Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa9bdc7b-82a5-39f1-96f6-6f06fdfa4ec6.roa
File:                     fa9bdc7b-82a5-39f1-96f6-6f06fdfa4ec6.roa (raw, json)
Hash identifier:          8O4cnIPYgUFNnx1QBrxsUXQUcugUoOBe+CEjY5GOClI=
Subject key identifier:   A7:68:97:DA:B9:A2:CA:A6:0D:53:FD:F9:25:3C:3C:5F:13:10:56:7A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA78725F01CCED31739463300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa9bdc7b-82a5-39f1-96f6-6f06fdfa4ec6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        158.62.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:25:f0:1c:ce:d3:17:39:46:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7f9f970d-6150-47aa-b6eb-78fa05bd2773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:26:ad:45:82:16:71:81:1c:e8:95:e6:94:
                    e7:aa:33:c4:21:19:a6:01:97:4d:b5:ff:c2:20:7a:
                    38:27:74:2e:05:cc:87:ea:26:d7:d3:6a:e6:dc:e9:
                    be:dc:9d:9d:c3:3b:26:84:8d:43:56:08:af:18:a9:
                    7b:f9:01:ef:06:66:10:3c:16:43:75:30:9b:45:f8:
                    1e:40:c2:52:b3:c9:27:cb:d1:88:ca:75:2d:37:3c:
                    d6:45:5f:ff:a6:3b:9a:dd:4b:4d:69:eb:14:90:f3:
                    18:a7:15:36:af:9b:fe:f1:33:6e:61:b2:39:05:1e:
                    b0:f7:6a:a6:29:02:6f:c3:93:56:81:bd:23:2d:d9:
                    b4:fa:34:90:8b:ba:82:26:2e:d7:5d:53:64:8a:02:
                    b1:03:e5:dd:fb:98:f2:ad:a2:2c:d4:c0:6d:57:0f:
                    3c:3f:2b:d4:f7:f9:a3:86:7e:9a:61:a9:3f:83:cf:
                    aa:8d:af:6f:09:3e:19:57:34:f0:e8:78:03:6f:47:
                    eb:5a:0e:ec:fb:25:44:a1:d0:99:26:ec:5a:0b:53:
                    05:c2:0a:9e:67:b3:e8:49:25:3f:1a:f9:ae:dd:f1:
                    2c:9f:5b:09:39:d4:c0:e9:41:0a:fe:f0:64:11:55:
                    dd:21:39:a6:22:24:05:2b:93:76:3e:fb:52:9a:06:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:68:97:DA:B9:A2:CA:A6:0D:53:FD:F9:25:3C:3C:5F:13:10:56:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa9bdc7b-82a5-39f1-96f6-6f06fdfa4ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:66:cf:fb:76:9a:c2:2d:6d:b1:5d:04:4c:43:51:9e:5d:
         96:a4:aa:57:cb:3a:06:8c:44:fb:58:a9:64:a5:99:40:1d:de:
         17:33:e3:22:22:35:51:ef:c8:46:c8:ba:a1:5b:f2:5b:09:2b:
         44:ae:b1:46:5e:a3:2c:13:d1:70:3b:cf:7d:ce:ec:db:79:d7:
         ce:96:c2:f4:82:21:b2:07:da:19:71:13:67:be:f2:07:15:18:
         d0:a8:d8:c3:64:6a:15:1f:da:14:11:6b:1c:2e:8d:55:5f:d8:
         2f:c7:1e:ce:9a:d3:96:b6:dd:b1:6e:03:c2:a6:db:41:a4:47:
         b4:f9:e8:15:0d:09:a6:45:31:83:92:34:f8:82:d0:72:c5:db:
         5b:da:d8:4a:ff:12:44:d6:e6:7c:66:be:8e:d9:b8:78:bb:f1:
         f8:86:e8:bb:1a:3a:6b:63:3c:0e:89:77:ee:bd:eb:cf:ed:1b:
         8a:b1:13:72:d3:be:1d:c1:26:71:bd:e4:52:38:ea:00:fb:9f:
         31:5d:50:42:3a:ad:4d:d7:c7:14:7d:6b:ba:39:58:e4:db:03:
         3d:33:84:66:e9:e8:4d:aa:5d:cf:ac:7c:f0:95:f0:3e:09:16:
         78:0d:bc:2c:03:ff:cf:fb:aa:16:db:bb:36:1b:9f:8c:eb:1c:
         a1:a7:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:54:24 2026 by rpki-client