Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/1bf687e7-3d21-3c16-88f0-8067d34124cc.roa
File:                     1bf687e7-3d21-3c16-88f0-8067d34124cc.roa (raw, json)
Hash identifier:          KQvJkWz+JRnTKYjBSjKag7W/U+g/sxXizYp4Eh7ZGK0=
Subject key identifier:   2D:6B:50:F2:2E:39:5B:69:37:EC:77:6D:EF:24:EE:1A:C2:C1:E5:92
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584ECE80267F1E92B35041DF4900
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/1bf687e7-3d21-3c16-88f0-8067d34124cc.roa
Signing time:             Wed 12 Aug 2026 00:03:14 +0000
ROA not before:           Wed 12 Aug 2026 00:03:14 +0000
ROA not after:            Tue 10 Nov 2026 01:03:14 +0000
asID:                     46450
IP address blocks:        209.104.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:80:26:7f:1e:92:b3:50:41:df:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Aug 12 00:03:14 2026 GMT
            Not After : Nov 10 01:03:14 2026 GMT
        Subject: CN=d77b072c-4d82-43bb-a303-49f74701dd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:74:9a:3b:94:ae:c1:13:38:4f:49:f3:09:
                    69:7b:a1:37:b7:1c:1d:12:ea:7c:36:1c:cf:25:a6:
                    06:7b:2b:7c:86:a5:cf:e1:d7:7f:40:93:26:13:d9:
                    e8:36:67:6e:a5:27:f6:12:1e:e4:de:fa:97:bf:1e:
                    27:a6:09:eb:c4:81:b0:88:85:32:1f:b0:04:2c:94:
                    43:de:0d:f7:a3:c0:1e:3a:cb:df:2a:8d:ad:46:d8:
                    2f:df:d3:30:e4:59:07:2d:44:9c:d7:f1:ec:a4:b8:
                    92:84:73:d1:34:90:02:1e:87:5d:9c:4f:36:4a:5b:
                    31:94:56:68:1f:af:3e:d0:19:98:bb:65:1e:b7:40:
                    38:ec:2b:19:46:08:67:d7:38:93:4f:be:39:b0:07:
                    29:fd:16:9e:96:6d:16:26:b4:e4:b9:7c:c2:8a:49:
                    f1:27:19:fe:33:98:dc:0e:c7:91:8c:f7:6b:0a:10:
                    63:71:84:04:5c:67:6d:d2:e8:6d:44:fb:d3:5a:66:
                    9a:ef:21:a1:6b:03:3b:93:f0:9d:bb:6d:d0:aa:4b:
                    d4:c7:12:a4:d9:e0:1a:1e:e1:7b:80:be:58:d7:74:
                    1f:ec:ee:0c:94:13:7c:34:be:0e:97:c5:43:24:9d:
                    c4:68:8c:49:6b:2e:ab:54:7a:d5:06:d4:62:1a:25:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6B:50:F2:2E:39:5B:69:37:EC:77:6D:EF:24:EE:1A:C2:C1:E5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/1bf687e7-3d21-3c16-88f0-8067d34124cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:ed:f2:c7:3e:63:2f:e7:ac:63:bd:c4:eb:c1:51:fd:07:
         00:25:c9:a9:8a:ad:b9:eb:bd:34:96:64:3e:6e:2c:e8:d7:76:
         3a:2b:32:f7:b8:c0:6a:5d:36:15:f2:8f:ef:6d:f8:b0:fa:9e:
         1d:e0:85:3f:9e:2f:26:4f:d0:7f:11:97:f3:f8:f5:ad:b1:23:
         0c:d0:1d:3f:1b:9e:0b:05:9e:6e:88:50:98:a0:7c:31:a8:74:
         4d:10:e5:ea:8b:7e:68:e0:7e:e9:1d:25:ea:d3:88:03:c1:a9:
         19:fa:19:80:8f:c8:07:cb:7c:ad:0b:6c:f2:8b:65:2c:a1:96:
         27:30:46:da:8e:4e:f9:3d:85:10:e6:e8:c2:4b:5d:b4:83:de:
         5f:04:18:f2:51:79:2f:94:75:00:ce:d3:8f:f4:a8:8f:05:b5:
         ad:1d:ba:54:75:51:df:e3:a6:4a:31:03:ca:a2:91:f6:bc:02:
         4b:11:4f:f9:e4:7d:0d:81:d0:77:f3:3e:56:e2:6f:41:bf:8d:
         c7:2b:5e:b4:8d:51:13:78:f0:d9:d1:08:e5:6e:5b:ac:f7:f2:
         b2:3e:3b:aa:e9:c5:87:c7:5b:1c:16:23:03:d7:f9:5e:31:98:
         d2:bf:ae:ff:f3:fe:ce:cf:22:bf:1b:98:f9:eb:80:76:50:b5:
         3f:e9:5a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:07:05 2026 by rpki-client