Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/7586b998-4829-325b-9633-0343317f6ee4.roa
File:                     7586b998-4829-325b-9633-0343317f6ee4.roa (raw, json)
Hash identifier:          hNk2UyOsobJKUsi82sIsZkeOj/jyiYpyFNcKvj2Vk8c=
Subject key identifier:   8C:B3:D0:71:F9:CB:3A:4A:14:D8:1D:3D:AF:C8:90:59:F3:36:F0:C1
Certificate issuer:       /CN=e85794f9-a8df-4d59-8974-f686e8987f1b
Certificate serial:       010D0C9F4328584E2D9F2674468E4B89B8726B60
Authority key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/7586b998-4829-325b-9633-0343317f6ee4.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     376
IP address blocks:        205.237.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:26:74:46:8e:4b:89:b8:72:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85794f9-a8df-4d59-8974-f686e8987f1b
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ea15cf65-ef1e-4e88-bf4f-f6d6a1cbed2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:33:83:46:03:b1:86:91:21:d5:63:ad:2d:
                    e5:48:8a:16:85:5b:14:8e:42:bc:46:4c:66:15:83:
                    ce:38:fa:50:b5:52:6f:f1:9c:7f:10:8d:ed:9c:5d:
                    5e:9f:4d:b7:d1:ac:d2:6f:49:65:b5:29:a2:0f:08:
                    6b:d4:44:3a:8e:57:ed:92:22:78:28:30:c7:3b:78:
                    d4:58:2b:31:af:1b:31:41:53:6c:06:47:be:83:a2:
                    c1:0a:d3:0c:a0:67:1c:ae:7c:18:0f:04:d7:8e:84:
                    31:86:29:52:64:86:da:78:18:23:1f:7c:29:8c:fa:
                    43:cc:db:46:25:96:84:e4:e8:a9:d9:5b:ce:fb:82:
                    e5:8f:d6:c5:35:93:1c:12:0d:0c:7d:8f:ca:64:e1:
                    32:e8:84:ce:5a:de:50:f5:5f:9e:c8:16:63:c5:9e:
                    49:74:c7:2f:b9:e8:65:06:a2:88:b0:98:73:79:97:
                    62:ad:cf:28:bf:81:f0:bc:00:0e:da:1c:42:5e:5f:
                    21:6c:4d:30:c8:cd:73:0c:ed:95:c0:83:14:99:df:
                    ae:59:bd:ce:4c:93:17:70:16:e9:47:72:68:56:04:
                    2c:1b:90:e5:13:ae:9c:93:33:fe:e9:4d:11:eb:30:
                    ac:4f:af:db:ac:15:ac:ec:4d:b2:b9:54:19:15:92:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B3:D0:71:F9:CB:3A:4A:14:D8:1D:3D:AF:C8:90:59:F3:36:F0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/7586b998-4829-325b-9633-0343317f6ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl

            X509v3 Authority Key Identifier:
                keyid:42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:07:93:ba:8e:2e:b5:03:9f:4c:69:c6:d0:59:b9:c8:cd:c8:
         82:53:7c:60:35:a4:b3:f9:c7:e9:dd:67:a3:c0:20:ec:49:b0:
         fa:f4:d6:ff:46:ac:4f:1b:a9:ef:db:5b:d1:76:05:3b:3d:a6:
         e9:1f:0a:31:85:37:23:9a:23:6e:84:7c:64:88:18:4a:e4:75:
         f5:ec:2f:51:00:74:ab:e6:3a:45:c1:de:01:8d:85:f1:00:10:
         6a:a1:dd:85:8a:dc:da:2d:b0:7f:7f:34:72:dc:c8:d5:d1:7b:
         7e:53:7c:d1:77:d5:3d:a4:be:8b:ce:0f:63:48:57:13:a3:67:
         45:4e:bc:bb:15:ad:3a:41:6e:85:93:74:ee:a7:e9:5f:c6:f0:
         f7:ec:d2:75:3e:80:f1:67:a4:32:84:af:e5:1b:60:bd:5c:07:
         d0:90:8a:80:26:9d:b4:37:4e:a3:a5:49:e9:9e:27:07:b2:7e:
         34:6e:ab:f7:6c:a7:77:38:f0:ff:4a:3a:7a:f8:e8:01:d7:ec:
         85:56:0f:ed:3e:59:f9:d5:b5:f2:86:05:4b:53:dd:eb:3e:c0:
         d5:80:43:fc:11:89:44:05:75:33:a5:84:d0:fc:f3:41:01:de:
         6f:cc:ce:6b:f7:b2:1a:46:52:24:ff:75:a2:77:10:1e:69:f9:
         16:b2:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:44:56 2026 by rpki-client