Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa
File:                     b9d42abc-2171-3691-94bc-daa4312c4aa6.roa (raw, json)
Hash identifier:          pYRSQRupuG8iwp0WEhkytjkHFnakjHQ9B5rjiyZezF4=
Subject key identifier:   0C:DD:F8:10:13:81:86:04:A1:20:5F:29:C8:0D:5A:66:EA:A6:81:56
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584F067247D09C82BC504E9B9D80
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     26380
IP address blocks:        205.233.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:47:d0:9c:82:bc:50:4e:9b:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ba29fb4e-cf33-4324-9209-b2a5a9590b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:cf:c0:48:70:35:39:d7:b1:d5:10:9b:88:
                    ba:a2:d8:81:10:91:61:7f:02:58:c4:b2:b6:68:de:
                    7f:fa:6e:c4:f1:5c:42:75:cd:df:e8:87:ec:39:aa:
                    99:f6:4c:68:30:a6:d5:0d:a0:ec:90:a3:3a:ab:1a:
                    c7:94:0e:f7:d0:e0:60:4b:d8:84:ac:7a:d2:d6:6b:
                    f6:56:bb:19:f1:67:bc:99:5c:6a:b1:08:ae:a1:ce:
                    80:90:ae:6e:41:d0:24:82:3f:59:8c:22:9e:04:d4:
                    6f:8e:67:3f:f3:b8:c9:25:79:4c:4b:98:7c:6b:6f:
                    69:25:79:ac:68:ca:d9:9d:ab:d9:2a:e4:33:67:3d:
                    27:ca:a0:bc:af:53:fc:d2:05:9d:37:77:d8:51:47:
                    07:81:94:a3:2b:26:36:d5:bc:b9:d8:ad:e8:15:dd:
                    d6:0f:08:2c:08:ba:75:72:14:bf:16:35:19:8d:b4:
                    e8:b2:53:53:52:31:77:63:fd:c0:c8:ee:e0:cd:b1:
                    1b:a3:36:b4:8d:0b:9c:bc:0c:1f:da:d6:0b:13:2d:
                    51:d4:8f:67:a0:4d:30:5d:1c:67:f9:00:14:5e:70:
                    ab:2a:ba:10:e5:5d:ab:12:9a:65:34:57:a1:85:07:
                    67:94:d2:c5:83:b4:a7:cb:08:14:96:40:d4:d5:b8:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DD:F8:10:13:81:86:04:A1:20:5F:29:C8:0D:5A:66:EA:A6:81:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:27:c4:77:37:e7:79:e3:03:52:ec:be:60:04:f3:2a:e6:e5:
         23:91:d7:fd:4e:33:83:5f:cd:af:44:ad:12:ec:65:03:76:69:
         0a:20:68:98:71:b5:fe:d6:ee:b7:dd:84:9f:fc:e8:7b:0d:6a:
         00:d6:b5:92:bf:5a:1a:6f:92:a5:08:9c:06:86:ff:35:6c:e7:
         f8:37:e5:31:0a:3e:6b:b1:63:8c:83:69:d5:eb:1f:21:39:fe:
         0a:09:6a:b5:8b:13:64:54:33:ee:8f:9d:f5:8c:78:d2:5c:54:
         fd:8d:7b:cd:f1:e0:e8:30:26:9a:b1:1d:f0:40:6c:47:fe:c4:
         cc:c2:26:c9:36:0a:3c:97:6a:ce:50:2f:81:6b:3f:3e:e3:bf:
         94:c2:8c:2e:cd:2e:18:63:c5:a3:11:3d:30:75:69:43:61:ad:
         8e:aa:da:4e:11:2b:ef:c6:e1:a5:46:ab:f1:38:8e:57:40:d9:
         bf:41:60:9f:c8:b7:28:1d:1c:a7:17:3a:90:75:fc:19:72:6c:
         7a:10:d3:2c:75:1c:6e:43:a0:6c:d7:c5:01:7e:ae:a9:d9:72:
         60:13:a4:27:e8:f0:c4:02:eb:04:ae:9f:47:f3:7d:1a:19:03:
         03:4c:ed:62:cd:21:dc:6a:b5:cc:1f:12:9f:8d:dd:bb:95:37:
         69:25:29:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:12:01 2026 by rpki-client