Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa
File:                     c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa (raw, json)
Hash identifier:          z3aJhYE5cTYx4K6RhbTEV5Z41SS74r6HhYtoBqgIYis=
Subject key identifier:   E9:A5:6E:9E:52:43:90:73:04:67:FE:67:3D:B3:01:6E:9E:EC:48:00
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584EABB6ED2590B925402D3537C0
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     399589
IP address blocks:        209.104.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:ed:25:90:b9:25:40:2d:35:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=95a1ca12-3a6c-4878-adc6-c0c83ec9726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:26:7c:32:a1:22:35:65:0d:b6:42:2d:35:
                    02:25:e2:89:09:62:eb:01:ed:44:95:6d:45:46:e3:
                    eb:25:66:fc:c4:ae:fb:f5:9c:2c:ae:11:79:90:46:
                    5c:7f:b1:59:c0:9c:76:00:a8:80:01:02:d7:56:2e:
                    75:44:e4:d6:1c:91:47:b5:98:7a:02:06:d5:9b:86:
                    bb:46:09:36:d2:5f:7d:ef:be:80:a4:80:a4:59:6b:
                    05:12:4c:0b:63:cd:d4:85:07:51:a6:f3:82:7e:48:
                    1e:90:68:55:9f:0c:3b:82:27:2f:d3:a2:b3:9c:de:
                    c5:a8:11:2a:86:0f:6b:c4:98:b8:50:f3:8a:88:11:
                    eb:29:cc:46:2f:55:e0:e5:af:cb:10:b5:04:0c:17:
                    d6:f7:6a:bc:77:6c:09:c5:a2:90:6f:c4:10:35:3e:
                    fa:8f:77:6a:a0:64:43:3f:49:b0:09:81:a6:af:d6:
                    5e:dc:aa:e6:a8:03:27:e7:f9:d5:77:56:65:13:ca:
                    19:b8:24:ed:a6:ba:32:50:c0:a4:05:fe:64:9f:23:
                    93:a8:37:a6:70:75:e2:41:9c:54:31:a1:3b:0a:28:
                    7b:78:bb:88:3f:53:d1:be:92:93:0c:58:a3:8a:fd:
                    fb:63:0e:ce:5a:c4:fc:4f:0c:95:21:b9:a5:31:78:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A5:6E:9E:52:43:90:73:04:67:FE:67:3D:B3:01:6E:9E:EC:48:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:e6:0a:7a:af:38:60:a1:47:67:9f:8e:79:db:a4:ae:13:
         55:a7:f2:c9:7f:44:c6:54:fb:70:0c:cc:1c:6f:02:bb:57:f6:
         a8:5c:17:dd:c6:d3:0e:22:ad:30:48:ad:cb:b7:b8:b2:cc:30:
         df:8b:ce:73:3b:c1:7c:76:86:0b:7e:a2:26:c8:d8:85:8e:d0:
         d7:d8:b7:19:da:3c:0e:7f:0f:61:73:a8:32:b1:e1:f6:8d:ea:
         e6:95:a5:7e:a6:bb:71:19:53:26:ab:2b:12:e2:5e:9c:9e:d8:
         84:75:7d:4c:0a:87:e0:50:06:e4:55:7f:5c:99:17:0f:23:2e:
         07:1e:85:c6:fa:af:99:79:70:d0:08:61:e6:bd:21:98:fe:9a:
         db:34:1d:7b:44:ce:a9:bf:a9:b4:ed:2d:b7:20:8b:33:df:9c:
         f5:e6:8f:8e:74:03:57:ce:71:29:c4:dd:ca:68:08:a6:34:29:
         77:e8:e7:bf:31:80:73:37:e7:71:ce:f7:61:95:40:a6:01:64:
         d6:41:47:f1:6a:75:db:43:c9:99:f4:51:7d:c6:f5:7e:91:44:
         bf:b1:f1:61:33:9f:c7:f4:dc:d7:0b:70:22:11:0a:ad:66:da:
         8a:db:99:23:6b:d2:ac:d6:87:cb:2e:85:74:f8:f1:2d:66:f2:
         92:6d:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:31:16 2026 by rpki-client