Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/efaff37a-653e-3b89-a8ed-fa416a6ee8c6.roa
File:                     efaff37a-653e-3b89-a8ed-fa416a6ee8c6.roa (raw, json)
Hash identifier:          2k7Lwa4ZZMwg6Qck7b3gy6/3w7Y7pJCOFXAN206c+f0=
Subject key identifier:   3C:43:A6:9F:AD:80:03:EF:8C:A5:7E:36:21:00:81:64:78:48:6D:A9
Certificate issuer:       /CN=6faaf00e-895e-47d1-97b1-331bb4af77fc
Certificate serial:       010D0C9F4328584EAFE6EE269C3BFF9170E84A00
Authority key identifier: 7A:A7:38:11:63:DB:14:89:6A:BA:42:70:FA:C5:59:70:EE:89:89:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/efaff37a-653e-3b89-a8ed-fa416a6ee8c6.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     8987
IP address blocks:        206.209.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/6faaf00e-895e-47d1-97b1-331bb4af77fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/6faaf00e-895e-47d1-97b1-331bb4af77fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:ee:26:9c:3b:ff:91:70:e8:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faaf00e-895e-47d1-97b1-331bb4af77fc
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=d975ff07-7a8d-43d5-b084-787605979717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:79:26:72:01:9b:44:4e:01:ae:e7:ef:b8:
                    8c:78:fe:d9:ae:db:84:39:07:e7:ae:31:64:f2:98:
                    19:52:08:c4:96:d1:2d:cf:89:bb:bd:56:35:be:da:
                    59:25:6d:c7:8a:5c:41:a7:53:1d:1c:27:b9:90:39:
                    49:f3:51:ae:25:68:75:49:9b:14:8f:5e:6b:43:83:
                    9a:47:bc:f4:71:1d:2e:82:b4:24:90:98:dd:c4:64:
                    97:8b:3e:1c:d3:c4:b4:0d:58:27:ec:33:d4:c6:4c:
                    dd:db:d3:7b:8a:38:8c:2a:41:a4:67:51:38:b0:92:
                    40:f8:d4:b5:cd:49:1e:73:86:f0:16:d3:b5:29:7b:
                    3a:f2:fd:8f:39:8a:f2:12:e4:ed:98:1d:1c:aa:80:
                    84:ab:db:be:42:b7:34:fc:7e:38:2e:b1:71:d6:a2:
                    76:18:f6:94:17:50:39:78:dc:ca:c4:ee:2a:49:d5:
                    61:70:ec:b0:a5:ff:bd:be:78:08:0c:2c:ec:c2:9e:
                    ac:ea:c8:70:46:5d:41:6b:90:ef:12:23:30:58:83:
                    23:06:15:6f:d3:c7:b2:21:ae:c9:99:3e:b5:41:c0:
                    fd:23:34:97:4c:2d:cc:2c:24:85:86:f3:92:bb:3c:
                    71:03:50:aa:f8:07:2b:2f:af:69:80:a6:e7:44:a6:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:43:A6:9F:AD:80:03:EF:8C:A5:7E:36:21:00:81:64:78:48:6D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/efaff37a-653e-3b89-a8ed-fa416a6ee8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc/6faaf00e-895e-47d1-97b1-331bb4af77fc.crl

            X509v3 Authority Key Identifier:
                keyid:7A:A7:38:11:63:DB:14:89:6A:BA:42:70:FA:C5:59:70:EE:89:89:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6faaf00e-895e-47d1-97b1-331bb4af77fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4f:9c:86:38:e3:7b:49:42:ca:dc:94:e4:c4:fb:87:57:d0:
         4d:a3:ca:1d:f1:a9:ee:51:51:3e:4b:08:05:9c:a4:e2:df:ec:
         73:10:fd:13:75:f0:0f:2d:90:6f:91:47:4d:ee:ee:33:7d:fe:
         39:c6:ca:50:31:51:21:62:6a:88:c6:04:b4:75:4a:e3:64:ea:
         e5:17:9c:36:8f:c5:79:fb:d6:95:be:bd:84:86:46:5f:00:0a:
         9a:a4:15:ca:e4:d2:0b:bb:b9:b7:d6:2a:2c:6f:7c:6d:f2:60:
         7e:d6:06:f6:33:b2:dd:76:c8:0e:e6:95:f9:50:58:8b:b1:c6:
         c7:97:e9:c0:39:15:33:3f:49:47:82:dc:b1:4d:10:b4:34:88:
         63:4e:0a:6b:17:b8:55:f9:a7:8a:d1:a3:04:86:cf:12:69:ca:
         14:46:02:e0:d9:67:58:2d:e4:34:9e:14:7a:e0:8a:54:3a:c0:
         04:74:07:fb:dd:4a:9c:60:94:16:53:c3:fd:e6:fc:bd:ae:24:
         2f:4a:92:27:e0:0e:74:4d:36:f5:17:67:ae:0f:19:79:25:f8:
         4a:0a:12:17:54:4b:a8:d3:1d:29:6a:55:1a:13:b5:46:79:f1:
         12:66:bd:98:39:ad:24:c2:70:cf:2a:74:f2:41:ed:3c:70:16:
         1a:2e:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:07:06 2026 by rpki-client