61:ee:64:
         e9:20:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:44 2026 by rpki-client