Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
File:                     d5309438-77a7-3911-b8df-e43cb484204d.roa (raw, json)
Hash identifier:          8fLJkQoB9hv5wwhxT1Gh3FZDuytAGnJ+ThOERgKYIok=
Subject key identifier:   D2:98:FE:3D:22:C7:97:69:4B:04:F1:80:F1:A1:44:37:4F:35:ED:A5
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584EA79A455F08AFC2708BDD6900
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11404
IP address blocks:        209.236.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:45:5f:08:af:c2:70:8b:dd:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=092de90b-91e6-4efd-9201-a19571903135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:98:5d:9d:2b:99:91:83:70:5a:e9:59:dd:
                    a0:eb:5e:5e:44:75:1a:65:95:e7:f9:34:0b:98:8b:
                    c1:c4:b4:db:62:3d:2d:05:72:65:8d:18:52:f6:5b:
                    b4:19:88:9c:4f:3d:fd:11:ff:4a:6d:d9:57:3f:e5:
                    63:83:99:c6:ec:80:88:7f:dd:ba:8e:fa:c4:fa:35:
                    d8:f2:8d:07:76:df:f5:78:6e:98:2c:fd:34:bd:77:
                    1d:54:01:e5:ff:ad:a7:18:45:dc:46:70:f9:0a:15:
                    ef:ad:46:02:0f:b6:86:7e:ea:0d:85:65:42:a4:e0:
                    5d:1d:dc:0f:4a:5e:07:ac:7f:77:87:31:a4:8e:5a:
                    8c:b5:43:14:ff:24:c5:86:ce:56:0c:92:f6:33:a0:
                    83:3e:6b:54:da:dc:f6:2b:01:e2:80:09:f1:aa:2f:
                    6c:6f:ab:2d:ba:b8:75:b8:f7:73:14:b1:75:bf:a6:
                    08:e3:9a:19:68:d5:d8:a6:c3:40:ca:3c:22:01:36:
                    28:71:cd:df:1e:cf:c2:37:68:c7:e0:68:17:29:e5:
                    c9:69:00:e1:08:f1:e4:d7:2f:3a:af:e5:28:0b:50:
                    52:4e:46:5b:21:59:83:7c:60:46:43:01:e3:ae:7c:
                    74:3a:69:44:53:ee:97:da:54:5e:86:f7:2c:62:95:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:98:FE:3D:22:C7:97:69:4B:04:F1:80:F1:A1:44:37:4F:35:ED:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5309438-77a7-3911-b8df-e43cb484204d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d8:0f:26:38:11:c5:c7:7d:fc:5e:9d:e2:dc:7e:f1:54:c7:
         0f:a8:69:95:5e:4e:a7:19:af:43:7e:ed:75:73:2e:00:27:a3:
         cc:c3:6c:15:ab:c6:75:82:00:e7:45:3d:71:32:f0:27:78:02:
         be:e8:0f:13:aa:56:c6:68:83:36:a6:9c:38:21:ab:1a:79:dc:
         80:80:e8:e8:a5:2f:a7:5d:5c:fa:aa:cf:49:16:bf:cb:c6:b7:
         33:36:07:26:a8:0b:5b:9e:e2:f6:6f:e3:b5:65:a8:58:fc:4e:
         90:5b:d0:a8:d2:21:4f:f8:6f:de:ac:4e:83:5d:85:48:eb:fe:
         56:32:8e:cd:f6:43:5f:10:b4:fd:a4:a4:79:8e:db:90:0c:85:
         75:67:4b:de:f4:54:a3:a8:dc:51:b2:d0:63:1a:af:a2:09:17:
         16:dc:f8:23:01:da:97:28:50:71:e6:e0:cb:50:83:6b:26:30:
         28:37:ba:93:f1:96:e4:35:62:53:6a:fc:38:0f:76:36:00:45:
         be:54:63:ef:90:7f:bd:97:3c:8f:bc:55:8b:8f:e7:36:e6:9c:
         59:eb:6d:48:fb:cf:3a:e7:a0:6e:e3:1d:51:5b:12:4b:d7:2b:
         fc:03:94:ee:bb:fc:21:ac:0d:10:a4:01:5e:aa:0f:05:69:c5:
         c5:4e:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 06:44:45 2026 by rpki-client