Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/a6628693-810f-3ba4-963e-07989dcc6d95.roa
File:                     a6628693-810f-3ba4-963e-07989dcc6d95.roa (raw, json)
Hash identifier:          A1cQqbHoX7KmOg7ymp6W6ASPFCfoOMi6VXG5H4A4g80=
Subject key identifier:   0E:52:15:B8:59:21:44:95:28:A6:F5:13:C8:90:07:C2:8E:3B:CE:A0
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584F15CCED037875D8D518BE3D80
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/a6628693-810f-3ba4-963e-07989dcc6d95.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     8002
IP address blocks:        207.251.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ed:03:78:75:d8:d5:18:be:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=d6e121d6-7ba4-49eb-8754-feb777c0d064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:7a:ed:f7:eb:57:3f:bb:cf:54:34:d4:c4:
                    f7:fa:c3:0f:16:87:58:9e:45:db:f8:2a:96:ad:d8:
                    5c:65:cc:3d:a8:12:25:5b:7c:a8:01:c9:37:43:fe:
                    dd:c4:34:b2:9c:75:45:17:ba:fb:d3:9d:2a:07:17:
                    d6:42:de:df:44:0f:95:85:2e:b6:49:43:11:81:9a:
                    3d:32:81:ac:bc:59:88:1f:e4:c6:7a:97:a4:c8:44:
                    f6:89:5d:99:d9:90:37:c4:a0:18:13:ab:9e:8b:f7:
                    c7:99:ca:fd:fb:0d:38:b0:51:34:80:c5:a7:e6:d8:
                    55:c0:b5:e7:6f:d1:7a:12:aa:38:94:49:a1:0e:82:
                    d3:5b:bd:68:b8:ad:23:9b:d7:28:18:ca:e8:af:28:
                    cd:a1:37:40:1b:2f:e9:d3:24:fc:59:ef:d4:4e:34:
                    fb:7f:b1:fb:11:56:c3:d0:c5:72:5f:31:0c:5a:2b:
                    e9:ed:6d:36:41:0a:84:67:7a:6d:ba:0b:5c:f8:f0:
                    83:22:a9:2d:7a:6a:ad:5b:81:ea:e8:c7:be:f1:de:
                    b9:02:90:09:8f:65:e7:aa:08:12:da:dd:61:b1:33:
                    bc:10:31:62:ef:d4:24:b4:6a:ce:08:28:e7:5f:a0:
                    d1:4a:a4:a7:8c:4a:b2:75:d6:b0:ba:27:2a:e4:a3:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:15:B8:59:21:44:95:28:A6:F5:13:C8:90:07:C2:8E:3B:CE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/a6628693-810f-3ba4-963e-07989dcc6d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:73:62:23:1d:d7:8d:d6:34:87:d4:15:06:fa:01:b4:5f:05:
         6a:fa:9c:ed:91:e7:73:ed:37:97:4d:8e:5f:42:72:bb:ea:2f:
         d1:af:e3:37:6e:01:73:b3:7d:e1:38:eb:2a:88:d9:b5:39:63:
         3f:21:47:10:50:6a:61:c4:ec:dd:69:79:c0:24:b1:52:bf:a1:
         99:a3:27:08:13:9f:c8:81:98:0b:9b:b4:1f:8b:61:6a:e1:f8:
         3d:0d:59:f4:7a:aa:fa:6c:04:9b:69:1f:33:e9:81:67:e7:8b:
         eb:39:a7:66:8d:07:15:c1:82:25:11:a5:66:66:1b:3f:e8:8f:
         a4:f8:98:f9:92:ad:dd:91:7a:28:9b:10:2c:3d:37:d8:3f:b7:
         26:3a:5a:ab:e3:be:ed:10:a1:12:12:2d:91:86:3f:3d:2f:1c:
         23:0a:f0:5d:a3:38:73:4e:3c:5a:27:d4:53:e8:0f:98:8d:54:
         9c:fa:7d:72:7d:6f:5b:3a:d9:8c:0c:32:1a:92:6d:49:d5:2a:
         99:76:25:15:fe:e4:9d:f9:97:ef:74:7b:1c:d2:82:a6:ea:e5:
         e5:dd:7e:87:54:9a:d3:bc:01:86:18:75:ab:4a:c0:e3:09:cd:
         b4:b1:03:45:17:c7:90:c4:6a:86:28:fb:18:b9:28:c4:e9:c0:
         67:9e:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:02:16 2026 by rpki-client