Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
File:                     83a687bd-8f33-38a0-b954-7a7150c2e666.roa (raw, json)
Hash identifier:          pKrBhT7esjP3uRqKFVqJtDOAhBCVjip2BvHWDy01Ezc=
Subject key identifier:   C2:B1:A5:41:E4:2A:18:84:A0:6D:6F:74:A9:01:D2:6E:10:49:A7:43
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584EED5219D0A6844EC73917A800
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     394437
IP address blocks:        209.173.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:19:d0:a6:84:4e:c7:39:17:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=4f934667-a0ee-468a-aa11-945edfbe375f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:56:8d:b8:a5:d8:da:16:f7:ae:b8:01:48:
                    73:8d:9d:43:85:d2:46:1f:01:20:7e:37:1d:06:c0:
                    12:23:bf:0d:92:30:b6:fe:fb:5b:32:16:d6:1f:84:
                    fe:e5:f2:70:c3:c5:d9:d9:11:b0:4a:b1:b8:10:62:
                    61:42:01:ef:e3:d3:1e:66:30:18:bf:c9:21:fa:69:
                    28:5a:8e:5f:04:9d:8d:22:73:65:32:54:97:02:48:
                    99:91:00:84:2e:41:64:3a:68:96:59:e0:c0:a0:96:
                    b5:cb:23:b1:2f:a8:a5:2f:45:ed:39:a4:86:60:39:
                    1f:68:a5:98:8f:03:7f:c7:db:ee:8b:ae:6f:b7:bf:
                    b3:6a:4e:6a:2b:a5:16:11:a2:a8:98:fb:86:a2:da:
                    d7:15:98:7c:9e:f8:00:1f:d8:7f:b7:a3:c8:9f:55:
                    27:64:0f:1c:82:43:8f:cb:34:47:bd:75:cd:14:79:
                    42:e4:6e:49:96:61:92:15:2d:99:6d:a9:ba:4f:52:
                    7e:ee:82:a0:5b:e9:2d:a7:c2:d8:2d:ca:50:db:57:
                    00:7e:cc:ab:26:55:a4:34:14:e1:7a:b7:97:35:f3:
                    db:87:b8:c7:81:5a:90:23:2d:1b:2a:e5:23:c5:f4:
                    d0:1e:52:bc:5d:d5:bd:6a:15:47:2c:62:ba:01:e5:
                    36:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:A5:41:E4:2A:18:84:A0:6D:6F:74:A9:01:D2:6E:10:49:A7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:6d:73:8f:60:df:2f:12:d9:34:9f:b6:60:4a:3d:2b:2d:
         f8:a3:dd:f0:c0:67:58:4b:76:6c:81:61:a6:0c:17:0b:d9:d0:
         1b:ec:e8:00:c6:24:3e:17:68:7a:78:df:8a:32:1d:a8:e4:6b:
         ef:35:08:6b:f2:3c:e2:79:fb:93:b6:db:77:13:a1:08:bb:05:
         09:c8:7a:61:1b:8d:f7:f9:f4:59:66:68:39:d0:df:8e:b3:9a:
         e7:b0:41:ce:de:6e:35:9c:f3:80:1f:2e:89:9f:01:cc:b4:61:
         e1:e4:3f:58:0a:93:c6:22:23:9e:d4:ed:d4:6a:b5:5c:0d:26:
         bf:85:cf:95:f2:8e:86:7e:33:fc:57:35:8d:25:dd:7f:8c:85:
         c0:8e:a8:a1:bc:84:51:61:6a:d5:b8:41:e1:cb:26:d0:c8:6c:
         cc:1d:f5:b6:a8:9c:9c:03:dc:41:17:4f:51:60:1a:7b:56:c5:
         fd:eb:9a:f3:45:15:da:df:73:d9:21:73:b7:a5:16:4b:9e:1b:
         d6:50:a4:ba:57:c8:09:6f:9a:3d:bc:c9:11:dc:ba:95:a8:e1:
         a2:3d:a5:ed:a6:0f:10:e8:04:73:0e:0b:e6:47:16:25:51:78:
         a1:40:e4:e5:b0:ef:be:13:65:ba:1a:e9:82:4b:69:e1:c1:44:
         3c:77:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:30 2026 by rpki-client