Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46c2b223-0683-389e-a1c9-cc85555e6bf3.roa
File:                     46c2b223-0683-389e-a1c9-cc85555e6bf3.roa (raw, json)
Hash identifier:          JB+90WSZwTWkCDJAwvrTY8zg/g5hjO/58O5K+So4FZQ=
Subject key identifier:   AD:0C:AC:3F:10:50:A5:5A:E2:57:DC:D3:94:6B:10:C9:96:D2:E5:92
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4C3901EC0D271829F0040
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46c2b223-0683-389e-a1c9-cc85555e6bf3.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397237
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:c3:90:1e:c0:d2:71:82:9f:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=b8989ede-652e-4f24-8a4c-6c212f8e64a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:72:cb:8d:ee:ab:83:41:63:3e:e4:7d:f8:
                    ca:e1:54:df:98:10:57:3d:13:a0:c7:f2:f3:47:67:
                    50:ab:a2:71:0b:7e:30:5d:65:83:9a:13:8f:a0:1d:
                    71:87:c6:dd:d7:6f:53:cd:00:ce:ff:68:41:29:7d:
                    84:b2:c1:31:c9:74:f6:60:5a:ee:ef:96:6a:ca:39:
                    85:fb:32:04:0d:e9:c8:a6:53:cd:c0:2a:5e:7b:a5:
                    0d:4c:31:6a:15:0f:29:f4:b0:df:8e:0a:b6:f7:0d:
                    86:40:3a:90:e7:f5:b9:4f:6c:a7:e3:11:16:a1:55:
                    bf:58:e2:3c:48:11:4c:a5:58:29:e0:eb:ad:2a:79:
                    20:58:94:95:71:05:a0:2e:aa:86:5a:c2:b1:bf:b7:
                    47:17:bc:19:e7:7e:3c:d8:66:69:ab:c2:ac:ff:fa:
                    9f:ca:fa:f5:cc:85:81:36:1d:cd:03:2e:19:12:a1:
                    56:80:36:d1:a1:70:21:f4:d2:92:62:1d:82:e8:85:
                    90:5a:1d:98:28:34:8e:d3:22:13:cc:35:1d:c0:1e:
                    a4:82:8f:8b:5d:f8:be:e8:d7:86:4b:24:93:e3:c6:
                    09:2d:a4:a7:2a:83:f9:7f:0e:22:62:dd:e1:a0:80:
                    00:49:1b:e7:02:50:0a:55:f4:22:65:9e:68:1b:22:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:AC:3F:10:50:A5:5A:E2:57:DC:D3:94:6B:10:C9:96:D2:E5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46c2b223-0683-389e-a1c9-cc85555e6bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:f2:4e:49:5d:48:1a:c5:15:5e:a5:7a:a3:49:7c:17:93:
         8f:d6:c8:6c:ad:14:5c:51:29:83:0a:7a:72:1b:39:e8:96:ae:
         93:cd:ed:38:ce:72:dd:20:a8:aa:d4:78:09:09:13:c0:e0:f3:
         7e:c4:8f:ef:11:4d:f7:65:af:98:e3:ce:82:1a:a1:1d:7a:bf:
         3e:06:e1:3b:1d:2c:3b:87:7b:38:3f:12:54:f8:01:62:8d:9f:
         c6:5a:78:72:44:a6:35:17:c8:78:78:9e:97:d6:b3:34:d2:f5:
         a9:dd:25:94:c8:0e:f7:55:38:28:58:3e:03:07:5a:2f:83:5d:
         33:8c:25:e2:cf:81:57:e5:7a:aa:92:66:63:4d:69:c2:68:e3:
         99:4a:95:c6:14:07:b5:e1:fa:db:aa:36:33:7c:c7:8a:04:bb:
         45:f5:cb:f6:55:e5:66:8f:1f:33:48:1c:94:68:00:71:6f:de:
         d2:ae:38:6a:14:47:18:bb:08:a0:7b:fc:a7:8f:8c:5c:d1:38:
         ec:57:5f:52:c3:74:e0:e1:b1:30:df:3b:45:3d:70:e1:46:0b:
         4f:ee:c8:bc:63:e0:e6:03:23:7b:9e:34:16:5e:d2:5f:70:b0:
         4b:0d:6d:54:c8:5d:cf:17:2b:ef:0c:b1:9e:3a:0c:da:df:18:
         c7:f7:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:30:33 2026 by rpki-client