Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa
File:                     d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa (raw, json)
Hash identifier:          YhsDCsE0AMSv5iRVfEcuJ/YhQPRXmhUH6TTIAj+m5GE=
Subject key identifier:   EF:50:95:11:BC:6D:98:F0:9F:87:3A:1D:2E:74:A0:0E:45:94:DF:F2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EEA87574250046B7CC46FC300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     3925
IP address blocks:        209.66.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:57:42:50:04:6b:7c:c4:6f:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=7671d0c9-4e4d-4db0-b9a7-7c9b13b7f8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:39:ce:84:67:55:65:5b:b5:17:07:e9:30:
                    b5:84:fc:70:77:1c:6c:36:6b:01:20:8c:73:b0:51:
                    97:d5:88:29:10:e8:65:df:ef:69:29:df:60:10:42:
                    3e:33:51:79:53:e8:bc:52:9e:e6:b7:95:85:fc:9c:
                    a1:e0:a8:20:af:75:c3:37:87:c1:20:a1:f0:d0:bf:
                    3b:90:3c:9f:f2:f8:44:ff:99:20:44:95:da:57:e3:
                    6a:a9:b1:2c:cb:c1:5a:04:f7:96:ce:7a:df:85:40:
                    8d:a8:84:6a:cb:f3:f2:1a:52:4e:57:b2:49:6c:2b:
                    54:19:8a:7d:03:25:49:80:4a:96:46:ef:b8:d2:d2:
                    d8:55:d8:6f:c4:08:f7:a5:62:88:88:0b:bd:44:71:
                    3e:bf:44:90:d2:01:27:cc:62:f7:57:d1:fc:f1:b5:
                    0f:4a:f1:95:2d:42:3d:45:2b:18:e4:a2:3a:50:ca:
                    8f:50:0c:13:df:c5:b4:16:72:ac:e1:ed:e0:ee:93:
                    19:18:db:37:a6:1d:00:70:f8:4c:45:fc:5f:ec:12:
                    9e:d1:2c:a2:5c:5b:b6:22:c6:2b:be:af:db:b3:20:
                    52:b6:56:d6:95:21:2e:37:b5:ac:ba:44:ab:11:f6:
                    63:d8:88:a8:d6:10:38:68:1d:80:07:d3:23:94:7f:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:95:11:BC:6D:98:F0:9F:87:3A:1D:2E:74:A0:0E:45:94:DF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:34:37:c3:13:6b:4c:6e:18:d3:eb:7b:41:bd:57:34:62:07:
         00:d5:3d:4e:cd:1a:5c:0c:1c:62:91:23:3c:c4:84:46:c7:78:
         a7:b8:81:73:49:53:fa:95:bd:04:fe:24:8b:bc:0b:75:76:7b:
         b0:f0:f7:57:e2:32:46:77:e8:43:3a:04:c1:e4:7d:59:f5:d8:
         fe:cb:ca:a6:a9:53:c5:2d:83:0e:53:3f:12:d1:ea:8d:e7:a0:
         b5:14:3e:44:b2:70:4d:cb:76:1a:d8:a6:07:a5:cf:7b:74:ae:
         9f:79:bb:bf:9d:ed:2f:78:3f:2b:f0:b0:31:d2:bf:ca:15:ef:
         85:c9:03:86:35:66:0f:7c:63:12:bb:e8:de:85:a6:f9:94:b9:
         6e:7a:6d:58:98:2b:9a:90:78:88:d2:90:ce:c7:a4:d3:39:e2:
         23:0e:f4:bc:2c:50:7e:20:49:66:ea:6e:ef:61:52:69:ee:9c:
         aa:79:f8:65:1d:f5:75:96:c4:ba:5b:4c:a0:72:84:64:da:25:
         3c:c9:35:ad:7c:26:2f:cd:9c:d1:39:00:25:c1:b8:c9:11:20:
         8b:3f:06:05:1f:81:24:cb:86:17:1a:6c:c0:8c:27:dd:97:df:
         35:e5:65:30:2f:75:76:e9:94:3c:6c:07:be:4d:53:fb:56:a7:
         1c:5b:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:44 2026 by rpki-client