Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b00e3c16-d2c2-31ca-af31-030e90b2bc17.roa
File:                     b00e3c16-d2c2-31ca-af31-030e90b2bc17.roa (raw, json)
Hash identifier:          lzPf1TB++MwMOHY5qkT6mvC5xI4WfMZayfDM6FJeBuU=
Subject key identifier:   7A:3D:74:E1:4A:6C:54:B4:BF:75:2D:7E:11:B2:5C:F8:52:5E:C2:5A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584FA45C97DA2ABCE429F50682E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b00e3c16-d2c2-31ca-af31-030e90b2bc17.roa
Signing time:             Tue 27 Oct 2026 14:34:35 +0000
ROA not before:           Tue 27 Oct 2026 14:34:35 +0000
ROA not after:            Mon 25 Jan 2027 15:34:35 +0000
asID:                     0
IP address blocks:        207.60.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:5c:97:da:2a:bc:e4:29:f5:06:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 27 14:34:35 2026 GMT
            Not After : Jan 25 15:34:35 2027 GMT
        Subject: CN=faa5539c-92c5-499b-8105-6395acfe5afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:e9:06:61:00:8d:51:9a:5e:95:86:47:d6:
                    24:85:b2:66:25:d6:c4:75:14:3c:f3:a2:a9:b0:45:
                    00:d6:53:bf:8d:96:df:86:83:b1:ec:6c:22:41:c5:
                    4f:b1:27:24:a2:36:ab:c5:70:37:28:a4:3f:df:e8:
                    36:f2:3a:5e:55:17:58:3e:e6:bc:55:35:06:47:28:
                    11:cd:e0:86:81:05:44:86:33:af:84:4f:3b:3f:69:
                    7b:3f:92:fc:94:ed:69:da:15:8e:f7:57:e1:48:32:
                    bb:99:65:07:c9:6a:6f:0e:80:82:a4:39:92:a5:3c:
                    e5:c7:19:f6:59:e8:06:23:10:48:ba:61:35:59:1e:
                    1d:34:c8:4b:99:92:b4:75:e0:de:ce:32:ea:eb:d9:
                    cb:1d:6d:24:e3:2e:76:ac:6f:f8:8f:54:93:69:c0:
                    39:d9:ba:c2:4b:c3:38:0e:1e:39:bd:b9:b4:86:54:
                    e7:a1:84:47:d7:ca:3e:fe:44:a1:e1:72:99:b2:f0:
                    df:df:cb:42:bc:ce:52:0d:d6:60:8b:98:14:04:c8:
                    e2:aa:cd:4b:6d:47:f6:66:1d:4c:22:fc:19:c5:d7:
                    cc:32:4a:03:e9:4b:0d:ad:ad:60:64:f7:fa:6f:e6:
                    90:59:8e:fc:5e:7b:19:52:d8:60:37:f1:98:dc:c8:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:74:E1:4A:6C:54:B4:BF:75:2D:7E:11:B2:5C:F8:52:5E:C2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b00e3c16-d2c2-31ca-af31-030e90b2bc17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.60.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:0b:7f:42:db:26:b8:e2:78:ee:7f:f7:2f:6c:5b:ac:50:
         49:69:48:05:b3:7b:91:d9:8b:48:78:56:1f:a1:87:5b:3e:2d:
         77:c7:0f:d2:4a:80:cd:ee:51:8b:56:19:57:4e:91:a3:9d:52:
         75:ae:55:02:c2:7b:c9:13:7d:31:23:d9:14:25:3a:c0:85:81:
         f9:9c:e5:04:73:c5:61:92:60:7a:c4:bd:cf:31:62:24:ad:ec:
         a4:dd:d5:2b:4d:49:60:a0:32:b9:ef:bb:2c:8f:c3:d4:5b:4e:
         e3:74:61:2d:a6:e9:44:f8:79:48:3b:45:74:8b:0f:49:72:cc:
         46:ec:94:cf:f1:dc:f9:02:b1:32:06:df:a1:72:7c:1a:41:a2:
         56:a7:5f:97:24:63:6d:98:2d:02:3a:df:30:2b:7c:26:ed:8e:
         7f:9c:1e:c0:18:c0:4d:e7:56:be:45:6b:25:06:77:d1:b5:52:
         c9:42:ec:df:96:44:50:c5:5b:73:3d:d8:bd:04:0e:13:a1:69:
         da:8c:43:8c:04:74:0a:50:bc:13:7a:47:86:b7:da:33:4b:f6:
         9c:52:62:c8:08:7d:21:b0:29:90:71:73:61:03:48:a7:9d:97:
         ca:a3:87:88:bd:9d:04:b6:11:5d:6d:d9:59:1a:63:47:98:9b:
         b1:6e:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:33 2026 by rpki-client