Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
File:                     41f68333-52c9-3f36-ba59-589d37e6bdf7.roa (raw, json)
Hash identifier:          bcKEAKOD4N06RbU58TFC5Fw6qhHRniPyYa6UE7JvPio=
Subject key identifier:   33:FF:E3:D9:4C:AA:48:67:51:7A:7E:B0:4E:AD:D6:0B:FA:1D:3B:28
Certificate issuer:       /CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Certificate serial:       010D0C9F4328584EBB11BBC847413F3FE3EBDB40
Authority key identifier: 2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     394475
IP address blocks:        209.35.176.0/24 maxlen: 24
                          209.35.177.0/24 maxlen: 24
                          209.35.179.0/24 maxlen: 24
                          209.35.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:bb:c8:47:41:3f:3f:e3:eb:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edecac80-d7c3-48ad-8738-ec98e8c08265
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=18a9ef05-29c0-4eca-8de0-844ae4ac7126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ff:25:7e:6a:90:7d:87:fe:02:86:f9:68:ca:
                    db:e1:fc:29:88:05:a4:3d:3d:bc:73:08:66:58:11:
                    44:ce:39:c6:fd:ae:54:ff:ff:89:06:35:40:87:12:
                    b7:d9:52:1b:dc:be:b3:0a:a2:46:5b:47:6c:42:eb:
                    f1:36:45:a3:3b:bc:fe:15:f9:6f:01:68:38:b5:2b:
                    b3:8e:8f:87:27:31:b4:75:b6:6e:7b:a5:31:05:9f:
                    02:40:dd:87:b5:43:dc:8f:20:70:36:39:97:83:88:
                    5a:b3:74:af:51:8d:57:7f:94:2e:9b:be:09:d3:50:
                    2e:39:14:d4:f7:b3:14:c2:2d:05:82:d9:6e:d6:80:
                    a8:9d:80:ed:7d:b9:54:34:38:b8:66:26:7f:c2:2c:
                    61:1c:a9:e7:37:0f:40:35:01:5f:92:34:aa:be:97:
                    0e:8a:5b:de:82:bc:54:2f:e1:4e:f1:7f:98:75:59:
                    55:aa:eb:f0:c0:16:94:42:dc:5d:a1:b6:81:67:ed:
                    34:8a:72:03:f7:46:3f:db:e8:33:f6:89:e4:f6:28:
                    54:5a:b8:5e:36:83:32:d7:0d:c5:d2:6a:d8:15:67:
                    c7:ed:d9:3a:10:01:f3:61:66:c1:6e:90:38:a8:1c:
                    2e:17:fa:b8:06:9b:47:97:6a:27:09:8c:4a:18:96:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FF:E3:D9:4C:AA:48:67:51:7A:7E:B0:4E:AD:D6:0B:FA:1D:3B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl

            X509v3 Authority Key Identifier:
                keyid:2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.176.0/23
                  209.35.179.0-209.35.180.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:46:31:4e:7f:99:ca:9f:28:3e:a2:9e:4e:d8:8b:c9:6a:d8:
         5a:3b:86:fa:e1:65:66:be:3b:13:d8:af:eb:aa:45:bf:5b:e3:
         f4:2e:c0:56:c2:f2:67:8b:68:d1:0b:09:d3:ac:90:c2:a6:f9:
         f0:71:86:8c:d7:cd:d4:9a:e1:8d:69:16:96:02:dc:0d:9a:a5:
         08:f2:3b:a8:d8:eb:46:ee:46:9f:0b:0b:b3:6a:92:c1:07:f9:
         04:63:4d:aa:3a:33:ba:cb:a2:3e:9a:34:aa:83:fb:cd:75:97:
         83:3b:dc:22:89:45:a7:fa:60:f6:66:ec:37:ec:e0:f2:02:df:
         40:ad:cd:1e:38:59:94:91:b9:02:f9:87:95:14:98:0e:53:d7:
         4e:0d:c2:d0:45:ad:ab:9b:70:82:e4:55:a8:5e:fa:65:fd:26:
         34:7d:51:c6:b5:60:e2:bc:b9:4f:5e:99:e7:db:25:24:b0:5e:
         13:f3:f6:fe:2c:37:b6:b4:2a:8e:2c:13:e6:5c:ac:3e:43:12:
         1a:b9:ec:7e:fa:a2:15:37:f7:4c:ce:f9:a3:30:99:20:7f:ad:
         00:c5:f6:59:bf:1a:49:26:3e:29:4a:2f:34:14:81:46:31:e3:
         5b:68:51:5e:6a:6e:0b:48:74:1e:79:29:7d:46:08:94:bc:86:
         32:45:b1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:58:50 2026 by rpki-client