Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa
File:                     4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa (raw, json)
Hash identifier:          JbPLfNFyAWxiMqoP8+SiTZQTSFJ7FVNdNvvCmDZaoQE=
Subject key identifier:   FA:7F:C0:E8:65:64:4A:C0:DF:9C:F6:DB:8D:92:12:BE:DF:23:58:49
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584EA7940B8D313DC41C702B4E40
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        209.169.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:0b:8d:31:3d:c4:1c:70:2b:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ebfbec6b-ee47-40d5-83b9-5119bf0aa9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:34:13:d0:cc:f4:e3:61:f9:0c:9f:c6:3f:
                    a4:2c:16:91:a2:ed:12:e2:75:9e:f5:e8:f7:2e:62:
                    ef:95:39:2e:da:84:c4:dd:b2:f5:0b:b0:30:10:96:
                    50:1c:50:84:b0:9a:37:25:9c:6f:d0:bd:73:8e:43:
                    5c:72:a6:75:af:41:c8:9d:e7:30:28:91:bb:6d:51:
                    16:62:11:76:a7:fc:5c:7c:c6:bc:f3:55:93:5f:4d:
                    ef:c4:8b:28:5f:78:e9:7a:34:29:ef:e8:33:17:7f:
                    a9:43:c7:00:d9:e9:52:eb:68:81:13:64:82:0e:4f:
                    8c:0b:31:e3:db:b2:dd:9c:c3:91:09:05:25:72:8d:
                    d3:1a:b3:eb:f0:f2:8d:fd:a6:bc:15:da:35:a2:77:
                    53:30:f8:72:9e:04:2d:80:5b:3a:e7:a8:c8:01:56:
                    27:50:cf:b2:c8:af:1b:50:f7:71:ab:f2:0b:74:6c:
                    62:37:71:c1:b4:f8:cf:89:62:06:0c:26:da:75:15:
                    50:97:45:c2:19:bd:c9:5e:d8:fc:3b:03:f0:e7:44:
                    cc:9a:72:87:e9:e4:68:01:32:fc:58:95:10:6a:f5:
                    48:b7:78:b3:18:72:53:9c:53:00:9b:f8:5b:93:52:
                    b2:15:e7:66:36:4e:ae:52:27:ff:8c:08:49:1e:3f:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7F:C0:E8:65:64:4A:C0:DF:9C:F6:DB:8D:92:12:BE:DF:23:58:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9c:a3:5a:c7:30:4f:b3:25:77:21:d9:56:10:d6:a1:1d:ed:
         68:9f:52:3c:7f:08:11:7a:d5:96:85:d6:70:86:20:c6:f5:37:
         07:d4:a6:de:9f:5b:02:14:bb:e4:1a:e2:3d:a6:91:fa:ae:2b:
         fa:fb:b8:8e:46:44:ce:a0:19:30:23:c2:7f:d5:c0:da:da:09:
         25:ad:bf:f8:94:ff:8e:93:ac:2e:3a:88:ab:7a:a1:cb:53:93:
         8f:59:16:25:3e:31:9c:1d:b9:1a:20:b9:d9:be:24:e5:14:36:
         ac:ac:65:bf:54:74:78:71:24:09:0d:b4:a4:b9:4d:1c:27:36:
         17:7e:75:d8:e0:16:90:4e:7c:39:59:a0:a4:36:3a:4f:34:48:
         da:60:4b:8c:fd:1e:01:e0:19:06:33:8f:b2:47:90:0c:b4:fc:
         da:e5:f4:da:fd:54:52:ce:3c:b4:1c:1d:46:16:71:3d:4c:1c:
         56:23:d6:d9:d1:3a:86:29:a7:d4:ce:3b:0c:24:0c:3b:db:74:
         ee:8e:ee:25:a0:33:78:65:85:51:86:04:fd:6e:d0:b3:d6:44:
         e2:e9:7f:af:8a:6e:b3:6f:a8:c6:1b:f3:d5:ae:c1:ce:04:62:
         be:de:ed:9e:97:84:7a:75:e9:d9:fc:87:48:0b:f8:2e:92:b6:
         6f:d3:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:32 2026 by rpki-client