Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa
File:                     f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa (raw, json)
Hash identifier:          Om8ZVdNj+rJDxyUv3+mjcN04RkOjBpSQJxCrdT/AsD8=
Subject key identifier:   9D:AE:1E:26:BA:2A:5B:D2:23:CC:6F:A4:3C:5A:8D:8C:ED:E7:45:68
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584F5E62B9A1E77CD05B03A88A40
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     400196
IP address blocks:        207.22.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b9:a1:e7:7c:d0:5b:03:a8:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=be248494-fff2-44f2-87c5-1cdafe9084be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:0c:e4:64:92:08:36:2c:78:43:f5:d2:1d:
                    61:a4:21:ba:e2:2a:5d:fb:7d:76:83:38:81:d6:ed:
                    01:8a:34:95:19:b0:a0:50:b2:c7:1e:68:fb:e9:18:
                    56:5b:31:f2:75:bc:50:f1:69:52:c5:2a:2e:e6:b5:
                    46:1e:b5:74:8d:12:e6:70:3d:54:4b:89:b1:be:ee:
                    9a:d7:72:b8:01:f9:5b:96:e1:49:c7:2d:12:70:5e:
                    cd:b4:d4:be:44:0a:45:b8:a0:61:0d:29:75:6a:d5:
                    fd:f6:bb:35:f4:92:8d:eb:b9:7d:12:e2:89:5c:11:
                    2a:5f:05:20:43:b1:e2:ba:07:c1:10:72:a2:d7:75:
                    c8:18:be:a9:0e:3e:06:9f:8a:67:ab:51:93:26:4e:
                    8b:c3:1e:3a:4d:e2:f4:de:25:53:d3:f3:99:1f:26:
                    40:93:f5:8a:3f:93:03:01:be:ca:fd:5c:a3:84:db:
                    57:9a:a7:86:de:11:21:3f:a2:11:38:1e:7d:a5:8f:
                    4e:d9:55:58:ea:e8:f2:16:e3:d4:c2:91:10:5f:8d:
                    43:1d:16:d4:c9:2f:f8:ff:b9:9c:88:05:1a:23:6a:
                    42:61:87:32:11:35:54:17:d7:9e:c6:5a:fc:d3:05:
                    fa:75:62:c4:da:2e:46:a7:8a:23:31:54:14:be:b5:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:1E:26:BA:2A:5B:D2:23:CC:6F:A4:3C:5A:8D:8C:ED:E7:45:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f1d73a89-bcc4-3b69-a290-e33c7fccd89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:64:0b:df:0c:68:65:97:39:83:e1:42:da:93:02:e2:76:
         a5:5b:6f:92:bc:4e:19:b7:de:58:87:9e:dd:14:5d:3f:2e:6b:
         5d:1b:4d:e8:95:ed:0d:da:ee:84:ea:6f:d2:84:21:36:1f:e5:
         c5:3d:b8:cd:ca:30:59:f9:0f:b2:71:99:b9:dd:d8:cd:f0:61:
         03:f6:3e:b3:e8:94:a1:b0:86:bc:9d:94:51:97:42:d5:bb:40:
         ac:3f:b7:d5:4a:41:6c:e0:33:87:29:e6:45:ee:56:30:99:69:
         3c:a3:c6:77:66:37:76:af:80:96:24:a1:c3:61:98:d8:9b:ba:
         63:1e:11:f6:3d:b4:67:b0:ab:75:a4:49:b6:62:d4:8f:9e:53:
         5d:ba:ad:08:c2:34:1b:1b:08:b8:3d:64:dc:94:6d:fe:1f:91:
         01:7d:46:72:e4:5d:59:52:b0:a7:c8:a7:e6:bb:fa:2d:5b:9e:
         0f:43:f1:3f:78:f3:52:48:5d:29:bd:23:9d:e2:72:d8:63:ba:
         54:c6:ff:b4:2f:1f:be:75:5e:2a:fd:08:33:b4:f2:63:65:b5:
         e0:7e:db:f7:55:f4:63:2d:0d:4c:9c:92:de:3a:77:df:62:12:
         65:2d:cf:45:5f:37:09:ab:f9:55:91:8c:c4:9b:7a:38:a6:fc:
         8b:4d:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:55 2026 by rpki-client