Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/caa70ad7-4f6e-3c75-98dd-5c26d363438d.roa
File:                     caa70ad7-4f6e-3c75-98dd-5c26d363438d.roa (raw, json)
Hash identifier:          QjXiqCXyh9mmjudYCfHOn+TGEMYD3ZIkhBi8Wkf+z/8=
Subject key identifier:   2A:09:14:C5:54:82:8B:17:C6:87:EA:54:60:B0:4C:9D:17:50:55:24
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F8842EBF49E162592BA2C7D80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/caa70ad7-4f6e-3c75-98dd-5c26d363438d.roa
Signing time:             Sat 17 Oct 2026 13:00:12 +0000
ROA not before:           Sat 17 Oct 2026 13:00:12 +0000
ROA not after:            Fri 15 Jan 2027 14:00:12 +0000
asID:                     9009
IP address blocks:        206.127.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:88:42:eb:f4:9e:16:25:92:ba:2c:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct 17 13:00:12 2026 GMT
            Not After : Jan 15 14:00:12 2027 GMT
        Subject: CN=cc651e12-2ed6-48fe-98d7-2621ea31a868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:95:e7:a4:a2:e6:28:c1:6f:61:2e:3d:4f:6c:
                    c8:52:d1:5c:3c:ac:7a:f3:3d:a5:b0:d5:e3:9b:8e:
                    c8:45:69:96:83:cb:db:c4:7d:b1:bb:d4:ac:d5:54:
                    6e:13:3a:8e:f7:57:09:b3:23:e4:a5:0e:a0:af:e7:
                    04:f6:e2:97:2c:31:e5:8c:71:b2:78:be:25:b1:a0:
                    54:f6:c7:82:74:f6:f4:b4:50:50:d5:5f:e2:0c:3f:
                    cf:20:88:91:41:8f:02:6f:2e:1d:81:3d:7b:4d:a2:
                    30:8d:49:f9:94:4d:a5:64:a1:07:5a:af:2e:ac:9d:
                    c0:69:3a:b4:14:e5:a3:43:c9:0c:c5:8c:22:80:24:
                    cd:c3:40:a3:13:b8:c3:a1:37:0a:df:1b:ab:45:17:
                    ef:16:ae:6c:04:57:3c:bb:9b:37:40:a1:b0:9e:ee:
                    a1:fd:05:78:b6:d2:3c:37:00:2d:a1:17:c9:0d:af:
                    f8:fe:42:0e:c0:31:e1:77:61:be:15:7a:da:3d:8f:
                    f4:c2:96:91:c8:d4:f3:29:5d:8b:8a:05:e7:fd:c7:
                    5f:68:9f:5c:57:b2:82:e2:2b:93:b1:f3:ba:39:b1:
                    b8:d9:1f:56:d1:68:e1:65:c8:9b:ec:bc:b6:59:e9:
                    0f:ec:de:1f:84:b8:b6:d0:89:9d:ec:43:8b:c4:08:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:14:C5:54:82:8B:17:C6:87:EA:54:60:B0:4C:9D:17:50:55:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/caa70ad7-4f6e-3c75-98dd-5c26d363438d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:ff:dd:67:67:ee:bd:f3:af:56:7e:96:3e:c4:e4:c9:bb:
         f5:87:1e:76:43:3c:82:74:f5:03:c1:8e:ad:af:bc:b8:57:06:
         3d:4c:47:c9:f3:c2:e3:a0:aa:11:8d:42:b6:f8:fd:e5:5e:9a:
         8e:2e:72:64:c5:66:a8:73:34:d1:0e:49:3a:dc:be:e3:18:c3:
         91:74:ed:19:94:e2:f3:3d:c3:9d:d6:0e:2a:d0:c7:51:fb:d4:
         b4:38:bd:af:6e:ac:01:61:b0:68:97:6a:3c:66:11:c1:7b:0c:
         fa:9c:fb:27:6c:94:ae:41:9d:4a:90:54:49:b5:cd:9a:e9:a1:
         92:86:22:b3:3a:62:33:8b:01:ce:a6:f0:35:52:09:3e:6c:55:
         2c:1f:93:07:62:7d:6b:e3:3e:70:0c:24:b8:8d:d6:86:6f:ab:
         b5:70:a9:2f:da:c2:8c:3d:e4:4e:14:fe:9d:02:2a:7c:dc:e1:
         06:92:16:4b:33:5f:32:06:9a:52:3a:84:5c:5d:fb:1b:ab:32:
         2c:cb:1b:6b:00:d2:f0:f3:60:42:3b:95:b0:b0:5d:0c:26:e6:
         b9:23:02:2b:1b:f1:5f:8c:59:c6:d4:73:88:1b:b4:3a:ac:cc:
         f8:56:47:e3:9e:5a:58:2c:96:0d:b3:24:06:e8:bc:ee:8b:0a:
         e3:bf:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:36:25 2026 by rpki-client