Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cc946962-bce1-3e41-bbcd-39e0a531d983.roa
File:                     cc946962-bce1-3e41-bbcd-39e0a531d983.roa (raw, json)
Hash identifier:          VjV84Vk3ULHWu75maQ509MHtDJDmWQ/fMYwEGVzadOU=
Subject key identifier:   66:3C:B6:35:96:A7:EB:4A:0B:76:FD:1F:BB:D8:E4:BD:E6:69:5F:4D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE42344F94E26878135933D80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cc946962-bce1-3e41-bbcd-39e0a531d983.roa
Signing time:             Wed 19 Aug 2026 18:03:53 +0000
ROA not before:           Wed 19 Aug 2026 18:03:53 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     32898
IP address blocks:        206.58.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:44:f9:4e:26:87:81:35:93:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:53 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=30fa1c4b-8217-401b-88ab-8435189769ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:70:c4:ac:1f:3a:53:ac:21:24:fb:a9:ec:
                    59:d4:a9:f4:91:6d:dc:c4:21:35:0a:2f:45:87:ba:
                    46:f5:97:ab:d8:ff:d4:2c:8d:e3:28:56:0d:7b:17:
                    15:4e:58:60:2e:d8:4f:3b:ed:72:36:31:07:e3:e5:
                    e0:99:16:d9:ba:1c:cd:5e:47:64:be:6d:17:4e:4a:
                    9d:19:ad:e8:58:7f:9a:5e:8a:c0:1c:cc:14:60:80:
                    fd:17:a5:ba:54:7c:46:10:5f:3c:83:22:aa:dc:a0:
                    dd:33:9b:83:ad:b3:5e:8c:ad:4c:6d:35:2d:e0:be:
                    a8:80:c5:c2:6d:c7:88:9d:be:10:43:f5:79:4e:af:
                    35:40:47:b1:94:a8:a7:f0:0f:2b:8a:c4:ad:88:af:
                    e9:8f:4f:81:94:e8:27:9d:cd:af:87:31:d0:a5:42:
                    df:bb:8b:8b:95:1e:9e:22:dc:ce:e9:c9:3c:b5:10:
                    d3:ed:8f:18:4b:af:27:ee:93:4b:0f:4d:af:af:22:
                    5f:e8:c0:28:53:93:89:5e:8b:67:57:cb:43:d0:92:
                    ef:27:61:1a:10:92:a3:4c:5c:db:d3:17:bd:9a:2a:
                    69:5a:4c:2e:28:87:4e:9f:00:6b:6d:cc:0f:2b:c0:
                    b9:11:e9:f4:01:38:07:18:8e:de:68:62:e5:bb:5c:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3C:B6:35:96:A7:EB:4A:0B:76:FD:1F:BB:D8:E4:BD:E6:69:5F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cc946962-bce1-3e41-bbcd-39e0a531d983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.58.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:45:8e:8d:d2:0b:f0:d9:f3:8e:e3:b4:16:f0:a9:7a:8a:d4:
         47:b0:f9:2a:9d:20:f8:92:0a:ea:8d:e3:99:e7:f2:3a:f0:27:
         17:5d:70:17:a7:c9:f3:22:e6:66:d2:d8:e9:a6:55:7f:eb:b4:
         dd:53:a0:e3:ac:34:78:32:0b:51:fb:19:35:0c:af:19:c4:09:
         94:ee:c2:d3:2b:c5:0d:2a:50:69:a7:07:a9:c5:89:b4:82:a5:
         74:c2:5e:1e:05:7d:66:7d:00:d1:7d:e7:f6:a6:14:3e:ee:ab:
         a7:86:25:58:22:d9:cd:69:da:fa:68:24:84:d9:9a:8b:b7:32:
         a5:51:37:26:ca:20:93:9e:4a:b7:1c:e2:06:7c:b5:b3:58:d5:
         63:60:bf:b3:80:94:83:0c:3b:5a:e4:2d:4d:9f:3b:a7:c8:f2:
         cd:2b:ca:8f:7e:ab:7e:27:58:e4:48:24:3a:a9:bf:97:ee:3c:
         66:17:84:fe:5b:16:14:88:9b:3b:27:81:44:68:13:81:52:4f:
         14:fb:a6:43:cf:a2:1a:be:54:03:4a:5a:41:a3:2b:8f:eb:90:
         a4:ee:76:0f:95:b2:ab:aa:09:21:74:0d:05:0c:ee:bd:68:49:
         8a:e3:51:30:62:b2:52:34:e4:65:6f:13:0b:84:96:86:1e:82:
         ff:8d:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:32:26 2026 by rpki-client