Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/83a2d2e0-4d46-3b15-b785-29693e6040ee.roa
File:                     83a2d2e0-4d46-3b15-b785-29693e6040ee.roa (raw, json)
Hash identifier:          8CkqfI+7qZmMO71Y1dox+sUJYi+IazBK5lgpSheFyuQ=
Subject key identifier:   E4:56:BC:E2:FD:85:F9:A0:DA:9E:03:FA:D8:79:81:6C:F8:73:93:57
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584EB416F6DD6E9E3955D4D1EF00
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/83a2d2e0-4d46-3b15-b785-29693e6040ee.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     33
IP address blocks:        209.222.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:f6:dd:6e:9e:39:55:d4:d1:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=44e42037-7419-41a1-9a15-6570402096d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:1f:d0:4d:ba:da:10:e9:77:9e:bd:43:04:
                    4c:73:01:19:7a:14:6c:87:73:9c:c0:5f:16:c7:1c:
                    03:c0:4d:f4:66:a2:6f:dc:a2:35:69:89:d7:2a:21:
                    13:71:18:5f:9f:4d:2f:2b:8a:44:d5:70:53:81:c0:
                    72:94:7e:f4:c6:88:75:15:96:ac:ae:e1:28:d1:5a:
                    68:e2:3b:67:d9:3c:cc:20:c1:56:d8:f4:ed:32:3b:
                    24:d3:4b:14:7b:88:92:5e:8c:aa:62:53:5b:0b:77:
                    5e:55:a1:b5:56:c0:8b:8f:71:ef:65:36:fd:4f:6a:
                    09:8c:68:cc:97:50:a1:fc:6a:df:98:f0:1e:42:dc:
                    44:80:56:43:2a:cc:36:15:76:6f:c8:c9:25:34:b2:
                    b6:e3:f2:76:87:ad:e3:56:83:7c:72:65:38:8c:56:
                    2e:74:ee:8e:b8:aa:14:ee:ad:a1:f1:da:e6:b0:ec:
                    ec:40:fa:7d:f3:be:38:23:15:ae:f1:e9:bc:5f:86:
                    cf:62:79:e2:ba:44:71:33:61:2a:15:21:0c:53:95:
                    97:67:91:0d:05:ce:09:b7:4c:a8:38:de:21:2e:65:
                    cc:67:8f:7e:ea:ee:3f:4b:6e:f5:40:36:26:42:78:
                    7e:cd:ca:04:86:31:a1:bb:ad:2a:ce:a0:f1:7c:76:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:56:BC:E2:FD:85:F9:A0:DA:9E:03:FA:D8:79:81:6C:F8:73:93:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/83a2d2e0-4d46-3b15-b785-29693e6040ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a2:39:d6:f3:ce:dc:c0:7d:69:66:06:0e:83:96:99:38:09:
         14:4c:67:0a:7e:46:a1:3b:ec:62:83:13:5c:6d:b5:48:1f:77:
         10:9d:bd:3f:b7:a4:40:03:91:10:f6:fa:75:bf:44:d6:eb:6d:
         22:81:69:0c:47:9f:74:29:e1:2d:f0:f3:18:89:aa:da:55:88:
         1a:8f:f0:72:48:e2:0b:2e:93:4a:df:25:9a:b4:03:a5:14:ff:
         57:55:ab:1c:e8:7a:3d:69:1f:3e:2b:3b:ca:59:c1:02:3d:54:
         2f:5c:0b:c3:8d:1a:af:f8:01:79:9b:21:ed:46:93:72:f3:2b:
         a7:1f:a1:97:0e:d9:ce:fc:8b:93:5a:f1:cf:7e:4b:93:08:cf:
         9c:1e:8a:3a:bd:cb:1b:a2:a3:98:9e:a2:5f:ed:a0:7a:f6:8b:
         a3:f6:67:ea:63:6c:f6:8e:cc:40:be:92:30:7c:01:85:a1:b5:
         a4:5e:b6:2e:5c:56:85:ab:34:3a:d7:d5:e4:b5:71:74:6f:61:
         e0:3b:27:f5:2a:fa:73:a4:5d:a8:9e:9f:78:c4:2d:b8:c3:e7:
         af:17:43:ec:1f:b2:a5:28:3a:d0:8f:e9:3e:6a:ab:6c:6e:00:
         21:30:6c:24:d8:98:5d:2a:e4:6b:ee:9a:09:f5:ea:81:a5:45:
         ca:9e:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 22:19:00 2026 by rpki-client