Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/de73f0e0-b70b-3f41-b5e8-562f3c8c259e.roa
File:                     de73f0e0-b70b-3f41-b5e8-562f3c8c259e.roa (raw, json)
Hash identifier:          aPYjIO2i+Ddmh9lQ7SBSAbQQcmKA859ZP55zzPEuroQ=
Subject key identifier:   D2:BB:42:6F:01:A0:ED:A8:00:9D:09:4C:DD:99:13:E4:EF:66:7F:17
Certificate issuer:       /CN=f0998994-1f51-4070-9d55-9e3090085fb9
Certificate serial:       010D0C9F4328584E8F550131E74702B500F62DB8
Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/de73f0e0-b70b-3f41-b5e8-562f3c8c259e.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     8075
IP address blocks:        206.203.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:01:31:e7:47:02:b5:00:f6:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=9ccf7ced-207b-4bfc-8811-2711636fc4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:6c:38:2f:54:27:aa:5b:04:ff:ce:78:8a:
                    f0:55:79:9c:e1:2b:fb:e7:3d:0b:b8:6b:f5:c8:c6:
                    d4:12:b3:c4:6f:96:17:fb:3c:07:cf:53:f5:bb:21:
                    d3:53:7e:9e:00:ef:ac:60:57:1e:6f:68:49:ca:c1:
                    0c:a1:7e:cf:3a:9f:2a:54:22:31:ae:f0:95:44:aa:
                    96:5f:07:b0:3d:48:b3:a9:3f:9c:ed:04:5c:b2:e9:
                    48:7e:fa:13:33:61:36:c7:81:84:09:c9:9e:da:2a:
                    54:70:c5:89:0c:9c:68:3e:a1:d7:19:a1:27:d6:08:
                    8a:1a:bb:46:e1:b3:df:74:30:83:66:df:5f:25:9c:
                    c5:d7:da:31:ae:76:3e:61:f6:c1:1a:0b:83:a6:a4:
                    98:82:36:f9:48:50:f6:c8:75:ff:c2:59:f7:66:84:
                    72:be:d1:a2:53:18:4d:b2:64:27:33:c1:48:45:6c:
                    f8:20:24:df:aa:dd:e5:c1:34:63:c4:ad:25:93:43:
                    48:99:9e:52:16:b0:20:57:18:4b:98:51:3b:fd:7e:
                    fc:82:ca:45:e1:07:dc:76:fb:41:30:b3:4c:a8:06:
                    03:ae:5a:ac:7c:f6:91:be:2e:35:6d:71:68:50:fa:
                    28:6e:fd:07:72:7e:e0:b7:c0:5a:b4:46:5c:60:ab:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BB:42:6F:01:A0:ED:A8:00:9D:09:4C:DD:99:13:E4:EF:66:7F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/de73f0e0-b70b-3f41-b5e8-562f3c8c259e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl

            X509v3 Authority Key Identifier:
                keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.203.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:4e:08:0d:20:c1:7d:b3:c2:d5:a6:97:1d:83:21:e6:7a:
         c0:59:19:4a:49:d1:a8:aa:b5:5b:9c:93:a5:26:5c:77:73:92:
         f6:59:9a:8f:93:f7:8d:09:48:21:e6:3c:3d:2f:08:8d:a2:3d:
         30:79:d7:85:ee:ae:6a:dd:55:92:d1:20:18:d4:66:6b:7e:f3:
         14:e5:d8:5b:94:f5:e3:a7:8c:58:52:46:34:d3:e0:c4:c9:99:
         fa:70:6b:a1:dc:f8:9d:ca:2d:3d:6a:fc:5c:92:50:df:1f:be:
         b5:50:7d:63:69:12:96:ff:ed:dd:8a:69:ab:76:a1:84:e6:a2:
         ec:f1:2c:b2:1a:6e:e6:dc:cf:2a:7a:c3:74:1b:48:c6:b5:a4:
         21:ef:60:98:e5:00:5c:82:fd:96:b1:bb:92:0c:53:78:ce:32:
         4d:2b:89:3d:c9:0c:65:58:05:f1:dd:b6:d7:00:65:9d:02:65:
         b6:53:61:e0:b5:1c:fe:c4:dd:03:2b:f4:78:18:ba:94:b3:25:
         ae:1e:b2:af:70:8d:68:3a:56:4e:46:8f:bb:ff:87:f4:91:db:
         c7:bb:17:c7:af:5b:1f:4f:51:00:8e:fe:e5:0f:9d:43:99:45:
         92:12:2b:4d:60:a1:4d:5a:c6:aa:23:4e:f9:d3:ff:55:ba:69:
         6a:e7:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:16:38 2026 by rpki-client