Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc0cd499-1d06-3aca-bc2d-60bc39ff248f.roa
File:                     cc0cd499-1d06-3aca-bc2d-60bc39ff248f.roa (raw, json)
Hash identifier:          FjjWfTr2uCJ95Vv16+FO4VABR3igk0DFAyONET7FCbw=
Subject key identifier:   B7:09:63:DB:25:F1:7E:11:B4:95:C5:09:E9:2D:E7:BA:3C:C5:20:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EEBECA2DD097ECE5326066F60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc0cd499-1d06-3aca-bc2d-60bc39ff248f.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     32787
IP address blocks:        209.200.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:a2:dd:09:7e:ce:53:26:06:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=e8de08e5-544c-4c0e-b359-f4adb149fdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:30:03:b3:cb:99:8f:3d:5d:f3:6c:40:9f:a9:
                    c3:97:05:86:d2:d1:12:eb:21:a3:e4:08:2e:2a:a6:
                    67:a8:d6:07:6a:74:0f:4a:d1:ea:9e:cb:ff:3f:d5:
                    10:62:d3:57:9d:9a:67:a9:c5:c1:68:f0:92:85:5f:
                    43:35:56:cc:17:df:d5:a7:2b:03:42:98:6d:06:db:
                    1d:86:79:30:41:8e:55:2c:ad:ec:ea:5a:c8:96:6f:
                    76:e0:54:d7:91:f9:be:9c:be:ba:ad:9d:08:b0:e1:
                    79:20:32:d3:aa:a2:d0:88:83:4b:e3:55:53:c4:07:
                    17:d9:2a:0c:65:38:4b:bc:e0:a1:70:db:52:0e:f3:
                    31:59:75:6f:34:fc:fe:b9:18:a4:1c:1b:63:ee:f3:
                    6a:19:3b:bb:ac:ca:a5:37:a8:46:77:2c:ab:a9:46:
                    9d:8d:33:21:cc:9b:f2:8e:05:3c:06:b7:a6:71:be:
                    db:da:6c:c4:4f:25:b7:46:2c:d4:2e:bc:32:ed:58:
                    f2:e8:9b:27:f1:64:c8:36:96:49:70:b5:b5:71:c0:
                    be:c8:a2:3a:fb:c2:7f:12:f7:44:60:2a:33:66:47:
                    77:1d:ea:ac:7f:7e:fc:4f:9c:a6:6a:0a:48:25:a8:
                    ea:6f:f1:86:09:37:a3:f6:6e:15:d9:61:f5:2f:33:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:09:63:DB:25:F1:7E:11:B4:95:C5:09:E9:2D:E7:BA:3C:C5:20:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc0cd499-1d06-3aca-bc2d-60bc39ff248f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:57:c6:3e:9a:0c:1d:13:e2:c3:6f:b3:d7:97:eb:76:87:57:
         1d:14:b4:f9:f4:96:b6:c5:a8:ab:cb:14:4c:cf:e7:fa:af:ac:
         ae:3d:93:65:b8:2c:3f:70:6e:1c:31:49:eb:3c:4b:1b:82:be:
         13:18:83:e7:26:d9:80:ca:db:09:4f:ca:d2:cd:ee:f1:df:2b:
         d7:a1:02:37:13:a7:12:12:b8:c2:a1:74:95:e2:26:d4:a2:7d:
         91:cd:b7:dd:33:db:57:f4:16:93:71:f8:ad:f9:1d:76:0a:46:
         74:80:a8:ee:27:29:98:ff:d6:03:81:8e:10:57:74:8c:41:a4:
         b2:34:98:40:20:e1:b6:28:91:9c:f2:6d:92:55:2b:6c:b8:44:
         ad:6d:eb:8f:f9:35:a7:eb:e9:ea:c4:4b:a4:0f:b2:a1:47:33:
         e4:e2:d8:c9:d7:52:20:a7:2b:a9:d4:8a:e1:da:6c:ce:79:d3:
         77:13:09:b3:92:a8:2a:c8:59:40:81:fe:5e:1d:5c:d4:0b:7c:
         a4:40:ed:73:f2:74:f0:19:9a:24:36:2b:90:df:a2:f5:c6:d0:
         24:15:f7:d1:2b:8f:da:ec:76:fb:7f:3b:a9:2e:68:a8:12:70:
         98:77:24:43:4f:b7:fa:75:a3:c5:72:c2:59:65:b9:4d:3b:5e:
         00:0c:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:22:33 2026 by rpki-client