Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8e09759-d1e4-3ce0-8e43-bff1312fe066.roa
File:                     c8e09759-d1e4-3ce0-8e43-bff1312fe066.roa (raw, json)
Hash identifier:          nD5S2a/isn5FST9X6aLR90JZ8R46KtGpeGQOcuDGU88=
Subject key identifier:   B7:19:DD:C8:7E:C4:14:96:9B:22:F4:CA:A4:CE:4B:51:BF:1F:7F:B6
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2E6D0CEBB3BA18DB45A00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8e09759-d1e4-3ce0-8e43-bff1312fe066.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62044
IP address blocks:        209.55.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:e6:d0:ce:bb:3b:a1:8d:b4:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=2473d271-6926-457a-89b6-cfb2c21511f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:19:30:22:15:73:5d:24:ae:14:d7:d7:24:
                    16:a7:38:f7:c2:78:77:82:7d:b3:b1:20:b8:94:a5:
                    46:eb:73:14:ca:0f:c5:9d:c7:6c:bd:df:60:5a:b3:
                    88:de:f6:8c:aa:15:ad:6a:43:6f:cd:6b:6d:e9:bd:
                    53:98:1c:6d:56:9c:3a:67:e2:05:ba:43:6d:ba:9f:
                    ca:69:50:81:ee:ef:db:c2:08:e0:58:82:c7:a4:9a:
                    68:83:99:5b:b7:28:c9:2c:1b:42:f7:b0:ad:95:d0:
                    69:2c:af:22:03:61:ed:8d:a3:ad:42:05:81:46:1e:
                    ec:20:f7:06:15:ef:f7:7e:1c:75:ec:27:73:59:47:
                    6e:ad:cf:03:a8:fd:40:08:47:a7:30:9c:cd:a0:61:
                    20:23:ca:64:2a:9f:f9:6b:03:ca:f7:03:14:aa:26:
                    f5:42:a0:73:2f:a6:14:92:7f:c1:1b:6c:44:f7:3b:
                    a2:35:5f:07:d3:2c:9e:a9:ab:20:5b:5a:8c:94:91:
                    03:7f:0a:f6:20:a6:76:f1:da:74:72:d0:07:b0:45:
                    a5:b1:e4:a7:5d:4c:31:66:75:75:3c:fb:bd:48:16:
                    85:83:0d:76:f4:cb:c4:78:3f:4d:15:ed:40:4d:af:
                    55:87:54:77:3e:ed:cd:b3:45:67:4b:bf:c3:13:b5:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:19:DD:C8:7E:C4:14:96:9B:22:F4:CA:A4:CE:4B:51:BF:1F:7F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8e09759-d1e4-3ce0-8e43-bff1312fe066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:7d:c3:4f:6c:b8:0b:ab:56:09:93:38:f5:0c:50:70:db:
         3e:18:c4:69:76:70:db:b1:89:a4:d0:b9:17:22:b3:48:07:0f:
         eb:f1:09:cd:52:3b:9a:8f:e5:5e:db:f9:3f:88:c6:68:dc:22:
         49:f6:6a:88:63:34:f6:a8:9c:a0:1d:f1:6b:ed:97:fb:b7:fb:
         7d:b5:7e:c0:4e:73:42:77:7c:34:fb:1e:1f:08:b0:91:f9:de:
         17:d6:d6:3e:e0:7d:fc:45:3b:de:04:f2:18:57:31:26:58:7b:
         97:21:45:56:e3:3d:68:d4:a9:72:7b:11:8e:a1:19:5d:b2:40:
         9b:91:5a:b2:6d:6a:08:4f:5e:97:0e:5c:c6:2e:58:4c:6c:b5:
         8a:3d:c5:66:1f:fb:d0:1b:21:0e:c7:ad:c1:68:8a:ca:27:0d:
         9d:d9:78:04:a4:65:6f:41:35:f7:e2:51:95:a4:90:03:83:e8:
         5d:af:d5:bd:50:81:b7:60:2c:59:58:e1:c0:38:c1:bd:cc:fa:
         01:e8:15:33:ac:09:10:97:6c:d7:94:3d:15:a5:75:26:62:2a:
         bb:e0:31:76:a2:d9:0f:76:22:85:83:81:89:f0:c8:87:7f:21:
         5f:1b:79:3c:be:13:bb:a8:d4:2b:e8:5b:fc:ea:c7:fb:3a:27:
         42:e1:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:44:52 2026 by rpki-client