Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/db0b5e8f-7ec8-3e58-9f9a-e274e4e277d2.roa
File:                     db0b5e8f-7ec8-3e58-9f9a-e274e4e277d2.roa (raw, json)
Hash identifier:          cn7uJKsVB9OTwbIc5pG1IC5krVPg+kmlSPhkBOi6ygE=
Subject key identifier:   EC:64:D3:D9:33:44:0E:55:81:39:59:F2:10:73:C5:FE:FE:DB:C6:6E
Certificate issuer:       /CN=b1420c0c-7e61-4b06-8745-33767980b83b
Certificate serial:       010D0C9F4328584F89C89C3972D74B9251FA8F00
Authority key identifier: 23:D0:62:2D:0E:AE:86:6A:E3:C6:92:6A:2A:07:6A:AE:74:7F:1A:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/db0b5e8f-7ec8-3e58-9f9a-e274e4e277d2.roa
Signing time:             Sun 18 Oct 2026 02:05:24 +0000
ROA not before:           Sun 18 Oct 2026 02:05:24 +0000
ROA not after:            Sat 16 Jan 2027 03:05:24 +0000
asID:                     23082
IP address blocks:        208.83.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:c8:9c:39:72:d7:4b:92:51:fa:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1420c0c-7e61-4b06-8745-33767980b83b
        Validity
            Not Before: Oct 18 02:05:24 2026 GMT
            Not After : Jan 16 03:05:24 2027 GMT
        Subject: CN=b39e1e24-92af-4148-a7f6-bc6c3752f257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:fe:cd:54:73:6d:4a:32:9f:0d:93:3a:8e:
                    24:e1:af:19:da:73:dc:13:b6:9a:2e:6d:bf:44:6d:
                    78:38:f6:3d:02:57:eb:8e:f1:5e:0c:33:25:64:28:
                    f0:6a:ce:92:df:f6:48:71:95:e1:76:92:df:ef:43:
                    27:6d:49:31:66:75:40:ad:b0:e3:44:62:28:a8:2f:
                    4a:79:05:14:eb:0d:55:1f:3d:42:e4:72:e0:d0:bc:
                    5f:83:ac:1d:35:ac:8b:46:d9:06:13:b3:b7:4a:ab:
                    44:c9:f2:32:58:51:4f:e9:df:db:5b:66:e1:08:a3:
                    fa:45:48:11:bb:da:be:16:74:e5:2d:d1:e5:bf:25:
                    aa:75:20:b9:5e:21:0d:d9:21:e0:7c:8b:79:88:8b:
                    30:b4:ca:b2:77:26:9e:a8:c6:85:d7:c3:07:f5:18:
                    04:d3:76:02:7b:14:d2:be:a6:84:44:a1:1e:c1:66:
                    a1:f8:4b:97:ed:eb:38:bb:33:06:f6:54:8e:91:6a:
                    7e:eb:94:a1:07:1f:63:15:1a:fa:35:cb:4f:68:dc:
                    d7:f1:cd:a4:5e:25:0a:d8:8b:aa:b9:1b:84:8b:03:
                    c9:8e:f5:9a:95:59:ff:9f:b4:fc:fd:f0:6d:7f:e6:
                    fa:52:f5:1f:17:47:88:9a:83:52:2b:4c:fb:74:26:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:D3:D9:33:44:0E:55:81:39:59:F2:10:73:C5:FE:FE:DB:C6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/db0b5e8f-7ec8-3e58-9f9a-e274e4e277d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.crl

            X509v3 Authority Key Identifier:
                keyid:23:D0:62:2D:0E:AE:86:6A:E3:C6:92:6A:2A:07:6A:AE:74:7F:1A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c9:00:5b:b6:47:83:be:2d:07:cc:3a:c7:d1:55:ed:29:4f:
         24:a6:17:67:0b:f1:77:0c:98:1a:7e:2b:cf:2f:e8:57:79:9e:
         27:61:12:05:0d:da:1a:4c:5f:c9:67:48:89:6a:2a:ba:42:49:
         be:b9:c1:4a:1e:50:27:13:df:a9:c2:6b:d2:69:c3:4a:d8:ce:
         63:e2:13:ca:94:5a:db:36:05:3b:4f:19:44:8b:97:7f:fa:bc:
         74:cb:95:61:e9:9a:de:8a:80:bb:3d:9b:16:d0:82:be:1d:88:
         6a:fe:46:a5:8f:18:67:b8:a0:49:2d:1c:53:d8:9b:fe:2e:e6:
         bc:71:ed:d2:c5:0c:f4:f2:15:c6:a4:de:18:bf:4f:4f:bc:47:
         5a:bf:c6:a0:66:80:bc:14:70:de:dc:92:f7:cc:06:29:72:19:
         56:9b:36:93:84:7d:a9:6a:f4:df:9f:1b:38:bf:67:a2:d7:96:
         f8:47:e6:8a:43:db:b6:57:9f:c2:3f:66:b0:52:a7:95:bc:76:
         96:7d:19:88:e4:cd:25:eb:53:2a:bf:cf:a5:b9:32:54:4e:53:
         8e:a4:15:d1:ed:f2:ee:f1:9e:1a:03:b4:ca:14:9a:9f:2b:d1:
         e7:c1:6f:24:a8:35:21:be:a8:12:55:cb:53:22:7e:20:94:f9:
         90:65:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:29:39 2026 by rpki-client