Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f33969c9-f854-371e-ad6d-ec69212003b2.roa
File:                     f33969c9-f854-371e-ad6d-ec69212003b2.roa (raw, json)
Hash identifier:          T1dszU2jjJN5tpJ+s/6YyUk6CIn2pzoHu6LxZbmWNP4=
Subject key identifier:   79:ED:9D:37:DB:56:F9:7C:BB:D6:83:08:EC:DA:7D:B4:01:20:25:91
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584EEA875E1E26BAEB37FA443DC0
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f33969c9-f854-371e-ad6d-ec69212003b2.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        151.207.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5e:1e:26:ba:eb:37:fa:44:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=d39ba77b-36b7-4025-b8ec-c91bcd174cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:07:97:aa:31:3e:66:ff:e1:16:94:10:76:55:
                    fd:19:f1:34:13:6e:6a:15:19:fa:2e:32:f7:46:52:
                    0b:63:e5:31:85:f8:e1:b0:15:a6:18:f9:1a:8f:05:
                    13:87:e2:5f:44:87:5b:a9:57:29:ac:12:cf:2a:15:
                    69:27:8d:56:34:e0:30:aa:53:de:89:52:94:01:5c:
                    d9:c7:7f:0d:40:a1:69:7a:1c:43:82:c1:54:a3:29:
                    51:89:b8:7e:07:b3:dc:f3:f5:01:00:e1:9a:94:41:
                    19:e6:7c:af:21:a9:89:d2:9e:11:3b:e0:54:19:b9:
                    58:db:1e:b8:df:11:e7:28:22:b7:06:52:2d:c2:ce:
                    b7:ae:0c:c0:c2:d8:9f:f3:06:3b:8c:be:7f:f4:9c:
                    9b:3c:a0:cd:67:52:60:db:89:ee:2c:6e:fb:04:02:
                    bb:f2:b0:36:67:af:e3:da:e1:83:34:25:0d:0e:87:
                    cc:a7:87:40:8b:27:78:6c:fc:4b:d5:d1:de:bf:64:
                    14:dc:15:a9:7a:3a:74:90:6a:31:14:70:1e:9d:03:
                    c3:1a:f7:17:bb:2f:c2:44:85:61:3b:da:16:69:18:
                    52:6e:62:a8:39:27:b1:14:c0:63:77:6b:0f:fc:55:
                    7a:5e:7c:01:63:fd:62:59:34:2a:d2:ac:51:83:c9:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:9D:37:DB:56:F9:7C:BB:D6:83:08:EC:DA:7D:B4:01:20:25:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f33969c9-f854-371e-ad6d-ec69212003b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:85:a8:1e:6f:8b:90:54:b0:48:5f:d5:53:30:76:13:62:60:
         d1:25:7c:07:fe:9e:57:d6:d1:ae:f8:44:75:7a:3a:15:52:74:
         2a:bc:9d:db:92:ea:81:bf:48:8d:0d:21:75:6c:54:2a:f7:10:
         a2:39:12:e3:ee:01:5b:93:40:9f:be:20:94:0e:e5:ee:6c:58:
         4b:65:12:a8:22:51:c1:31:6d:bb:6d:84:a1:27:5a:81:8e:58:
         f8:9b:f1:b8:e6:08:47:2a:c9:a5:67:b8:ed:56:0a:b1:3f:3a:
         57:39:ea:05:e1:87:ca:eb:5d:a1:2c:5a:89:9b:a1:7c:17:be:
         cf:15:9d:9e:1e:84:db:cc:21:fb:8b:a7:13:5f:a0:01:c3:68:
         da:61:54:16:63:1c:01:99:88:55:47:36:4d:3f:63:2a:0b:b5:
         55:1a:6a:e9:ad:6b:05:71:ec:8f:88:af:0b:31:6b:9c:6c:dc:
         ee:e0:88:85:58:35:87:5d:ee:d1:77:a1:ea:d6:4e:74:26:f0:
         23:0f:94:c5:65:2f:ee:b9:b6:89:82:ff:1a:9b:3b:a7:36:54:
         36:e0:f1:ac:d2:7a:f7:99:19:c4:ab:96:2e:7e:c0:50:10:a3:
         57:75:70:96:7c:b6:c2:42:35:43:d8:fb:ad:be:98:9e:f1:92:
         10:8c:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:46:26 2026 by rpki-client