Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/79c4dd8b-d916-3346-9d98-4c45ed90e427.roa
File:                     79c4dd8b-d916-3346-9d98-4c45ed90e427.roa (raw, json)
Hash identifier:          O94OpP5J2bZrxBb+fH+kJnDnOxL6ashONhI3TK5sdR0=
Subject key identifier:   FF:6E:5B:BC:A1:57:4A:A2:1B:76:7F:AE:C4:DD:57:6F:01:11:B9:A0
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F58CD4D0E0A49534C15031900
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/79c4dd8b-d916-3346-9d98-4c45ed90e427.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     393886
IP address blocks:        173.208.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:4d:0e:0a:49:53:4c:15:03:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=d782ebce-e400-4ee0-b206-1d85129d83f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:72:f7:ab:ff:c2:8b:76:e9:a6:cd:db:92:6a:
                    18:b7:29:ea:d4:67:ba:dd:29:a8:fd:f2:9e:b2:96:
                    39:46:20:4f:30:65:75:a6:b1:0f:5b:e4:77:60:ce:
                    81:38:55:d5:d1:6c:32:e7:7b:dd:9e:dd:25:f0:cc:
                    58:8b:7a:45:a5:4a:3a:9f:e4:6d:a8:92:6e:c6:71:
                    36:d5:15:b4:c8:f2:4b:d1:33:ff:f7:73:2d:e2:c3:
                    d4:03:23:7b:88:4d:17:9a:23:55:f3:37:32:20:62:
                    d0:9e:94:ed:a2:e7:a4:8c:b2:ca:56:3e:ec:eb:39:
                    78:cc:22:7c:dd:42:5a:12:80:08:58:81:e0:52:df:
                    fb:40:7b:38:f5:ff:41:38:cc:df:75:57:21:fa:68:
                    1f:a7:25:d9:a8:c2:32:b5:e2:57:b7:2e:7a:36:b9:
                    1f:e2:2f:d4:dc:79:57:3b:16:47:56:cc:b3:a5:8a:
                    b4:ec:74:db:6f:05:61:23:be:e2:57:ed:ff:d1:ac:
                    c9:04:5a:33:66:4a:f7:42:7e:36:76:81:6f:05:18:
                    2d:48:3b:aa:a9:b7:e3:7f:bc:79:c5:a1:b7:b4:59:
                    2a:43:7c:54:ab:40:c0:82:8d:ab:62:9a:d4:19:c5:
                    d2:1d:aa:47:cc:cd:95:d7:19:fe:12:4c:b0:82:7b:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6E:5B:BC:A1:57:4A:A2:1B:76:7F:AE:C4:DD:57:6F:01:11:B9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/79c4dd8b-d916-3346-9d98-4c45ed90e427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f5:b7:b1:dc:30:da:f7:8c:66:cb:a8:ef:62:46:69:50:cc:
         dd:0e:6f:fd:82:48:67:04:9d:af:98:c8:53:86:d5:88:db:3a:
         c3:3d:8e:c0:e9:56:bb:fe:2d:15:2c:0a:49:17:51:3e:bc:14:
         a7:08:8a:bf:4d:91:45:48:06:b3:4b:e5:3d:88:a9:ac:f0:ea:
         b4:96:e0:79:5e:db:55:55:d7:2d:0f:b2:4b:14:4b:08:16:cd:
         af:5b:cf:b6:5f:c5:9d:c9:2f:d5:e5:61:30:9f:7f:8e:b9:b2:
         db:19:0a:81:07:54:86:da:43:6a:14:80:65:39:f7:60:99:b2:
         2a:f3:3e:b8:40:cc:16:1a:7b:15:ab:ab:a9:cf:6a:91:2a:c2:
         ce:66:f5:26:f7:dc:0c:58:0e:b5:35:c8:ea:e2:97:55:a8:a6:
         69:5a:6c:54:09:d8:ad:f2:85:bc:f3:9e:15:2f:1a:e3:b6:c7:
         71:8d:f2:fa:7b:45:00:b1:16:6c:54:14:aa:18:02:c2:e2:e2:
         3a:57:40:25:22:48:f2:50:cb:1d:be:83:c4:16:76:fb:89:47:
         cb:a9:57:a4:ff:6a:30:f7:d4:c7:4e:1c:5d:32:f6:43:d6:f0:
         13:62:d4:fa:f2:44:e1:45:8c:7b:46:bf:9d:a6:b7:e7:b0:ac:
         6d:a5:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:06:25 2026 by rpki-client