Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa
File:                     ef190013-db65-3925-bc84-76c0b3dbc647.roa (raw, json)
Hash identifier:          9rxe6gx3Re+A+U5Zhvq4/NL8NFr3SmskYjq1vvx9lQY=
Subject key identifier:   08:1D:F5:1A:3A:85:88:8A:CD:4E:9B:5F:67:3E:6C:AD:DE:A7:54:E6
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584E48248B27EC1934763C7E085C
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     397018
IP address blocks:        91.209.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8b:27:ec:19:34:76:3c:7e:08:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=f3bc599c-857c-4d7f-98c6-ea1722f8299d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:75:e6:af:bb:a6:27:97:58:c6:e9:fb:65:
                    39:38:29:56:70:14:fd:ec:74:48:59:a4:bf:09:e4:
                    7a:41:48:e9:eb:63:9c:be:4d:15:aa:b4:b4:e0:49:
                    7e:75:9d:8b:86:e2:57:8f:e3:67:61:96:e8:b4:5b:
                    80:49:f8:3f:0a:50:93:ea:e5:f6:18:5f:bb:d6:86:
                    09:b4:3e:eb:2f:69:0b:5b:fa:5f:ca:c7:fa:2c:be:
                    06:45:6c:da:9f:80:8d:36:e7:29:54:9c:22:75:2d:
                    c0:1e:d1:b2:eb:dd:cc:07:71:f0:88:3d:e0:a4:5a:
                    64:69:ff:89:78:be:c5:c0:13:65:53:db:16:5b:9e:
                    b2:c7:51:35:35:81:9f:5e:a4:64:c7:0a:fb:5b:d6:
                    b7:da:33:d1:e9:91:12:9c:2b:99:ac:53:9e:78:43:
                    80:06:35:4e:9b:38:8d:75:14:ed:d4:cf:c7:f2:b5:
                    01:42:ee:f0:b3:86:f5:03:1c:76:5f:d3:9d:57:15:
                    d0:98:b3:62:06:20:f5:5d:a7:76:f6:ce:a7:53:cc:
                    19:c4:6d:79:2c:0e:34:12:51:61:11:97:28:ca:8a:
                    83:50:52:11:70:17:aa:ad:40:a2:e1:50:39:68:1d:
                    d7:d0:7c:64:78:3e:85:b3:35:76:ed:40:cf:fc:1a:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1D:F5:1A:3A:85:88:8A:CD:4E:9B:5F:67:3E:6C:AD:DE:A7:54:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:5b:78:bd:a5:ec:c6:ca:e8:4d:02:40:ab:63:5e:35:5a:
         ff:ca:83:ef:61:7a:5f:3d:7f:f5:b7:d9:42:2a:98:dc:9d:f3:
         ed:de:8c:b4:f8:d7:42:a3:ff:a6:62:f6:fc:1c:52:50:1c:00:
         8a:52:ce:f6:2b:e3:c1:7c:ed:7d:8e:3b:ac:e6:13:1f:f2:e6:
         fb:78:1d:5b:3a:ec:f7:7f:22:f4:51:c4:8d:8a:64:66:18:99:
         ba:dc:8f:5a:2a:9e:3d:b1:39:c0:cc:1b:86:d3:d1:26:ba:2d:
         bc:55:17:0f:7e:70:22:c4:5e:57:62:e7:4a:89:3e:69:06:3e:
         a8:64:3e:bb:91:3f:70:18:3d:b7:51:e0:d7:8e:b2:a7:9a:1f:
         fc:a9:b4:3c:71:ee:ce:98:24:da:91:3e:a6:d4:a5:b5:40:13:
         07:64:10:f0:20:3f:17:82:a6:5c:3b:f3:14:d6:df:36:24:a6:
         0f:fb:ca:f7:86:75:ab:37:88:49:12:ba:9b:06:04:aa:6f:69:
         32:9d:e7:17:43:d4:45:4f:49:e2:85:e0:87:ac:63:82:dc:25:
         db:93:0f:fe:f9:6f:9e:b4:e1:bc:9b:d4:d0:f6:46:3c:8e:b9:
         fc:9f:52:a5:12:44:bf:92:0e:fc:b9:95:13:b2:b8:1a:ba:4a:
         bf:95:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 10:21:58 2026 by rpki-client