Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa
File:                     cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa (raw, json)
Hash identifier:          ugKGkv3LlTEd3XdXZSjRg/OYNQe+gp4/3qRfGwFSPlg=
Subject key identifier:   0F:ED:98:25:1C:73:55:B0:25:9B:FE:F1:56:77:E7:6C:29:01:2E:0C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F655D619E078C3EF278CBA0A0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        173.208.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:61:9e:07:8c:3e:f2:78:cb:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=acf5a29f-e070-404b-b5b2-570379196957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:51:e0:35:87:e5:ba:59:32:f2:10:50:48:ba:
                    33:65:df:03:be:93:5f:1f:20:b3:8d:bd:df:91:82:
                    29:60:88:1f:c3:59:13:d0:a4:e4:6a:e5:ab:92:06:
                    ab:4f:ad:79:db:83:48:21:d8:8e:08:9f:65:b7:7b:
                    27:91:10:9d:63:54:0a:bb:7c:ab:a9:4d:a4:f4:27:
                    f5:aa:f1:cd:e2:bb:98:05:69:a9:1c:eb:da:40:c5:
                    86:1b:91:1c:e3:36:e1:f4:39:33:4d:8a:b9:f2:0f:
                    8d:9d:c5:27:f8:d6:97:47:b2:6c:ce:17:04:aa:67:
                    44:a4:45:46:78:d6:13:76:bc:dc:2e:c6:8c:43:bc:
                    4f:d3:3f:4e:f2:29:8f:08:79:f9:08:1e:55:7c:77:
                    93:a1:44:65:0a:a1:5b:fd:e5:11:93:50:d2:58:86:
                    60:05:6d:a7:71:90:71:7d:da:c2:69:58:6d:bd:71:
                    4a:70:ba:27:c4:4e:eb:fc:27:ad:e8:ab:03:d4:1b:
                    18:7c:21:da:6d:b1:eb:69:ef:b1:47:ad:2d:bc:c0:
                    43:27:77:bb:ff:b7:75:f5:53:9b:88:1f:01:65:f0:
                    e5:c8:ec:e7:63:b9:e7:6e:73:6c:7a:ca:3d:42:de:
                    24:1b:66:20:b3:74:95:30:e2:25:df:e8:fe:0d:db:
                    0e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:ED:98:25:1C:73:55:B0:25:9B:FE:F1:56:77:E7:6C:29:01:2E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c2:e8:0a:c4:35:fa:fc:61:d0:9e:3c:9d:53:f4:9f:eb:3e:
         66:6f:dd:41:bc:78:cd:ce:56:58:5c:58:9a:ac:59:c4:24:e9:
         88:eb:21:4e:6f:fb:e7:73:5a:c2:cc:d4:93:36:8d:ea:27:24:
         77:eb:f9:d0:46:b6:eb:73:50:40:81:f3:e3:56:40:e4:ee:9a:
         f8:46:66:b2:ef:c7:d8:c1:0f:60:7d:19:dc:a4:c4:c8:32:07:
         ff:ef:c2:40:68:ce:49:2f:23:7f:98:f0:2d:48:e2:7c:ee:1a:
         59:b1:9b:f2:09:3f:5a:ce:9f:c9:f1:a0:de:b2:97:8d:90:48:
         14:e0:ac:f8:39:22:d8:38:3a:eb:1e:cc:f7:48:b0:72:79:ff:
         ec:72:25:32:51:8c:5f:67:b3:a2:97:aa:0e:69:61:cd:73:d6:
         4b:29:89:e8:2c:f6:75:fc:64:28:9d:f0:7a:c6:c7:e3:0b:cd:
         c7:b4:33:a5:38:07:d9:18:d5:ea:78:99:08:c0:39:aa:19:22:
         57:6c:dc:a8:70:9c:f3:e7:37:6e:92:5a:8e:c9:99:b2:a6:1c:
         bd:09:02:a8:7a:12:b2:e0:c7:4a:c5:39:84:62:21:90:84:c1:
         97:14:9b:e0:7e:5d:09:8e:06:30:59:aa:84:69:f5:f4:2b:e0:
         57:21:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:10:16 2026 by rpki-client