Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa
File:                     0c08ffb5-9234-3de8-badf-f6244630e256.roa (raw, json)
Hash identifier:          EuwWJZlHCTVUkZTYElLddAlSu63YWELDNrecpysKCQQ=
Subject key identifier:   99:26:E7:79:9A:4B:89:F1:86:DF:D2:68:A7:CD:65:78:73:9E:A8:7E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E4AEF69CE531261808342A3A0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        170.85.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:69:ce:53:12:61:80:83:42:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=8d2ade2a-55fc-40b0-a7d5-bd3c333db8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:25:43:f6:98:39:d8:ec:ea:69:b6:5e:11:
                    f2:9e:ff:2e:89:76:e6:49:f9:07:4e:49:08:d3:88:
                    ff:a4:d7:09:c3:dd:90:74:c9:c5:25:43:e3:66:95:
                    40:24:21:f4:b1:cf:30:54:64:3b:79:1d:fa:0c:35:
                    c3:23:26:bc:55:35:99:2f:17:29:b2:77:7e:1c:3a:
                    76:b7:50:84:d1:11:a3:21:02:1f:f0:bf:b9:f6:ad:
                    df:cb:42:02:aa:4e:9f:03:15:46:2c:86:4f:6a:b7:
                    13:61:35:ce:12:e1:1c:ea:2e:7f:3c:26:e6:ad:83:
                    54:bc:54:6c:38:dd:bb:11:11:1f:28:9c:62:31:9b:
                    e2:d3:9e:0c:12:33:d2:98:7c:60:61:4f:30:bd:c8:
                    cb:17:f6:c3:71:e8:4d:a4:11:ba:a5:e5:f8:46:34:
                    55:54:1b:72:7b:7b:c0:19:2c:8b:95:35:3b:1b:c1:
                    93:13:27:bd:f7:65:ad:9d:c3:d1:c1:ca:54:c5:25:
                    ce:24:08:5d:22:34:f9:a8:a8:05:69:52:65:93:8b:
                    f8:8d:97:be:0b:09:06:7b:97:ca:e7:2c:8c:27:5d:
                    cd:dc:bc:2a:9f:9f:9e:b7:d7:50:36:f3:b5:65:1c:
                    04:95:dc:45:87:82:99:a9:9d:17:de:ed:7c:60:1b:
                    2f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:26:E7:79:9A:4B:89:F1:86:DF:D2:68:A7:CD:65:78:73:9E:A8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:f9:38:f4:90:19:e3:65:60:9b:9e:49:32:36:19:01:0e:
         5f:1a:99:ed:64:3a:fa:8d:46:2a:8e:1a:b0:ef:be:26:a5:46:
         dc:29:59:a3:07:41:b6:f7:92:4f:93:9a:75:ad:87:d7:c2:52:
         6e:eb:10:30:1b:ce:d3:b6:b8:84:ac:cd:5c:c5:56:29:8c:d1:
         53:3c:d4:ba:fd:f5:dd:de:fe:07:7a:f4:21:c0:0a:85:1f:cb:
         83:86:75:9a:a8:c1:b7:e9:35:4f:c6:7f:38:63:ce:5d:da:b9:
         ae:9f:b0:5d:14:3e:4f:07:ce:6e:90:ab:63:a7:22:6d:1f:2e:
         d1:95:a3:94:d0:c2:6e:f6:90:fd:e7:c7:61:f2:a8:f1:e2:72:
         e0:7b:16:80:6c:99:f2:cc:58:d3:74:18:4b:b1:f7:75:d7:6d:
         b4:36:41:93:9e:ef:2a:bb:9b:a4:85:53:82:c7:24:c3:c5:71:
         d5:c6:04:e3:c6:d7:5b:de:c3:fd:60:22:f7:05:47:da:28:4a:
         bc:61:cc:e0:ec:c9:53:bd:97:02:e0:50:2d:6b:10:86:36:22:
         e9:d7:d0:b2:0f:41:25:7e:37:72:9b:b5:f0:fa:c8:d1:62:59:
         3e:6c:8f:be:b5:b0:6c:29:28:5a:ae:bc:a0:a5:f6:fb:d9:a9:
         48:f7:76:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:22:53 2026 by rpki-client