Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8c2e560d-4fc6-3c78-9b3f-85bf956f74ad.roa
File:                     8c2e560d-4fc6-3c78-9b3f-85bf956f74ad.roa (raw, json)
Hash identifier:          GfGJFC6/jQHRm6M4Z3EkjANhF+2ZktuR0NmkGYo/7Qw=
Subject key identifier:   48:E7:F4:83:65:D5:94:97:DC:11:A8:1D:9B:B9:78:FE:62:B1:7D:AE
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584EA7945A0F9B4FA50E659F4480
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8c2e560d-4fc6-3c78-9b3f-85bf956f74ad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        205.251.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:5a:0f:9b:4f:a5:0e:65:9f:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e19254be-4143-4aa8-bda6-0813c7dc01ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:5f:71:03:94:ee:a5:a5:70:55:fd:70:5a:
                    63:28:94:10:4d:39:ad:92:10:09:56:8a:7e:e7:e6:
                    2b:45:cf:13:84:9f:c5:45:37:39:b3:c3:34:ef:c5:
                    41:59:46:41:ff:32:67:22:4f:5a:70:c0:b3:d4:75:
                    df:27:02:76:30:71:f2:54:83:fc:ba:5b:e7:67:70:
                    95:1e:48:d9:b2:22:55:a4:d8:36:4d:bd:00:54:e3:
                    a8:c6:2c:e1:b4:c2:56:a4:ca:c4:b7:4c:ce:70:34:
                    48:26:e8:88:d1:cb:4f:51:f3:a1:1f:47:62:e3:dc:
                    dc:88:8f:5a:83:2a:ed:51:81:5d:50:8f:75:1d:c5:
                    83:36:8e:57:5b:a6:68:28:49:7f:01:0b:a1:04:c2:
                    ab:5f:a9:4c:70:4a:69:a8:96:01:87:33:1f:78:35:
                    6e:f7:5f:dd:df:a8:d2:11:df:d4:be:2f:de:c8:46:
                    c5:16:b2:67:cb:ca:8f:2c:b2:99:a4:39:05:c9:2c:
                    13:2a:8a:ff:4f:28:7e:0a:f6:0a:fa:cb:ca:b7:81:
                    d2:91:8a:ae:91:93:c6:34:21:98:53:25:56:bf:97:
                    1e:f8:b0:d2:49:fe:12:bc:74:9d:61:14:92:8b:a3:
                    29:e4:61:03:4e:19:36:21:ce:22:28:76:52:6a:91:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E7:F4:83:65:D5:94:97:DC:11:A8:1D:9B:B9:78:FE:62:B1:7D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8c2e560d-4fc6-3c78-9b3f-85bf956f74ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:2c:07:b6:94:2f:8f:e9:38:c1:16:c1:26:10:25:90:79:
         16:bd:cf:34:dd:0d:53:21:20:cf:af:32:f9:cb:b8:77:76:89:
         95:c2:06:04:ea:0d:b2:04:18:10:fc:ab:6a:2e:7d:ef:0e:d1:
         e2:50:5a:01:40:31:4d:d1:d9:65:46:1e:ae:20:17:bd:2f:56:
         34:d0:b4:2d:a2:58:4f:c2:bd:af:f9:cc:55:f4:7d:59:bc:e7:
         1b:2a:85:2f:b4:52:f8:66:51:ec:3b:f7:79:a6:06:4a:19:e5:
         91:ba:bd:66:d1:59:d0:74:10:5c:92:20:3a:bf:ec:89:77:26:
         be:49:f4:88:0f:38:37:21:a6:73:7f:be:bf:e1:7d:32:e5:97:
         de:91:58:33:0a:70:ef:57:63:c5:d7:f2:12:2f:95:1f:a2:5b:
         5e:12:65:a6:68:2d:a4:16:5f:c0:d6:39:58:2a:3c:a9:ed:5a:
         e5:b5:96:a1:04:6a:74:b9:f8:c6:66:de:76:11:ce:b4:f3:94:
         e7:de:c9:f1:7f:95:19:8f:48:34:ea:cd:f3:de:27:bf:4d:08:
         ec:50:0b:44:31:ec:8c:ed:9f:a6:af:6f:57:0c:33:4a:fe:7d:
         d0:5d:50:74:20:dd:36:aa:f0:08:43:25:40:5e:bb:19:d7:69:
         bd:58:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:21 2026 by rpki-client