Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/6e2433da-c90c-3925-9506-e64309fb9dce.roa
File:                     6e2433da-c90c-3925-9506-e64309fb9dce.roa (raw, json)
Hash identifier:          fv6WXV/jCV2RwUtig7jwK+IU7D464ll1Ep03d/UaMdA=
Subject key identifier:   7B:23:12:C4:C7:61:03:5E:86:09:FD:E7:15:98:EE:9A:2A:EB:99:EC
Certificate issuer:       /CN=f5543cab-492c-47b2-869b-a727d610adf7
Certificate serial:       010D0C9F4328584EE9237CDD059F42E235E97680
Authority key identifier: F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/6e2433da-c90c-3925-9506-e64309fb9dce.roa
Signing time:             Fri 21 Aug 2026 13:03:22 +0000
ROA not before:           Fri 21 Aug 2026 13:03:22 +0000
ROA not after:            Thu 19 Nov 2026 14:03:22 +0000
asID:                     16509
IP address blocks:        207.241.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:23:7c:dd:05:9f:42:e2:35:e9:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5543cab-492c-47b2-869b-a727d610adf7
        Validity
            Not Before: Aug 21 13:03:22 2026 GMT
            Not After : Nov 19 14:03:22 2026 GMT
        Subject: CN=4079a917-8b7f-489c-b8b2-795db96dc2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:38:e0:48:b6:36:80:9b:f8:67:5c:e0:9d:
                    ae:09:7c:33:22:7e:34:4b:89:28:ed:8b:81:ba:af:
                    b0:4a:e4:83:2e:1d:15:f1:e0:c2:2e:79:28:1c:b6:
                    c8:fd:cf:15:05:89:bb:d5:10:44:59:a2:d0:79:e8:
                    38:4c:a1:78:26:84:25:80:02:6e:84:93:27:9d:7f:
                    ea:13:7b:4a:cb:1c:16:ce:bc:c5:b4:e5:dd:72:81:
                    7f:ad:18:3d:86:e9:2d:56:f4:a8:c0:da:f5:18:a9:
                    01:ea:2d:85:9a:4e:77:d0:ae:81:46:9c:3a:e1:2e:
                    c1:60:00:eb:46:b7:55:09:10:b8:6f:58:dd:ce:94:
                    4d:82:20:58:d0:59:19:07:7f:4f:1c:09:34:34:f1:
                    0e:95:61:7c:e7:12:2e:76:82:a4:55:4e:58:f2:71:
                    4a:79:3b:be:c7:7d:a1:83:77:a9:d7:e0:87:3b:f4:
                    33:b5:29:c2:9a:47:ab:87:1d:88:fb:e3:b5:27:90:
                    7f:2d:92:4c:46:e1:ce:d4:46:36:c5:bd:ca:05:10:
                    7c:33:d0:59:c4:23:ba:89:af:c3:0d:63:9a:ff:b4:
                    ac:0c:57:8e:a3:c7:ba:11:a9:5b:13:85:42:f7:e5:
                    19:84:ab:f2:3a:24:5a:ce:a0:7a:83:a7:82:b4:d0:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:12:C4:C7:61:03:5E:86:09:FD:E7:15:98:EE:9A:2A:EB:99:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/6e2433da-c90c-3925-9506-e64309fb9dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.crl

            X509v3 Authority Key Identifier:
                keyid:F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1f:fb:e8:5f:52:e9:3a:28:55:7e:b0:d2:4d:97:1f:87:23:
         d7:b9:db:87:24:fd:63:fa:01:b6:5f:82:25:16:84:f0:ac:59:
         43:cd:20:59:5b:20:24:dd:48:7b:3b:99:00:88:e4:4a:d4:b0:
         f6:c6:d7:14:57:ea:29:b3:a7:f2:fd:c7:50:b5:12:89:af:ad:
         72:9d:36:2a:32:22:d0:89:08:54:00:d1:1e:23:a6:bd:8b:bc:
         76:53:9d:1a:ce:7e:98:63:09:ac:d2:60:76:fe:c5:1e:36:c3:
         3f:b3:6b:9e:89:73:94:ed:ad:1f:fc:6b:14:e5:90:22:98:39:
         3e:55:7c:21:4e:c0:a8:3a:23:a4:e2:29:ce:c6:d7:71:20:d7:
         0c:6f:a6:bf:e8:da:ff:7a:a3:78:fb:64:f7:9e:17:7b:85:f8:
         47:28:a6:79:51:6d:14:c3:c7:f9:71:63:87:db:42:d0:3f:4c:
         f8:69:7e:17:7c:5b:11:d5:f1:9c:98:bb:2b:bc:67:d3:98:7b:
         ac:13:95:1a:45:4d:86:6e:41:bb:3c:14:37:64:5b:f1:b6:ca:
         0c:a6:08:76:00:13:7d:50:cf:41:47:48:ed:df:36:72:fb:fd:
         4a:40:13:16:42:dd:f9:2f:f8:ce:1d:aa:0c:5b:9e:87:c6:80:
         49:12:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:03:23 2026 by rpki-client