Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/942682ac-ce3f-3924-8e37-71856560996d.roa
File:                     942682ac-ce3f-3924-8e37-71856560996d.roa (raw, json)
Hash identifier:          OHNEIqm2iYVfqKE9NV3DvdeVnnb3sZD4u0Qz2fL7fy0=
Subject key identifier:   8A:FA:9F:B8:25:64:85:E9:B2:78:9B:62:CD:C9:F4:52:17:0B:97:2C
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584EAFE6F0FADB8FDF4A77A63380
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/942682ac-ce3f-3924-8e37-71856560996d.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     198949
IP address blocks:        128.103.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f0:fa:db:8f:df:4a:77:a6:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=fde8bf71-81e7-4921-a4e0-0d7fd08d9bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:ca:d8:98:f0:d0:b3:c4:38:43:8c:29:ba:
                    06:c4:0d:fc:b0:a3:a3:76:30:e3:6d:fe:51:d2:c0:
                    0b:e1:d0:8d:9d:19:d0:20:d7:46:04:d4:95:f1:63:
                    f4:59:0b:18:10:c0:a7:df:3e:d8:e9:08:93:81:02:
                    98:d4:c5:b7:5c:1a:5e:65:70:2f:ef:4a:20:56:66:
                    c9:d6:f8:40:5e:58:62:be:7a:40:85:eb:0b:60:8f:
                    6e:3a:4e:86:fb:ae:a6:94:83:e5:63:d1:df:54:b8:
                    fb:40:d7:6f:a0:46:a8:b3:c8:03:04:04:8d:e7:ca:
                    ee:2d:ee:d0:21:93:13:a7:cc:e8:49:19:48:34:1d:
                    47:09:56:5d:8b:93:0f:97:35:da:2c:ac:5b:f3:1e:
                    69:ae:69:c6:43:8e:66:b5:e8:a1:b3:7c:2f:44:ef:
                    6c:96:1b:30:6a:d3:f3:05:31:52:5e:20:e4:44:90:
                    bb:53:a9:da:79:91:e2:56:25:76:80:9e:3a:0f:e4:
                    15:9b:59:c7:24:f5:ec:66:84:d3:f0:10:c0:4e:7a:
                    99:20:74:32:1a:75:ce:6a:c2:a8:d2:24:df:a2:90:
                    19:77:87:40:7b:cd:d9:52:d8:e9:06:59:76:20:ea:
                    a9:66:b9:86:57:70:fb:17:ac:04:60:d4:7a:5d:e5:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FA:9F:B8:25:64:85:E9:B2:78:9B:62:CD:C9:F4:52:17:0B:97:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/942682ac-ce3f-3924-8e37-71856560996d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:53:38:ae:19:67:4e:a8:3b:f0:91:32:f1:c1:e5:99:80:2b:
         cd:e9:05:0b:f2:ad:57:39:1c:6c:89:47:02:a3:fc:f1:8c:ab:
         4b:1e:6a:a0:68:14:a2:d2:a1:3b:4d:37:db:22:80:6b:af:4c:
         32:dc:a1:b0:a0:73:15:13:67:d6:b6:64:29:c2:1c:ac:d9:1e:
         e3:e9:ba:2b:27:a5:72:56:06:18:a6:16:42:89:bb:d3:fe:45:
         16:52:2d:dd:3e:6c:22:3b:15:e4:d4:21:e1:8a:86:d2:ec:da:
         20:b7:28:b9:ba:10:2f:7d:1a:93:e2:ba:1a:de:5e:23:bf:a3:
         0c:79:85:22:e7:b2:be:bc:09:7e:a4:40:f1:8c:88:14:e9:b7:
         f9:1b:12:ea:c4:aa:b8:41:a6:3f:c7:3d:6c:7f:d5:59:ea:c2:
         8a:b2:7a:09:67:f3:d8:55:fa:9b:c6:d3:e7:e4:e5:94:87:79:
         5b:40:db:d8:5d:28:b5:47:d9:bf:0c:44:c9:b3:ba:3a:95:d3:
         e0:40:48:33:69:6d:69:e2:02:97:28:78:7f:0f:5a:f2:5f:13:
         14:cb:5a:8e:9c:66:f6:b3:12:73:d0:80:6f:80:26:1e:e5:fb:
         e5:f8:3d:65:ca:fe:36:9c:8c:74:04:ae:63:7e:89:f2:8d:4a:
         36:e6:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:23 2026 by rpki-client