Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa
File:                     7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa (raw, json)
Hash identifier:          gATPOFIYClhm7U0Mk9WZrlEXEwVDAp4wen/OLZVlroY=
Subject key identifier:   96:06:DD:8C:43:95:D9:50:67:41:24:7F:D9:34:01:E3:A3:7B:A8:21
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA79155887A42334C67C0A280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11233
IP address blocks:        209.237.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:55:88:7a:42:33:4c:67:c0:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9df6b0c2-eb97-4075-9342-078a0c0a1cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:d3:a9:f6:f1:ba:5c:5c:5e:74:1c:8d:6b:
                    4f:28:64:b8:0d:5a:03:61:f9:cd:0d:95:a5:65:30:
                    ad:ec:47:99:fd:2c:c4:5d:fc:97:d2:8e:5e:02:12:
                    ca:26:9b:db:9d:ad:4a:36:d9:fd:00:35:d4:27:57:
                    0e:f0:49:06:11:02:78:bd:50:d4:af:1e:4c:99:bf:
                    ce:58:31:f9:54:38:51:31:e9:0e:da:64:b7:69:80:
                    8f:79:7b:88:e8:0e:a5:ed:3f:75:ff:f0:d8:e8:47:
                    ed:15:7b:7b:a6:8f:50:e3:39:14:dd:88:71:57:d4:
                    39:0d:c6:74:32:22:22:cd:b7:dc:7c:02:2f:4f:a4:
                    e9:af:ca:0b:bc:bc:1a:03:5e:3b:22:49:10:ff:c6:
                    f3:e3:8c:c0:0e:16:55:f5:0b:0f:e9:24:3a:12:6f:
                    14:cb:43:e6:73:85:47:95:a7:dd:f5:8e:63:34:be:
                    5c:94:1a:66:0d:1e:b2:49:54:d6:48:a8:c2:b5:34:
                    01:22:cf:5e:4f:2a:98:9e:12:34:74:49:a3:6b:1d:
                    f6:9f:03:f7:96:89:c4:1d:96:76:cd:91:f9:67:c1:
                    99:50:33:71:f8:85:7a:61:92:fa:00:a8:9a:f8:34:
                    3a:0c:8e:fa:80:7c:70:1b:fa:ba:9e:ac:08:b5:e4:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:06:DD:8C:43:95:D9:50:67:41:24:7F:D9:34:01:E3:A3:7B:A8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:af:92:f3:1f:82:86:cd:9e:f3:9f:0b:27:80:aa:a2:0a:f0:
         ce:f0:bb:99:42:18:e0:1f:fc:c2:13:36:e1:64:15:ce:12:8e:
         93:b1:56:00:6c:2b:24:b6:d3:d9:c8:36:39:bd:06:da:ed:7d:
         16:2c:a5:4e:aa:8f:32:47:08:fb:2b:ef:08:12:70:40:fb:ef:
         ac:8f:34:dd:79:65:88:f2:d5:89:7b:3c:51:2d:2e:4d:0f:26:
         86:b8:20:af:65:fb:21:f7:21:28:a0:94:56:13:12:ce:1f:cf:
         04:f2:52:f7:1d:07:91:fd:df:4d:8d:cb:d3:05:ae:92:53:ae:
         5a:1e:77:4c:0e:50:a1:1f:7b:65:4f:00:1a:0a:36:15:bc:45:
         de:8c:64:68:9e:8d:04:70:37:09:28:cd:98:8f:eb:e9:23:4c:
         fa:23:78:67:e8:fc:08:2f:43:ed:50:ea:ae:8c:12:e2:df:a5:
         4e:83:d9:09:cb:54:71:9b:a6:ae:ba:90:5f:c4:c1:e2:f1:32:
         c3:82:60:c3:fe:e0:c4:da:b8:27:89:f6:64:b9:ef:28:c0:d0:
         fd:c3:74:2f:ab:bc:40:67:13:fc:9f:ee:90:94:8f:11:f7:62:
         5a:2e:5f:ab:bb:e5:1a:04:a9:64:b7:b6:2f:58:56:cc:84:27:
         4e:80:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:30 2026 by rpki-client