Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2a2998e5-5eb6-3a4b-b3c5-0165804b91cb.roa
File:                     2a2998e5-5eb6-3a4b-b3c5-0165804b91cb.roa (raw, json)
Hash identifier:          gblzFO/5h2Dh0cs+KxETlDUvzwyiWIoFNb7gHVfnGuw=
Subject key identifier:   DD:C7:E8:AF:CF:21:5A:03:FF:92:A5:95:66:40:38:19:6C:A9:75:53
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584EA7945D7F7830F281B2D73F00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2a2998e5-5eb6-3a4b-b3c5-0165804b91cb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        207.210.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:5d:7f:78:30:f2:81:b2:d7:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b9eed7ac-46b2-47f5-8859-f0900489fbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:61:64:92:80:49:82:2c:e7:25:8c:36:b6:
                    23:a6:d9:b1:c0:6b:37:d0:a7:cd:aa:17:6b:a4:7e:
                    d3:aa:12:0b:42:6e:14:8e:7c:76:73:2a:2d:b4:6e:
                    ac:82:79:1d:32:ec:a2:e4:4e:7c:68:99:1f:da:5e:
                    90:32:91:02:b8:51:37:c8:24:67:0a:5c:48:30:8f:
                    d3:02:a9:fb:c4:fc:bd:cf:f3:02:8f:81:d3:01:a1:
                    67:7e:e4:33:bf:83:62:3d:85:5f:06:bd:6d:b6:f0:
                    49:c2:01:40:24:9e:7a:2c:40:6c:0c:d6:08:21:43:
                    65:60:0b:62:75:62:00:d8:75:31:61:07:18:30:ab:
                    c5:2e:98:0c:4b:a8:3b:93:b8:23:18:12:12:55:b3:
                    c9:bb:cf:28:42:b5:f6:4c:cf:bf:a3:65:22:92:95:
                    2b:39:c2:c6:df:8c:dc:c4:33:da:7c:ed:29:19:ca:
                    f4:40:04:03:0c:17:f1:cf:45:33:c6:f9:ef:cf:3a:
                    fd:2e:99:7b:79:39:25:01:53:b3:64:04:7d:dd:f1:
                    94:85:0b:0c:44:70:fa:74:63:b8:29:aa:8e:c9:81:
                    c8:0f:7a:4c:0a:59:b1:49:ee:a8:9f:e5:f2:1c:55:
                    d4:22:e8:a1:49:5b:9d:b4:b9:6a:4a:4c:a3:27:b6:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:E8:AF:CF:21:5A:03:FF:92:A5:95:66:40:38:19:6C:A9:75:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2a2998e5-5eb6-3a4b-b3c5-0165804b91cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:71:29:fb:0a:db:f0:1e:4f:b4:df:9e:3f:fa:c2:52:b9:
         91:23:d5:71:a0:4d:c0:68:2e:2f:ce:4c:2a:d5:92:89:b3:67:
         61:fa:4d:66:c9:f3:eb:2c:01:4b:60:7c:bb:a4:ad:df:de:78:
         4a:2a:09:f0:ae:cf:53:c5:94:d7:33:e0:58:c2:a6:57:7c:16:
         ba:fa:86:2c:00:d5:75:0d:36:82:04:a2:14:f7:aa:0c:6a:0a:
         16:8f:65:15:48:ec:91:42:e9:c5:2b:c1:32:a1:20:e3:8c:55:
         bb:cc:67:31:c5:62:68:fa:28:4c:a2:b3:b4:52:c6:7a:bd:b6:
         14:03:44:08:aa:b2:54:64:0d:c6:d8:09:0c:05:95:0f:9a:22:
         26:8a:6c:67:ee:c3:3a:fe:d9:a0:b3:3f:9d:fb:c6:a3:5d:b5:
         08:c3:8d:91:d2:9e:e8:fb:2e:28:ff:17:f1:42:33:fd:ea:f0:
         da:35:ac:68:5f:6a:26:21:e8:96:fc:f4:c2:13:8a:4b:4f:2c:
         0e:ed:91:5f:d0:19:ab:46:95:fd:85:4f:fb:51:cd:57:13:88:
         12:0b:fc:5e:aa:99:9b:61:f5:15:81:61:16:9b:df:34:55:78:
         0d:3a:88:0f:2d:cb:f9:4d:77:4c:e9:fc:5b:35:a1:83:3a:eb:
         00:31:c6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:11 2026 by rpki-client