Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa
File:                     c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa (raw, json)
Hash identifier:          c1p9vc/1UevedB5emmwOQ7605C7dAkNp9Gdz5/c7lgI=
Subject key identifier:   22:13:34:11:66:99:4A:9B:A8:BC:46:DA:3A:2E:E5:D1:C8:21:E2:2D
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EABB6EC9F1E038BC6AA487140
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     16740
IP address blocks:        207.207.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:ec:9f:1e:03:8b:c6:aa:48:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=9a102d2a-82d1-4815-b69b-4567491036ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:53:06:f9:ff:e1:c0:0b:3b:c4:48:da:8d:
                    fa:6d:ec:1c:14:5e:43:35:39:81:27:80:93:a7:b8:
                    84:a2:29:ff:bc:46:63:eb:d9:26:9d:df:bc:1d:60:
                    57:0a:6f:77:c4:1f:65:54:9f:a7:0e:5f:4f:4f:6e:
                    fd:56:52:43:4c:cd:e6:08:c5:07:87:78:07:49:4b:
                    1b:5e:fc:14:d7:60:70:97:0c:1b:f6:ad:07:40:80:
                    70:f1:d0:92:ab:b5:2f:4a:e7:de:ba:f4:23:21:05:
                    9d:7e:2c:0b:fd:fd:f3:fd:d6:1c:63:d2:be:09:dc:
                    9f:82:38:39:bc:09:d3:8e:0b:60:9f:00:e1:38:e6:
                    d9:3c:31:ed:a7:4a:ad:d1:ab:23:92:5e:ba:f3:de:
                    89:b6:9b:4c:71:c6:a9:63:ae:66:1d:81:32:47:75:
                    e7:6e:04:2f:fc:2e:58:3a:11:34:1d:f8:a9:b6:88:
                    ee:1e:6d:b8:22:dd:49:bf:6d:f0:52:83:20:6d:f4:
                    40:3b:51:6c:62:6e:15:d5:b1:aa:be:15:97:c0:ec:
                    cc:de:75:e5:9c:9e:fc:4c:a8:aa:d0:8d:5a:61:87:
                    b2:73:ec:2b:5f:4c:44:41:33:48:5d:f3:71:e4:3f:
                    50:49:a9:64:18:4f:33:6f:bf:76:81:bc:59:fe:5f:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:13:34:11:66:99:4A:9B:A8:BC:46:DA:3A:2E:E5:D1:C8:21:E2:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:59:5e:bd:21:cc:65:28:58:e1:2c:7f:29:32:29:45:8c:
         c0:6a:c1:73:04:a4:32:a1:38:32:f1:5d:30:72:91:22:ae:16:
         6c:eb:7a:b7:c9:ee:e1:7a:23:ce:10:45:ad:d2:7b:1a:82:cd:
         2d:8e:d0:20:c1:db:89:f0:30:78:99:b1:7f:0d:a8:17:01:a1:
         b1:c9:0b:75:6c:45:63:5a:4a:3b:2e:18:d9:01:04:24:61:5b:
         22:3e:39:77:03:1f:cd:2b:57:a1:bf:0a:54:32:31:de:27:56:
         06:de:0c:c8:92:0c:51:7e:b1:5e:6f:e1:72:12:b6:c3:7d:5b:
         50:be:6a:a6:3f:48:f6:66:2e:da:b2:17:66:04:cd:fd:9f:ab:
         c2:01:8d:5b:74:07:45:56:9e:c9:63:cb:40:e5:5a:11:ae:c0:
         af:fd:be:8a:3a:b9:40:fe:15:e6:ec:ab:ba:93:38:62:79:3b:
         b4:a7:a5:8e:db:13:47:52:c3:c7:1d:6d:fa:46:a5:cf:e7:0b:
         25:28:b9:13:e0:35:18:67:89:ae:b2:0d:4e:d6:94:46:a7:66:
         43:5f:3e:b2:ee:5f:f0:69:79:d9:2a:aa:3d:97:07:9f:c6:5d:
         2f:15:f2:93:49:75:e2:b1:c1:6b:96:ee:80:0e:f8:2c:65:23:
         81:36:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:59 2026 by rpki-client