Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/8477fce3-7f70-38cd-8ca3-103bab90571b.roa
File:                     8477fce3-7f70-38cd-8ca3-103bab90571b.roa (raw, json)
Hash identifier:          cKGgKmb8xErP0CL4NOUuDBfeQZFVts9LJFF5E7amLsM=
Subject key identifier:   27:F7:17:A9:36:14:32:E1:1B:2D:B5:33:12:C7:E7:CC:60:C2:B6:FA
Certificate issuer:       /CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a
Certificate serial:       010D0C9F4328584E640F71AB0D4B66AEAC3DFCE0
Authority key identifier: A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/8477fce3-7f70-38cd-8ca3-103bab90571b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     62642
IP address blocks:        206.220.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:71:ab:0d:4b:66:ae:ac:3d:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=1b9f6ad6-350a-4925-a2be-dacb1f8fa16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:26:dc:3f:7a:f0:d3:78:af:5f:5e:9a:8b:
                    31:87:9e:6b:ed:59:35:dc:e1:31:4c:17:d2:c3:95:
                    2e:28:71:e5:1d:c8:cb:46:3a:fa:e5:f2:cd:91:e4:
                    d6:d5:e0:8e:84:cb:f6:c9:61:b2:18:0b:51:7f:69:
                    b7:db:dd:3d:10:5c:d3:07:52:1d:38:2d:01:2e:00:
                    0d:35:a8:c7:7c:3f:82:cb:0f:64:97:d8:e3:55:26:
                    ca:a4:c0:e6:ad:5b:30:8f:7d:ad:67:59:dd:84:a3:
                    66:d3:da:99:a6:be:a1:8a:a9:8c:bc:7b:5f:c6:ae:
                    7a:fc:c4:7b:19:a7:8e:59:f9:c4:46:ee:78:38:a6:
                    36:d8:cb:5c:78:d8:7c:8b:c7:36:27:40:b5:b0:74:
                    e7:1b:22:23:3e:a2:20:7e:a8:45:20:4c:ec:60:37:
                    a3:8b:9a:f8:c9:b2:d4:7e:f0:8a:80:18:94:8f:ec:
                    b6:e2:76:5d:50:b8:7e:74:1f:35:8a:f7:8e:2c:3a:
                    1d:e5:2d:af:6f:ee:72:fc:85:5a:ab:d9:18:ed:58:
                    51:70:cc:9c:d1:02:39:a0:72:61:77:5e:c5:f6:10:
                    c2:e5:8e:19:2d:3d:f4:33:da:c5:76:00:8b:83:a5:
                    b5:6d:5a:68:b2:cf:ca:c9:88:c7:05:ec:dc:a0:81:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:17:A9:36:14:32:E1:1B:2D:B5:33:12:C7:E7:CC:60:C2:B6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/8477fce3-7f70-38cd-8ca3-103bab90571b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:df:49:8e:df:a8:db:df:42:e5:80:c1:88:a3:4a:21:9b:
         e2:e0:6e:69:27:e2:66:7f:25:9b:92:ef:43:56:38:cd:dc:8a:
         f0:4b:39:bd:93:f9:67:d5:22:53:e3:e4:15:01:a7:e8:c6:70:
         fc:ee:94:1f:cd:12:84:b5:49:ef:a7:64:f3:9d:b6:69:b2:96:
         7a:fd:79:9a:82:23:d3:e1:5d:d7:0f:f4:d7:da:0f:78:47:a4:
         b4:20:14:fc:3e:9f:72:9e:76:76:78:3e:f7:46:fc:a2:55:86:
         08:b4:1c:3b:1b:ee:11:a2:1e:86:aa:82:94:97:98:49:23:28:
         d4:38:f4:1a:75:aa:62:51:70:b4:5f:4e:55:a2:0a:62:2f:72:
         d5:d4:00:bd:dd:9e:a5:b8:2c:e5:b4:77:f7:08:fd:ca:a7:7a:
         10:a7:51:a4:14:9b:fe:a2:9d:fe:c8:f2:1a:1f:31:10:97:b0:
         28:cd:dd:07:5e:3b:40:f7:c0:cb:a7:a0:f0:5a:cd:67:af:9f:
         f8:de:dc:36:60:0e:a4:de:9a:8a:c0:a7:0b:93:fe:0f:a8:f3:
         5b:6f:08:5b:6c:fe:2f:21:d1:cd:22:cf:47:50:c3:f7:de:6d:
         e9:08:73:ea:51:e7:07:14:ab:f6:81:d9:3a:ce:25:46:75:66:
         54:24:4e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:53:25 2026 by rpki-client