Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/206f4303-cc4d-3298-8166-5d28162e89d0.roa
File:                     206f4303-cc4d-3298-8166-5d28162e89d0.roa (raw, json)
Hash identifier:          NXZLUZ3C63FgL9BtjM41vAQ/l96bxSz4NPCJE1xYnGE=
Subject key identifier:   A6:2C:3E:28:EA:33:F7:B7:52:31:99:B0:C5:91:66:15:12:C0:87:BC
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584FB0BDDF9D52BFC2A63EDE2600
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/206f4303-cc4d-3298-8166-5d28162e89d0.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     33667
IP address blocks:        209.222.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:df:9d:52:bf:c2:a6:3e:de:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=6e40547b-8375-4ab5-8f47-44adc27013e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:bd:10:6a:27:c9:6f:01:ef:97:da:71:05:
                    b6:62:3e:e3:8f:0e:f5:94:60:c6:07:5e:ef:bd:61:
                    89:6a:46:00:66:5d:c5:0f:11:64:81:25:93:7d:68:
                    b4:29:35:2b:92:6a:56:98:a3:fa:3c:5d:cb:57:c5:
                    33:bc:15:6e:a6:2f:ef:f5:b9:7a:d0:32:24:91:5d:
                    25:95:bd:87:01:d5:91:c2:12:c9:db:ae:d4:db:61:
                    04:60:d5:50:b3:68:4f:29:b9:2f:9e:3e:7b:96:53:
                    3d:a1:5a:9c:c5:cc:b8:57:7e:a9:47:b8:f0:cf:77:
                    6b:28:ff:d6:56:ed:a9:62:a7:84:66:fb:15:40:8d:
                    db:3d:c3:65:7e:39:4f:98:dc:52:92:d3:24:48:dd:
                    7f:29:a5:e4:80:05:cb:59:61:2e:06:24:db:b9:07:
                    b9:0b:8e:68:79:e6:f5:a4:af:2f:03:e2:bd:5e:35:
                    82:2d:0b:0b:ad:d5:6f:eb:82:82:01:ea:0f:a1:16:
                    57:24:f1:98:6d:be:09:b5:60:9a:1e:16:4d:c7:18:
                    14:71:0e:9d:ed:42:57:73:64:b9:e7:eb:ff:48:3b:
                    5d:fd:28:2a:06:0b:fa:5f:22:b5:42:6d:63:e7:33:
                    54:75:a5:3a:68:4b:0c:30:9d:01:51:d6:dd:47:c3:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2C:3E:28:EA:33:F7:B7:52:31:99:B0:C5:91:66:15:12:C0:87:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/206f4303-cc4d-3298-8166-5d28162e89d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:08:12:17:95:1f:ed:4f:2b:02:6d:9d:e4:50:4b:72:aa:19:
         55:05:f0:d0:c9:22:f4:9c:34:bf:d2:10:79:fb:de:c3:ba:5a:
         40:92:f4:50:0c:0d:84:cf:37:ab:04:c1:55:e6:ce:41:a1:68:
         10:ee:80:e0:b2:68:f4:dd:46:e7:f7:98:cc:ec:13:88:bc:b0:
         30:52:d8:6c:6a:86:2e:b6:ad:8a:75:81:9d:d0:d2:52:be:3f:
         46:97:f7:42:0b:d6:6d:bc:bd:c4:67:51:60:a4:88:8e:e3:ac:
         42:7f:da:ac:9a:54:12:2b:81:e4:6f:fa:37:5f:2b:37:4c:37:
         89:eb:d7:fd:4b:5c:c0:94:3a:71:8d:11:58:0c:c1:4e:28:7c:
         e4:6f:14:49:65:c6:43:a4:50:79:9e:91:b4:9a:27:c2:96:c6:
         3b:0a:f7:60:fb:94:2c:23:62:3d:4f:5e:f1:39:0f:06:e4:3d:
         aa:31:85:b8:ca:26:81:ed:e4:4e:7b:7f:08:ab:60:9b:2f:8e:
         97:a8:e9:bd:ff:8e:08:12:6f:65:09:6f:a8:59:ca:93:76:75:
         6f:58:d6:d4:1d:b5:83:a9:f7:a2:dd:c1:75:6b:b6:58:3f:af:
         1d:00:ea:a9:26:5a:f1:de:b7:43:bc:11:7c:be:2e:e9:01:c9:
         e1:8f:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:34:36 2026 by rpki-client