Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa
File:                     2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa (raw, json)
Hash identifier:          Q6XaP0F+fUKwLaXTwUR6CyduIPWUDviA66oZ/0Novfs=
Subject key identifier:   17:96:98:FE:F8:6A:3C:2E:E4:3A:C9:FB:4D:E6:FD:62:D4:AC:D9:F5
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB985AEB506543890E9037DE8
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa
Signing time:             Tue 04 Aug 2026 11:42:25 +0000
ROA not before:           Tue 04 Aug 2026 11:42:25 +0000
ROA not after:            Mon 02 Nov 2026 12:42:25 +0000
asID:                     7203
IP address blocks:        172.241.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:85:ae:b5:06:54:38:90:e9:03:7d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 11:42:25 2026 GMT
            Not After : Nov  2 12:42:25 2026 GMT
        Subject: CN=0203e1d2-acd6-4ba1-91d5-d3c9e4b3f0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:bf:18:f9:5c:ae:32:4f:88:45:ce:c9:91:
                    34:64:f1:69:1e:ec:18:f2:75:a3:57:d2:74:8e:78:
                    fb:3f:aa:40:be:16:37:99:05:a3:60:a4:36:4f:7e:
                    5a:44:8e:3f:bf:51:0e:9f:f7:12:bc:40:f0:44:e9:
                    2b:f4:75:a6:b9:57:cf:65:81:2c:29:08:fa:9e:b7:
                    d0:67:42:c6:53:86:35:d4:81:ca:62:01:5d:01:7f:
                    f9:30:ae:05:b3:cb:90:00:7b:0a:b3:83:de:31:81:
                    93:ae:c2:1c:a4:f3:d2:ba:4d:17:8d:bc:66:ba:34:
                    82:12:f4:1d:c3:d3:2a:ed:fc:71:d0:e6:a4:be:9a:
                    61:1c:4a:a7:54:a0:49:41:d2:61:c5:c7:54:5d:c7:
                    10:99:4e:32:d0:e7:2c:94:9f:d3:d8:ac:0d:a5:86:
                    6f:b6:74:8f:de:dd:78:ba:a6:ee:49:67:11:9f:f4:
                    07:df:ba:c1:4a:b3:a8:f7:7c:0f:d3:14:dc:6e:9a:
                    43:21:d9:d7:8b:08:fe:ec:48:20:bf:e0:52:cc:f9:
                    a8:7b:bd:cf:d5:ae:83:3e:f3:da:52:5b:d5:43:73:
                    81:8e:11:85:b9:7e:b6:7e:6e:5b:ae:82:8c:b8:06:
                    0b:a1:7c:39:be:7c:b4:b5:bf:8a:7f:c3:53:63:c9:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:98:FE:F8:6A:3C:2E:E4:3A:C9:FB:4D:E6:FD:62:D4:AC:D9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2da5f9d0-e4f8-33e6-8851-b6c2a9294808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.241.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e4:f1:37:64:7a:02:4b:a0:a1:d1:cb:db:b6:bf:10:d2:6c:
         b8:ac:1e:08:5d:3c:c2:52:1f:34:da:43:23:24:be:ef:27:1a:
         82:6f:4f:b0:21:05:5f:61:0c:9a:65:a1:ec:b2:9d:0b:02:fc:
         fa:15:68:db:fd:38:6b:b9:69:59:27:c3:7a:6c:bc:ca:15:6f:
         37:ac:d3:82:f3:5b:27:a6:1a:dc:39:77:3d:c4:81:59:96:db:
         11:45:39:45:46:1e:44:d9:c6:23:a6:fb:f1:7b:f7:7c:bc:df:
         d2:3b:7d:85:69:c6:1c:ef:82:75:97:d3:65:28:d7:4d:24:8e:
         84:2e:b1:a3:49:4b:d5:ac:3f:a6:21:b0:bc:40:03:53:ec:2f:
         13:98:73:37:57:39:74:6e:b0:0a:04:ec:05:ce:8c:ad:1a:da:
         dc:bc:ba:2c:cc:65:d7:59:04:f3:61:bd:15:62:df:91:dc:6d:
         92:e0:87:89:2d:82:2e:ab:b1:36:95:0c:62:67:a6:d1:fe:75:
         e6:91:3b:c0:f4:4d:51:bb:b9:a4:7c:d8:72:35:51:ae:fd:50:
         1d:59:48:ea:0b:4d:bc:d5:65:d2:be:eb:33:b7:a5:fe:5d:ed:
         0a:3d:a3:aa:54:c4:b2:34:76:d6:c1:07:a8:2a:21:56:57:12:
         d4:5d:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:03 2026 by rpki-client