Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa
File:                     368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa (raw, json)
Hash identifier:          gZHp7YGH6L/i3eYcsHZ/XHot7DSINkrsOevBhFcRf+w=
Subject key identifier:   87:85:FB:1C:C7:86:9E:F5:5E:D5:30:97:47:F6:5C:51:8C:93:C2:06
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F1467A706E321A6BAD237F080
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     394966
IP address blocks:        207.172.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a7:06:e3:21:a6:ba:d2:37:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=de1f0700-9eac-45d8-80e2-e55d4a176e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:c3:2a:e4:67:86:38:0a:c4:40:95:c2:5f:
                    3a:70:f7:3d:81:31:c7:39:f3:92:67:aa:d2:ca:f5:
                    e8:a4:b2:d9:f1:72:99:ae:89:fd:f5:70:d4:0f:7a:
                    6d:09:0d:33:6d:1a:8a:cf:5c:81:26:ec:d4:cb:e9:
                    a1:b0:ba:57:52:c5:a7:0d:62:ef:34:47:af:44:b0:
                    17:4e:c2:43:ea:38:fd:be:7d:9d:32:3a:8d:6c:92:
                    b5:4f:48:1d:6b:e7:3a:c9:b9:eb:77:9d:e5:f7:9e:
                    51:42:8a:e7:5a:bd:48:41:2b:eb:87:6b:d9:ef:1c:
                    79:2f:c1:6c:39:30:90:e6:59:81:48:4a:90:ee:f0:
                    59:a2:0d:bb:a4:3d:dc:06:95:d2:f7:92:9e:15:c0:
                    dc:dd:db:aa:21:80:c4:93:a6:0c:f9:c8:7c:75:6b:
                    99:fa:76:63:9d:3d:05:df:b6:d7:2f:4a:71:9c:11:
                    c5:00:89:44:6e:0c:cc:07:3a:7a:b6:45:8a:6c:60:
                    95:ad:63:35:62:9b:c4:49:2d:38:b1:b1:31:35:12:
                    64:dd:dd:8d:ee:e9:58:f8:87:09:b1:1b:4f:c8:17:
                    25:14:a6:40:99:18:32:3b:15:5c:70:38:f7:04:29:
                    b7:84:92:42:7f:07:86:79:68:7d:c9:38:53:97:ae:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:FB:1C:C7:86:9E:F5:5E:D5:30:97:47:F6:5C:51:8C:93:C2:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.172.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:b2:0a:02:99:8c:2a:b8:e2:d4:c5:78:15:23:5a:e4:34:
         e0:2b:3d:22:17:ce:06:29:43:02:27:2b:82:5a:eb:0a:de:01:
         84:e6:01:5f:13:6a:ee:71:a3:8a:b6:d8:31:a2:da:1d:29:62:
         68:b0:be:20:10:58:67:0e:bc:96:11:cc:0e:06:7e:25:b7:6a:
         e6:7d:d9:f6:1b:24:cd:0e:c0:05:3e:a9:a4:d4:a3:19:5c:18:
         c1:5f:66:39:40:84:32:2e:89:0d:d1:a4:c3:28:56:45:9d:3c:
         1b:01:78:b2:59:1d:a7:7c:8d:14:ca:8a:59:53:7e:00:c1:ce:
         4d:6f:cd:79:68:a0:df:91:63:4d:05:c5:a7:71:29:ed:63:a2:
         ca:1f:1a:2f:c3:bd:39:cb:4c:5a:6e:39:1a:2b:d8:52:92:82:
         31:af:0d:03:b3:d4:32:6d:b0:97:9f:2f:f2:06:c7:e0:90:ef:
         a8:37:b5:e0:34:c0:93:21:49:3c:7d:c6:e2:d5:15:b9:b2:ce:
         c9:94:c0:c3:1e:bb:04:3f:c2:a3:67:9d:22:27:dc:16:10:0d:
         0c:69:31:de:8d:61:47:dc:1c:c3:61:cc:df:18:84:e5:aa:0c:
         ec:7f:d7:8e:52:33:01:6b:c0:32:bd:08:10:52:3e:44:7d:70:
         a2:5e:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:57 2026 by rpki-client