Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa
File:                     a9452a88-6ebc-3d4c-8810-c191bce079bd.roa (raw, json)
Hash identifier:          FvUhMQDvWRX4pvAkpThsAwqz9Oq6mLfqewReYcaaLq0=
Subject key identifier:   CD:65:5A:17:6B:BE:A7:31:99:FB:71:53:1B:85:B5:EA:E8:9C:B0:03
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584EC7A1D06E8366C47F500888E0
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        209.169.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d0:6e:83:66:c4:7f:50:08:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=3cd068d2-2be6-4751-bf5f-2846d4ec8073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:2f:1e:2e:c6:12:87:de:97:4f:01:a5:ed:
                    13:a8:46:42:1a:f9:6f:1f:3a:26:80:02:6a:3a:c4:
                    5b:11:c8:8c:81:b7:b7:bf:32:ce:f3:36:ba:ec:11:
                    38:e8:ab:8e:5e:b3:d8:61:99:7a:68:9d:13:cc:aa:
                    24:f3:b1:05:63:ba:ce:20:5d:f7:0c:c3:23:04:70:
                    c8:0c:24:8b:4c:63:cd:59:b6:a4:fb:c4:e0:b5:17:
                    7a:b3:1f:91:02:b4:8e:aa:c8:0a:67:89:b6:63:b6:
                    2a:d0:7a:a7:fd:f2:e4:a1:fd:55:96:d9:45:8d:f6:
                    1a:4c:9d:83:73:26:e7:0a:5f:f9:8a:4a:94:69:2f:
                    13:a3:dd:79:9c:fd:2e:ce:66:1a:3f:da:3d:3f:e7:
                    08:c8:29:5a:ea:15:ca:f2:27:70:a9:46:ee:cf:31:
                    8b:03:98:19:d5:19:56:76:0c:16:fb:a5:da:e5:ea:
                    c0:ec:bb:54:ea:1c:1d:fc:49:2a:4a:6d:fe:d5:89:
                    cd:57:63:11:ca:82:05:e1:f1:34:2b:64:f9:50:f9:
                    0e:25:06:20:42:8e:52:f5:ec:88:6a:b8:b0:58:54:
                    64:cb:a8:a9:b7:b0:21:6d:fd:25:29:a0:06:6a:b9:
                    65:a0:6e:e5:66:64:07:ef:a9:b6:8e:6c:fe:b5:d8:
                    d4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:5A:17:6B:BE:A7:31:99:FB:71:53:1B:85:B5:EA:E8:9C:B0:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:56:4f:fb:85:eb:54:75:b2:7c:08:ad:0c:d1:8f:3e:60:
         19:b6:57:6a:5b:70:55:d3:3a:c8:ef:40:c5:d4:3a:82:9a:6e:
         4e:f8:e4:8e:0f:70:92:01:d8:5e:0e:2c:ab:38:28:96:be:3c:
         50:02:35:9f:1e:3f:c1:1b:4c:e5:8d:b7:d5:19:5d:7a:8c:1f:
         a5:9c:75:1c:08:72:77:d7:1f:50:b9:cb:9a:a1:59:01:8c:41:
         58:d8:dd:f2:a5:14:cf:98:93:c6:29:ee:08:a7:98:1a:c7:06:
         07:1a:ff:02:e5:43:38:d7:cf:84:07:61:28:77:8e:fd:c7:ad:
         0c:ea:ab:7f:97:0e:5f:96:f1:44:68:da:d7:2d:08:69:1b:91:
         b6:46:ee:0c:1a:62:ef:d5:0d:3e:98:5d:7f:04:3e:67:5c:3d:
         82:47:4d:42:d9:69:7b:24:fb:5a:ad:46:1d:10:e9:69:ab:6a:
         36:c2:8b:32:a0:ed:ac:c3:fc:d6:5a:d4:47:50:34:ef:ff:fd:
         23:e4:0d:fa:85:a5:15:ec:b1:6a:16:fc:7c:d1:06:3d:53:d7:
         d4:88:83:91:65:e6:fe:23:a4:d5:ef:e3:82:09:f1:5d:56:59:
         89:43:22:f0:3e:ec:e5:cd:1d:91:81:42:3e:d0:66:e2:7e:af:
         cd:fa:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:02 2026 by rpki-client