Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a79e2475-1311-3c4a-9122-256adfcdd5bd.roa
File:                     a79e2475-1311-3c4a-9122-256adfcdd5bd.roa (raw, json)
Hash identifier:          lfndjENK4geRCKKOypX8nlxNPa5KYX2gXYTth8/5PCM=
Subject key identifier:   28:34:00:97:00:81:52:E7:CB:97:21:8A:F4:E0:58:75:73:DB:AC:6A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F58CD5FF4D23C0C3B5263C780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a79e2475-1311-3c4a-9122-256adfcdd5bd.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     16625
IP address blocks:        184.27.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5f:f4:d2:3c:0c:3b:52:63:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=469d1c7f-6e92-4d6e-ac69-f7b1d44b8eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:e3:84:61:7c:47:fe:eb:ad:ff:5d:21:9d:
                    de:21:9d:d2:36:05:61:f5:5e:b5:cf:d3:ea:3b:8c:
                    12:a0:f7:9b:c6:eb:68:fe:27:69:76:c7:71:cd:89:
                    fe:b9:1b:e8:05:1e:b0:27:15:e1:fb:81:f2:4b:7a:
                    3a:6e:bf:8c:dd:81:3a:11:2c:22:ee:9a:62:18:66:
                    da:eb:1f:e1:30:9d:c4:e7:6a:62:c3:37:68:ef:e9:
                    7e:f7:e2:95:24:e4:ba:af:70:33:69:a7:60:4b:1c:
                    d3:d4:6b:c5:9c:dd:6f:24:c1:53:0b:0c:c3:6b:a7:
                    da:6a:c3:76:c6:a2:65:60:6f:fa:56:58:64:14:56:
                    bc:ac:67:7c:ee:d2:e8:3d:65:fb:dc:1e:d7:8c:63:
                    66:95:9a:5b:7c:b5:d5:b6:5b:b4:66:3f:0e:06:93:
                    cb:5a:68:3c:d1:67:5d:12:4d:4d:20:6d:79:43:01:
                    37:c0:61:3a:e1:3a:34:f9:f1:d6:9d:e1:88:8a:63:
                    4d:c4:d2:c8:a6:6d:be:9a:2b:60:33:ed:9b:a8:22:
                    65:d2:7c:48:c5:f7:08:0f:78:64:5e:a9:7f:b4:e9:
                    b6:ee:d4:fa:3f:7a:6b:04:2d:96:fc:b9:bd:22:40:
                    6b:de:50:5b:eb:ec:a3:6d:15:d7:0a:b3:66:4d:b7:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:00:97:00:81:52:E7:CB:97:21:8A:F4:E0:58:75:73:DB:AC:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a79e2475-1311-3c4a-9122-256adfcdd5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:aa:95:10:da:55:10:7e:60:41:f5:65:2c:e3:05:5f:74:
         71:1a:73:61:57:e0:19:7b:e1:6d:c9:58:2c:ee:b6:77:c6:32:
         72:c8:a2:72:f2:ed:13:9a:44:34:82:90:16:4b:5e:62:1f:fc:
         5a:12:bd:3f:c5:15:db:ae:19:16:0f:fe:7f:80:79:6e:6e:58:
         12:f6:38:6f:cf:ce:d3:f2:65:b7:b2:02:3d:97:c6:d0:af:d3:
         ac:96:02:e3:0a:b6:6f:9b:13:6c:c1:55:10:16:aa:5f:e3:35:
         b0:03:15:4d:51:7a:1c:c2:e7:7c:14:d0:89:f4:8c:55:c9:15:
         e6:e9:43:85:c1:bb:76:80:73:b4:e1:0b:90:5e:2b:18:8c:d1:
         95:59:9d:d6:9c:64:d3:89:e1:a1:84:9c:4a:b2:4d:be:39:da:
         77:87:79:fc:ad:2d:ba:6b:09:2d:d0:06:ee:02:94:79:d7:bc:
         9d:f3:8e:07:27:93:12:a4:7d:47:54:ae:9c:bc:68:64:00:9e:
         94:e9:16:72:21:23:67:c2:64:d8:b1:40:8b:fc:39:38:d8:93:
         f1:3d:e4:1f:c7:04:65:f3:c1:c8:8f:de:20:6f:c2:84:92:5e:
         68:6c:59:b4:80:5f:4d:10:fc:68:8c:e4:71:60:bc:d0:8c:fa:
         89:54:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:29:44 2026 by rpki-client