Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/d7d4ed9b-b3e3-3d39-83e2-fd3f7ca3b9ac.roa
File:                     d7d4ed9b-b3e3-3d39-83e2-fd3f7ca3b9ac.roa (raw, json)
Hash identifier:          MewLufmfzd7krpn11NQb3rpRQQI8nU+0PjI/gYMhftE=
Subject key identifier:   DE:ED:82:C9:16:2B:A1:00:73:0B:EA:33:80:9C:D9:B0:E1:B6:00:80
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F4328584EE38CA906F5D4FC19829F5E40
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/d7d4ed9b-b3e3-3d39-83e2-fd3f7ca3b9ac.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     8075
IP address blocks:        64.72.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a9:06:f5:d4:fc:19:82:9f:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=c17fff49-2def-4b78-9bee-80e184df243a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:98:8a:9d:87:7e:67:9b:b7:1a:87:bd:0a:
                    76:b6:07:65:6d:b5:82:99:01:d4:dc:49:fd:95:6f:
                    c4:1d:8a:72:41:1b:81:52:e7:db:1c:3d:86:e3:51:
                    99:97:c4:ea:24:2a:28:26:b2:a5:bb:41:18:d6:5a:
                    1f:70:12:c9:85:10:70:7d:9e:cb:7a:ff:6f:a0:44:
                    e4:33:be:6e:53:97:90:ce:1e:dd:fa:6b:61:53:05:
                    b9:e3:1c:36:85:be:2c:f7:f0:cf:a7:31:c7:3d:f1:
                    df:f8:dd:ff:02:46:0f:c4:59:ca:d9:51:27:32:c7:
                    d3:34:5f:61:25:f6:75:f0:e3:07:07:76:e7:22:42:
                    a9:67:35:3b:74:28:00:fc:42:58:2a:fe:69:17:b7:
                    00:6b:73:17:cd:32:68:c8:54:54:18:61:23:34:02:
                    c6:44:67:96:e3:b8:6b:cb:e7:95:6a:0d:b2:58:7f:
                    4e:0c:9e:0e:a0:cf:a0:e5:3c:d4:67:3d:34:ca:1c:
                    f5:b1:d8:70:d0:ce:68:41:2b:05:a7:78:23:f7:17:
                    d6:cf:97:0d:f7:f0:b4:50:52:38:11:b4:f6:21:37:
                    89:4a:a5:1a:d7:19:26:4d:95:4a:e0:0c:8c:b6:a3:
                    78:0d:8d:4f:83:21:09:30:f9:4c:07:0c:dd:0b:0c:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:82:C9:16:2B:A1:00:73:0B:EA:33:80:9C:D9:B0:E1:B6:00:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/d7d4ed9b-b3e3-3d39-83e2-fd3f7ca3b9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:13:00:ac:fd:a6:4e:bb:35:02:48:57:65:a5:d3:f0:8a:4c:
         c5:3e:cc:09:84:a4:7b:98:38:df:da:a7:64:f2:1e:5e:9d:96:
         8a:5b:50:be:5a:de:db:1f:ee:8a:de:d1:a9:bf:99:ed:d4:6c:
         00:c5:9a:8a:75:f8:e1:19:16:52:14:63:00:11:d7:c9:20:42:
         4c:6c:4e:0e:21:e3:5b:b0:01:28:b2:6b:5c:41:81:80:72:ec:
         62:25:e4:3b:f0:78:17:82:aa:e9:9c:fa:85:38:8e:31:60:1d:
         65:c0:fe:2a:1a:ea:f6:eb:d9:cc:a3:a6:70:93:b7:f0:93:c0:
         e4:3e:02:93:ae:de:68:f9:8a:49:5a:26:8e:89:62:73:f7:40:
         8d:67:fb:d7:a2:e1:4c:d1:05:11:9e:44:28:17:10:50:09:21:
         bb:33:53:c1:b0:29:77:47:7b:a5:71:ef:23:d6:ae:e0:bb:77:
         ff:24:11:24:04:a4:54:b2:4d:5f:04:37:a2:8a:2f:62:ce:f7:
         20:a2:46:f5:96:86:8b:6b:ec:b7:a4:7b:15:ce:9a:31:1b:cf:
         62:6d:97:e8:e8:90:ef:bd:5b:79:67:19:9a:54:cd:9b:1c:05:
         fc:43:6d:70:18:54:c9:3e:24:02:1c:ea:0a:ee:e1:3c:1f:dc:
         bb:9d:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:54:26 2026 by rpki-client