Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
File:                     b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa (raw, json)
Hash identifier:          40rIKbBSinOlNYu5c+Pn72IHXbrP42wAS/TBFkL1Gr4=
Subject key identifier:   01:FB:2B:DC:AE:F5:FD:2D:46:52:5A:FE:CF:FB:70:BF:B0:EB:02:EA
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584F6F22FDA19C566243FB060C60
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     42
IP address blocks:        206.108.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:fd:a1:9c:56:62:43:fb:06:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=1931959e-9f49-4b13-afc7-0571289466df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:aa:34:4a:10:bb:0a:db:69:f8:d2:7e:56:
                    e4:4f:25:8a:50:ae:35:34:cd:c5:81:c8:6b:54:56:
                    20:26:4a:4e:ca:69:86:d2:09:40:3b:ae:48:dc:38:
                    74:f7:e1:3d:82:44:a4:a2:91:78:9f:b5:a2:55:7f:
                    9f:5a:ab:26:04:48:45:ee:b4:38:4e:b2:09:77:41:
                    fc:c1:39:e4:c1:4f:67:46:54:16:e9:4d:bd:e0:7e:
                    86:d1:81:5e:4d:bb:7b:a4:04:84:fe:58:b4:f7:df:
                    e4:e5:58:b9:c4:6d:8f:af:ab:64:53:b8:2a:ac:8e:
                    68:30:5b:bd:83:7c:11:57:38:1a:a5:9c:da:d5:4e:
                    bc:80:1c:d9:99:a9:dd:55:07:01:b7:43:0d:22:4a:
                    60:45:bf:7c:a4:38:43:61:6e:3a:5f:37:3d:ba:fb:
                    ec:29:ab:b8:4b:65:ac:e0:8f:a4:e3:19:c2:5d:66:
                    84:ab:1d:2a:52:a9:45:38:f5:a1:73:37:83:07:02:
                    c9:4b:84:a6:68:f3:0c:db:a3:63:8c:af:4f:ea:9e:
                    b9:2d:9f:2b:ee:e1:46:9f:ec:53:67:62:92:b4:c6:
                    31:07:56:c9:9f:6e:23:ad:0c:29:ee:df:ce:e6:20:
                    e2:48:c7:55:49:74:e7:95:6e:80:93:a8:cc:0e:49:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:2B:DC:AE:F5:FD:2D:46:52:5A:FE:CF:FB:70:BF:B0:EB:02:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:0b:1a:37:8f:33:64:43:d1:a8:a9:ef:21:c9:f6:a6:25:
         c7:5f:3e:54:f4:ff:d0:c2:0c:ac:c1:51:e6:08:64:13:9e:ef:
         a9:41:2c:c4:e3:cd:c7:d3:7f:4f:54:bf:42:79:6d:8f:20:b3:
         ef:37:11:55:5f:3d:10:13:13:66:cf:2f:11:28:74:bd:37:c8:
         86:c1:e2:e8:b6:47:82:67:11:5c:87:90:6c:d7:50:37:90:5e:
         f4:62:eb:85:5b:60:bc:d2:17:2d:be:74:42:94:96:71:92:17:
         72:52:37:0f:b1:0e:bd:3b:35:f2:ae:3b:8c:e3:fb:27:13:ff:
         79:d7:66:95:42:a1:83:47:9f:eb:04:20:8f:f2:16:00:cd:78:
         51:43:b2:c9:c7:9e:e5:7e:47:31:a7:f7:4e:78:b0:fc:4b:40:
         a6:44:35:92:ef:6d:32:06:04:37:dc:e8:4f:7b:77:0a:02:ab:
         77:4e:3e:0f:2d:45:74:e0:a1:97:d1:76:7a:30:55:0f:dd:cf:
         0e:d6:be:b5:fe:27:07:1d:68:fe:35:6a:49:d7:e3:22:96:f1:
         52:ae:fa:ee:f9:f0:da:47:f3:c7:95:85:ae:70:eb:76:50:a3:
         51:64:52:5f:b1:00:3e:3d:16:d7:93:90:6b:e2:02:69:72:f2:
         99:33:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:29:22 2026 by rpki-client