Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa
File:                     591c3c16-29be-383d-a211-f4243526102e.roa (raw, json)
Hash identifier:          tyh0YnQ38LrbA0arS1RHU2RnEvEl7THpgdv1D0IyyZ0=
Subject key identifier:   6C:92:73:1B:E8:36:A7:88:9D:85:74:E1:66:7E:81:F0:5E:ED:40:A1
Certificate issuer:       /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial:       010D0C9F4328584EC7A1C7303B3D718C746CBAF0
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        208.80.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c7:30:3b:3d:71:8c:74:6c:ba:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=42d89db4-ee0b-42a8-a28d-34e5c7841e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:7c:ad:b1:36:04:9f:90:31:62:9d:3b:47:
                    25:0c:80:a5:3a:03:7c:0b:d8:1c:91:40:62:b0:c3:
                    11:6c:14:46:87:4e:0d:ea:48:c1:e5:4d:0c:32:26:
                    c4:6b:f5:c4:21:dc:d8:a5:a4:65:3f:9c:7c:26:20:
                    d1:d9:0d:69:3c:0e:d6:7a:11:f1:30:b6:a1:8e:82:
                    44:04:30:61:7f:96:65:04:a0:0e:b4:de:3e:f9:45:
                    80:a8:aa:2e:04:f7:bc:10:1d:d0:f1:f9:98:47:ca:
                    0b:22:cc:35:98:05:17:f6:55:12:a9:e5:e5:f4:11:
                    50:01:52:e0:00:a0:3c:f8:e4:48:b5:22:d3:8c:61:
                    37:ee:72:a9:d3:b0:1b:6c:47:c6:96:4f:1e:bd:06:
                    d3:1a:52:9b:7d:d9:46:bb:6e:2c:e4:39:bd:09:ab:
                    2e:ba:33:cd:e5:ee:4d:b4:30:19:be:c7:57:a4:f7:
                    3e:3f:c1:34:3e:22:c4:cb:fb:1e:0d:24:50:5f:60:
                    75:00:d6:e4:e5:fc:04:e9:b1:88:69:36:6b:93:f7:
                    27:f2:1e:b7:6b:e6:9d:3c:9e:11:51:ec:ef:31:b4:
                    9e:41:87:70:78:d0:41:63:b7:75:de:a0:8e:1c:ba:
                    25:a4:61:5c:57:39:a8:cb:89:3a:58:d9:25:f4:7d:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:73:1B:E8:36:A7:88:9D:85:74:E1:66:7E:81:F0:5E:ED:40:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl

            X509v3 Authority Key Identifier:
                keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:2c:a3:8a:73:c2:de:4d:3c:95:95:1b:02:35:13:e0:94:
         35:d0:a7:a1:a2:69:ee:72:e7:04:6c:3d:89:95:25:a3:8c:d9:
         b7:2a:e6:7c:92:8c:31:61:15:92:b0:b6:5b:db:25:36:c6:00:
         dc:6f:0e:ce:44:3a:d7:78:c8:3b:fb:69:84:df:0e:12:65:30:
         9f:73:da:40:75:cf:81:33:cf:de:55:49:13:ec:a5:ca:62:6a:
         22:0d:b6:bb:ec:3c:1a:79:a2:c7:e8:50:14:5c:54:0c:76:9e:
         4e:c5:09:75:61:0c:32:1e:f9:b4:aa:ce:49:1c:2a:b8:ef:3a:
         b9:ad:c5:f3:c4:d0:29:ff:ab:42:ff:76:a3:38:0d:50:5b:97:
         79:61:89:86:58:cf:b4:38:21:e5:45:07:29:94:41:31:5a:40:
         b4:dd:2d:02:93:12:22:27:f5:45:23:38:6c:32:aa:da:0b:16:
         08:42:2a:4a:18:82:3c:ce:c7:6a:fc:a1:98:22:d5:3d:c7:e0:
         a4:43:1d:c7:73:85:42:67:96:a1:05:08:45:64:9d:8b:08:4b:
         81:d2:25:82:0a:58:9d:1e:fb:ca:50:33:1d:8d:64:63:25:08:
         04:04:02:6f:8b:a6:d2:0d:ac:38:ef:cc:d2:cc:21:76:30:46:
         27:9e:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:50 2026 by rpki-client