Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa
File:                     237f5699-9f34-3f3e-8592-776da251ad95.roa (raw, json)
Hash identifier:          Rbx8PNrCTI7XC4YJ3099Kq1g8T8WZpwNd3mi3jTsWuk=
Subject key identifier:   2A:AE:3F:F8:29:38:22:78:AD:8A:44:5C:57:C1:59:FB:9A:9F:DF:71
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584ED001F56487E4AFC8D12D5480
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     54163
IP address blocks:        207.91.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f5:64:87:e4:af:c8:d1:2d:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=2b8df5df-21c7-4f1c-903a-b9adb65f32c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:ea:48:16:1c:50:4b:5f:8c:19:e8:dc:db:
                    da:28:ce:6a:87:df:ba:20:88:84:21:6d:13:43:75:
                    06:32:cc:59:93:f1:0b:12:2f:66:94:a4:c9:60:f3:
                    c1:f9:25:6c:4b:f7:87:82:94:d1:9a:34:c4:f9:28:
                    6b:a4:f4:28:c1:bd:b5:64:43:fc:6d:76:36:2d:f9:
                    50:b0:af:e7:bb:de:0f:7e:b0:d6:d9:af:4d:8e:90:
                    49:7c:e2:90:e3:97:97:51:90:28:36:e7:fe:98:5b:
                    8c:0e:21:3e:38:77:06:4d:30:4f:3d:41:68:00:fe:
                    7b:99:e5:c1:8e:8c:10:34:55:ab:47:c5:60:58:36:
                    a0:52:af:20:e5:04:3c:ea:63:1b:5c:44:76:ad:0e:
                    c4:45:16:f0:a0:a7:8e:66:8d:ca:66:f1:ff:29:93:
                    c4:ee:58:f2:7b:f1:7d:ec:8f:c9:dc:d8:4f:d0:c8:
                    2a:c0:8c:5c:e9:1c:69:a7:9c:7d:b2:d8:7e:96:da:
                    c7:54:ac:1b:94:76:2e:aa:9d:30:96:b1:5d:c5:ad:
                    28:f1:24:07:1b:c5:49:10:a7:31:00:f0:d0:b6:d6:
                    da:24:48:26:f8:eb:5a:43:6a:7e:28:3e:76:20:c9:
                    c2:e7:72:55:4e:26:e7:ac:f3:96:ae:cf:12:e9:43:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AE:3F:F8:29:38:22:78:AD:8A:44:5C:57:C1:59:FB:9A:9F:DF:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.91.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:8d:4d:3d:18:34:45:15:36:26:0c:48:b3:93:9c:2f:ce:
         ad:27:16:46:cb:da:12:4e:ba:f1:b1:ef:d2:ce:6a:33:cf:ca:
         28:e5:ee:5f:ee:06:e7:62:e5:29:49:b6:64:91:ff:da:ba:99:
         f3:54:56:50:91:bf:d3:dd:05:b2:58:87:11:41:a0:bb:e6:66:
         8c:97:02:2c:1b:b0:90:45:32:98:09:b8:4c:65:2c:e7:54:25:
         c3:d9:4a:2c:f0:4a:59:5e:35:16:e1:8f:33:fc:b0:3f:63:ad:
         47:1a:50:56:5c:a2:c0:fa:a0:82:ea:d9:37:d8:96:58:39:71:
         2a:19:1d:55:c1:0d:6a:39:f9:0e:a7:94:07:d2:43:c7:5b:ac:
         28:3b:4b:0e:58:51:89:e5:8b:b4:fb:0d:23:51:53:e2:70:9d:
         b4:42:0a:68:c9:f0:2b:50:84:3a:7e:73:4f:ba:9b:57:ff:43:
         27:5d:2f:79:68:fd:15:7e:0e:16:d5:ab:87:c0:dc:e3:f2:2b:
         84:f0:7b:13:30:8e:c9:db:ca:8a:01:74:24:8e:56:ab:68:77:
         3f:52:3e:38:01:4f:cf:fe:5b:36:29:00:e2:b8:7d:e8:92:34:
         a4:b6:ef:85:2a:9a:c7:22:a4:22:47:25:28:c9:79:f0:94:b7:
         a0:80:0e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 05:51:23 2026 by rpki-client