Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa
File:                     613fa299-8908-33cb-9007-d2458ea0cfaf.roa (raw, json)
Hash identifier:          MuAn53cYn6SUXzGBx51RGm/It5czqTzOoClRBz4wwRA=
Subject key identifier:   3D:8F:BD:E7:79:ED:C0:7F:F7:30:B7:5D:0D:65:5A:4E:50:7D:74:7F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74227760027016FB6D870
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     62044
IP address blocks:        209.55.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:42:27:76:00:27:01:6f:b6:d8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=b8603883-fe59-412f-92a9-3e70047619a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:5c:9f:8a:33:50:02:37:53:63:46:bb:61:
                    e6:f7:d6:ed:05:33:61:79:97:44:a5:55:77:54:6e:
                    26:32:f6:84:0a:bd:91:90:07:c9:01:99:35:09:4a:
                    52:b5:ea:52:9d:24:42:16:fb:21:b0:38:9b:85:18:
                    c8:70:a7:ca:6e:25:a3:49:91:26:ce:d9:69:63:28:
                    62:be:41:b9:9b:e2:87:69:ac:e1:2e:01:a6:f8:b9:
                    2e:8a:52:59:71:b4:e5:6c:cc:17:5a:92:04:bc:cf:
                    c3:19:80:7e:64:68:31:7f:4c:61:77:3f:07:33:5d:
                    aa:cd:9f:c5:73:b7:b4:a1:ac:7b:d6:d3:eb:f6:ac:
                    af:74:57:a3:48:6c:21:bd:31:d4:f9:ce:af:2c:89:
                    35:30:c9:02:20:64:cd:de:60:88:34:1f:0d:41:cc:
                    6d:5e:3e:df:55:ac:86:de:ff:2a:33:d1:5b:cb:6e:
                    59:25:61:7b:a4:57:73:d4:8a:48:7f:cb:52:e3:23:
                    97:17:05:ea:8c:f3:95:1f:7c:35:03:b0:ef:be:f6:
                    ae:fe:b4:d4:ad:1c:7b:d3:ed:84:35:13:9d:6d:55:
                    7b:a5:a2:57:03:6b:f4:4f:42:74:af:c4:dd:b7:35:
                    d3:0c:54:e6:14:15:ee:66:48:95:23:77:15:bd:23:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8F:BD:E7:79:ED:C0:7F:F7:30:B7:5D:0D:65:5A:4E:50:7D:74:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:03:df:22:e8:e4:d0:3b:b2:6d:51:4d:86:ef:bb:5a:54:48:
         25:2c:23:d1:be:c3:6c:97:1f:c1:7c:67:2e:88:46:92:a0:b3:
         68:0b:5e:f1:60:04:d8:5f:ce:e3:93:15:5b:b5:27:ac:c2:83:
         6e:78:28:d7:d9:4f:84:bd:6c:39:ba:02:52:eb:53:8d:73:6e:
         67:83:d6:6c:65:8c:c9:44:da:21:7e:02:37:d7:19:2c:0c:09:
         a3:fc:ea:d9:3b:d5:cb:66:56:cc:7c:f1:57:d7:73:76:94:5a:
         c9:05:db:73:20:ce:ac:41:71:b4:f9:52:9d:a2:01:a3:b2:a8:
         f2:e1:bc:a0:7f:62:ac:f4:50:7c:b2:b0:1f:5c:b7:c7:7a:49:
         a4:4e:39:92:4d:c1:d7:05:34:7c:34:51:59:fe:34:21:88:04:
         d8:1d:00:a8:e6:e7:a9:47:80:45:e3:a1:dd:d7:da:38:d6:29:
         65:86:ce:33:dc:21:9e:53:eb:0e:5b:40:37:d9:0f:aa:15:43:
         76:6a:a7:be:a5:e5:58:83:ab:b2:84:f6:88:30:6d:d9:03:77:
         7b:72:62:b9:a5:a5:1f:8a:16:89:5b:a9:c9:43:4d:53:9b:71:
         bc:f2:b8:9f:cb:25:ac:74:d3:b9:fc:f2:1e:8a:43:33:cc:db:
         0e:23:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:26:10 2026 by rpki-client