Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa
File:                     d3d64247-d754-342a-b8f5-056c92a5462e.roa (raw, json)
Hash identifier:          2MZyFJTLp+JleRu+mm0T3awD40iMsntANR4w6o1r5LM=
Subject key identifier:   A4:6B:46:8D:23:83:64:78:A9:BA:14:2B:BA:12:B8:29:B9:DA:8F:62
Certificate issuer:       /CN=5cc1ebaa-d0c9-4588-a688-29d18d2c9af6
Certificate serial:       010D0C9F4328584EA797D062B7D9268D79E7A480
Authority key identifier: 8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395825
IP address blocks:        207.229.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:d0:62:b7:d9:26:8d:79:e7:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc1ebaa-d0c9-4588-a688-29d18d2c9af6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=069ce553-8037-427e-9516-c9ad58479d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:35:7f:21:f8:64:eb:2a:d8:45:ae:2e:db:
                    98:4a:c4:86:cd:da:71:c9:ca:26:73:9a:9b:e7:27:
                    e7:78:11:2f:58:b5:a1:88:c2:8f:65:c6:38:5f:e1:
                    9e:06:e8:93:f6:21:26:f4:ab:6c:df:16:08:ed:60:
                    84:7e:a2:19:f2:1b:41:fa:e8:e6:89:44:ab:a6:a0:
                    62:4a:2f:40:8e:2c:6e:a5:4d:df:62:ad:6c:2d:f3:
                    50:e7:c0:c9:b2:90:12:7e:94:2e:37:6d:9c:ca:58:
                    d5:4a:81:75:da:e5:0b:32:9b:19:ed:5a:78:18:f9:
                    ac:5f:3a:41:73:98:b2:15:bc:e3:c2:b4:ec:87:71:
                    78:8c:d8:be:71:12:c5:81:c6:ee:7c:ee:92:c7:1e:
                    24:93:d8:9f:8a:25:05:db:86:c9:c7:ca:7f:39:35:
                    3f:94:1b:22:74:d9:8e:46:9d:de:b1:d6:d4:8e:eb:
                    ad:16:1d:ac:05:39:2a:26:f6:b3:4c:18:b8:49:cc:
                    78:05:ed:f4:c8:77:89:39:a2:59:de:1e:6a:b8:b4:
                    96:d8:1a:57:fc:4e:32:ad:d1:56:be:fd:1b:a5:17:
                    45:a7:5e:14:12:a1:76:a7:44:9a:b4:ab:50:20:be:
                    79:eb:aa:47:d9:9d:99:aa:67:aa:b0:e2:20:8a:dd:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6B:46:8D:23:83:64:78:A9:BA:14:2B:BA:12:B8:29:B9:DA:8F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.crl

            X509v3 Authority Key Identifier:
                keyid:8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:d5:1a:7f:fc:65:4a:9f:40:3c:12:ca:a0:a7:b8:6e:fd:
         17:81:d9:68:fe:c4:e0:f5:35:a7:cc:36:59:26:a5:46:c6:18:
         82:b1:fa:ca:b3:31:8c:44:df:4f:e9:27:31:c6:b3:19:47:c4:
         95:69:cd:82:06:e7:bf:90:1f:aa:d6:54:cc:bd:f6:44:4a:94:
         29:98:31:8d:f6:57:09:29:e1:36:e5:64:dd:39:78:66:50:3d:
         1f:60:54:e5:5f:c9:2c:d0:2d:00:78:a5:a6:c3:4d:be:5d:06:
         30:dd:e7:d3:98:e9:88:66:5e:ef:09:31:a8:f7:99:03:4d:cb:
         c2:87:31:44:fa:88:a1:5e:83:af:be:96:a5:f0:af:04:a5:70:
         c6:f2:10:d9:2b:4a:d0:5b:f8:1c:06:dc:d9:3a:3d:51:f7:ed:
         8a:b8:1e:08:c8:48:56:d6:6d:a0:10:6e:62:ad:bb:d9:73:02:
         cb:b3:a3:f8:c4:1d:ad:d4:e2:df:69:ae:92:a0:a7:ed:c3:96:
         b7:09:d0:e3:9b:01:ea:cf:43:09:a0:29:50:41:3d:81:38:ea:
         7c:09:09:f0:42:d3:45:7f:c3:db:92:90:bf:03:ef:f6:97:06:
         f7:b1:e0:ea:96:2b:a1:59:7a:a4:b1:00:d3:a0:be:84:03:45:
         65:68:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:40:43 2026 by rpki-client