Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa
File:                     ef190013-db65-3925-bc84-76c0b3dbc647.roa (raw, json)
Hash identifier:          AgfVRuCB4RImkJn5VKKgx74QITlFhwpCP6VheFWAydM=
Subject key identifier:   8F:41:59:E6:82:34:E8:49:8D:31:CC:AE:A3:DA:C3:6D:3B:BD:74:EF
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584EEA875B1A314F3E6CD5D26E00
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     397018
IP address blocks:        91.209.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5b:1a:31:4f:3e:6c:d5:d2:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=47b1060f-764b-432d-a47d-3fdd4ae569e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6d:a6:b4:22:28:0c:bf:24:b0:d0:ad:3f:09:
                    60:ef:49:ef:82:be:d0:0e:7c:b1:3c:51:f6:de:88:
                    a4:e4:20:33:e8:ce:e1:99:64:af:3f:93:3c:90:ae:
                    44:68:2a:eb:06:7e:13:7e:dc:13:a9:dc:d6:98:e6:
                    76:50:b3:ce:e8:58:31:e8:b9:61:27:10:41:b7:c0:
                    42:7a:3e:7c:dd:74:a9:63:5f:90:e1:a6:c0:fc:58:
                    75:ad:87:e9:44:a2:33:19:bc:5f:2e:df:7f:b2:b5:
                    56:07:f5:3f:4b:44:e8:aa:9c:a9:e5:76:f8:96:af:
                    ff:1c:d5:6a:c4:87:28:fa:fe:68:7a:8f:ab:f2:00:
                    be:0d:82:26:81:3b:7e:b3:fe:a1:37:ae:96:a8:8b:
                    01:4d:aa:cb:2e:a0:ed:f1:38:3f:5e:6e:5a:8b:de:
                    49:58:24:a4:00:68:a4:4e:f0:8a:4c:55:e8:d5:0c:
                    f1:78:1b:53:6b:79:6a:24:6c:93:b5:ea:a9:3a:4e:
                    ec:dc:5e:50:5c:2b:83:61:6c:f6:89:2f:8a:82:eb:
                    da:03:bb:7f:56:05:17:b6:f2:92:ae:a0:6f:2e:d6:
                    47:8d:80:55:66:59:0f:1c:48:c8:69:00:a8:f8:d0:
                    68:30:ed:73:01:d4:97:88:73:4c:d1:a8:87:86:05:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:59:E6:82:34:E8:49:8D:31:CC:AE:A3:DA:C3:6D:3B:BD:74:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a0:c9:a1:42:47:2a:ab:32:6f:a2:8d:d6:66:5c:1d:b4:21:
         9b:b8:19:bd:f1:03:d7:82:4f:20:0f:d6:8e:c7:b2:4e:a5:0a:
         0b:f8:f3:cf:54:8d:83:93:9f:d4:19:e2:1d:f7:56:99:54:60:
         6d:ae:da:58:f3:c3:97:02:52:42:fa:3f:83:a8:90:51:99:48:
         92:fe:6e:73:20:70:7f:d1:06:ac:4b:74:cb:a0:37:09:f3:ab:
         04:cd:10:85:36:04:3b:29:29:23:28:b3:2c:2c:ea:73:03:19:
         63:4f:13:b1:2d:5a:19:c8:e4:3d:50:3e:fd:21:57:07:c1:b0:
         9c:66:41:58:b2:23:31:0e:41:b6:15:9f:a2:25:b3:2c:b4:48:
         a9:f8:b9:c3:0c:0b:fa:1f:58:a5:30:ea:9f:7f:84:68:30:34:
         9c:4c:69:2a:11:e3:e1:1c:04:9e:59:1d:51:d9:92:06:b4:0b:
         97:74:2b:8f:36:5f:ff:c7:15:87:0b:e8:6c:b9:9b:59:fc:d9:
         9e:d9:f7:7f:db:00:73:ee:74:85:b1:a0:2a:fa:04:ab:8b:9c:
         97:c4:b2:0b:6f:7f:a7:98:c6:3c:e2:a6:78:5f:c0:6e:7b:79:
         ad:5b:9a:4e:68:bd:36:9f:33:29:f4:6e:6b:ae:b4:8a:4d:9d:
         30:0a:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:34:14 2026 by rpki-client