Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/088c6ee1-f466-30b1-ad84-e2a34f845902.roa
File:                     088c6ee1-f466-30b1-ad84-e2a34f845902.roa (raw, json)
Hash identifier:          nHQB1QJTU52ljnoyBEmM0X9ho1UDYRNRKglQUMhuFAA=
Subject key identifier:   49:E7:20:D9:45:DF:13:CB:9D:CD:C7:FA:90:4E:F0:D6:35:3E:34:25
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC0A70F2F23E1D100B6BDF600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/088c6ee1-f466-30b1-ad84-e2a34f845902.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        67.207.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0f:2f:23:e1:d1:00:b6:bd:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=95a123be-9e5f-4da8-a3ab-54deb746ac6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:b3:f6:da:39:5a:39:57:4b:6b:7b:5f:e2:
                    4b:2a:68:74:05:82:26:fd:78:af:f0:e5:5f:4c:83:
                    2e:ef:a2:ca:fe:d8:11:ec:12:a5:0f:d7:17:4a:68:
                    f2:a3:9e:94:c2:01:74:cf:7b:fc:64:86:2a:06:a3:
                    33:e1:e8:80:ab:98:66:54:bd:de:51:2c:c9:cd:84:
                    94:da:f7:55:31:65:19:47:7c:73:64:cb:2d:5b:72:
                    01:74:4e:f2:bf:69:62:93:6c:2b:a4:f7:a9:7e:21:
                    d0:aa:8d:5a:b3:ae:c7:c6:30:9e:f0:f1:97:b1:0b:
                    9c:88:f4:5d:e0:ed:57:c5:35:6b:11:7e:1f:a7:a0:
                    08:b4:cf:e6:30:26:3d:54:df:c5:26:de:68:fc:92:
                    08:c9:2e:ec:1f:06:cd:76:37:ab:47:ec:4e:25:ea:
                    40:24:c4:92:30:9c:6a:46:e7:78:fe:98:ef:ea:20:
                    1f:dc:ea:ee:34:b9:c8:e2:ba:b8:b5:6f:05:25:47:
                    25:c6:07:61:0a:ef:36:8b:db:68:bd:63:61:32:56:
                    16:64:40:5b:a5:10:86:3a:8d:0a:b0:60:2f:37:4d:
                    c8:b1:1a:43:8e:6b:c9:a1:36:27:1d:32:82:c6:61:
                    90:fa:18:92:11:56:39:ab:92:92:46:f9:f2:a3:3c:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E7:20:D9:45:DF:13:CB:9D:CD:C7:FA:90:4E:F0:D6:35:3E:34:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/088c6ee1-f466-30b1-ad84-e2a34f845902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:75:f2:ee:d8:68:ac:cd:a2:dc:6c:3d:28:8c:8b:11:ad:ed:
         94:fc:fb:d4:06:60:a4:79:73:f1:15:c3:d2:d1:1f:e2:bd:4e:
         f4:7f:4e:7d:6b:f7:b0:58:d7:49:d3:94:11:9a:72:91:97:13:
         90:5a:69:94:e6:48:0e:b3:2a:ad:a5:38:0d:e4:57:c8:2e:e0:
         31:89:3c:c8:d0:05:78:d1:e2:0a:6a:09:43:15:d4:bb:29:dd:
         8d:28:6f:8d:a2:8a:7f:41:23:e0:ce:f9:b5:2c:fe:05:9b:1e:
         76:5e:a8:57:47:79:6a:0b:2b:3f:74:9a:9d:58:b6:cd:6b:b5:
         13:6d:8a:f5:fb:ca:ae:79:84:21:57:98:4c:5d:17:fd:6e:c5:
         94:ad:36:39:6b:8f:a7:43:ec:d8:b9:fb:28:e0:11:02:ed:ff:
         bf:33:d2:59:4d:40:3d:f9:5d:03:33:b1:6c:33:4b:35:85:03:
         ea:8f:ca:17:31:d7:54:48:21:6d:af:86:7b:96:26:21:27:50:
         dd:ef:bc:04:61:35:d6:14:98:37:4c:fe:14:17:2a:11:48:38:
         e4:f9:5a:90:ae:33:00:67:b5:b1:18:45:ad:c5:25:4f:98:f4:
         4c:b8:21:91:c5:7c:f7:76:e9:b6:0d:2b:b6:05:86:1a:6e:a9:
         40:7b:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:08:34 2026 by rpki-client