Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/9bef5258-2e4d-3bf6-b8e5-503dbcee1098.roa
File:                     9bef5258-2e4d-3bf6-b8e5-503dbcee1098.roa (raw, json)
Hash identifier:          t4HZPHX4PCZEOAaGMIO2UcJsvrG5vzV9kQhqY6Mx+VA=
Subject key identifier:   A3:4D:2A:89:65:53:C9:1D:83:B5:76:E7:02:0C:80:E7:D0:0E:09:D5
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584ED431ECD9326C9DF777464D40
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/9bef5258-2e4d-3bf6-b8e5-503dbcee1098.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     53316
IP address blocks:        206.252.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ec:d9:32:6c:9d:f7:77:46:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=1211214b-20b3-46ca-9f4e-3a6d3ecc4012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:b8:a7:93:bb:13:90:94:03:73:46:b1:7b:
                    82:94:0e:48:a1:c7:ea:91:71:0d:6e:c4:2f:07:77:
                    21:e6:85:f5:a9:17:09:ee:fb:2b:9e:f3:83:a0:86:
                    34:e9:b0:39:50:4b:05:7c:de:8a:75:3b:1e:31:01:
                    51:0d:18:2d:0e:86:33:1b:42:0b:c3:95:44:91:1c:
                    6d:76:6c:7a:a2:60:1e:74:e5:d4:36:c1:b3:a4:78:
                    9b:ee:b5:58:72:50:d8:b1:f9:4c:6b:d1:01:93:f0:
                    35:82:bc:ee:f9:f1:fd:92:c9:56:9f:41:85:86:11:
                    4e:14:3b:dc:49:6f:fd:47:7f:62:30:a4:ea:74:59:
                    b2:dc:b9:f5:55:89:3f:e0:4e:51:de:7b:4d:c3:d5:
                    90:c2:e6:09:05:8e:5d:5b:31:3f:7b:44:58:60:b2:
                    3c:96:62:31:60:ef:05:c1:0f:b7:9a:45:1d:7c:40:
                    c1:17:28:96:5a:c1:32:f5:04:15:66:32:36:69:1f:
                    d1:a5:1f:f1:01:f7:61:52:bb:48:d9:2d:ce:34:18:
                    bd:dd:74:c7:77:1d:2c:12:a6:c6:1e:f6:38:1f:97:
                    ae:c7:41:3c:f0:45:63:1e:cc:63:67:b9:c5:6b:26:
                    4b:7c:b5:0b:c3:1c:a0:9e:12:87:94:0c:c2:ec:4d:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4D:2A:89:65:53:C9:1D:83:B5:76:E7:02:0C:80:E7:D0:0E:09:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/9bef5258-2e4d-3bf6-b8e5-503dbcee1098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.252.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:04:78:92:04:14:0c:fc:9d:51:fb:03:ae:33:d6:60:f9:72:
         cf:61:2d:1d:64:57:42:4f:1f:28:7c:fd:66:1b:64:84:16:07:
         1c:28:2e:27:7a:34:58:81:41:20:d1:b9:4c:0e:07:be:35:8d:
         9f:d7:13:9f:a0:3d:a3:3e:1e:40:6c:26:a2:11:03:a3:41:aa:
         a9:fb:70:90:0a:f6:5c:d5:af:cf:8c:a5:5f:cf:57:5c:ba:bd:
         40:0e:63:1c:2b:cc:69:d8:70:04:2c:e4:08:08:09:f0:51:36:
         7a:22:0c:c8:78:19:d7:fa:16:92:c5:4d:6c:59:45:9d:e7:2c:
         fe:cd:50:25:ba:27:66:75:fc:ed:db:32:77:38:ec:b8:29:a7:
         02:14:48:cd:ab:9d:b9:8f:ad:d9:4e:ec:b7:3c:e7:ec:69:40:
         1b:26:60:c6:3f:fb:90:7b:2f:42:00:bd:ae:10:c9:b2:66:60:
         a2:dc:cf:f9:23:d6:7a:60:83:0d:3b:11:4a:2f:bc:76:50:c4:
         12:b4:3a:4d:b8:76:72:c5:db:91:00:01:44:c8:6c:80:ae:ee:
         47:0a:8e:91:3b:f3:4d:ae:83:30:65:0e:0e:9c:b4:7e:ac:40:
         19:9e:41:3b:cb:a6:29:b5:88:ed:49:fd:16:38:f5:5a:c2:3d:
         e3:90:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:17:20 2026 by rpki-client