Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa
File:                     c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa (raw, json)
Hash identifier:          QV45KOt1+vvO9dFEOE4xhtKiMmADpgYamk54nmV5Tzk=
Subject key identifier:   D6:5A:6E:CE:80:2B:BF:00:AA:D3:CF:96:08:FE:E4:87:4F:6B:CA:3E
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584E09CB35698DCC8939FA39DDC0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     16740
IP address blocks:        207.207.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:35:69:8d:cc:89:39:fa:39:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=46b15e87-fb83-49bd-a2ae-69e3ea64ff63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:f3:96:2c:bb:43:04:71:09:f9:1d:d6:11:
                    79:13:01:36:2d:1a:34:2b:79:8e:d8:7c:15:10:d7:
                    82:a3:7c:95:72:b6:83:78:45:66:52:0d:4b:5c:43:
                    ac:da:54:33:2f:7e:fe:ad:ce:5a:57:ac:15:64:36:
                    f4:e1:39:c2:62:50:c9:fd:9a:fc:78:d1:82:af:3e:
                    8b:74:49:aa:16:9e:a5:d8:e9:58:01:aa:23:0d:60:
                    e9:27:df:b9:97:59:5c:03:ed:a8:41:df:4e:bd:ae:
                    6f:c2:00:e0:b1:cd:7e:22:32:cc:e5:45:fd:bd:d4:
                    ce:ec:e2:e7:dd:3d:75:71:39:b3:82:c0:33:7d:db:
                    db:cb:04:f3:64:01:6c:04:f4:28:dc:41:bc:ac:a9:
                    dd:e3:b9:b4:5a:51:d6:e7:1b:b4:eb:dc:64:e3:91:
                    7d:52:3e:f9:a0:7f:23:11:30:ef:55:f9:14:07:9a:
                    54:6a:69:3d:76:30:f7:78:e1:58:54:e7:61:71:6b:
                    dd:f6:81:19:db:82:6b:48:57:af:f4:70:10:58:bc:
                    66:1e:95:f0:fc:31:35:89:51:92:e4:e2:79:fe:5d:
                    a2:fb:93:23:c8:51:80:57:32:71:40:a9:22:70:1b:
                    3a:ba:4e:ec:55:da:3e:c5:bb:6d:25:f6:3e:52:d4:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:6E:CE:80:2B:BF:00:AA:D3:CF:96:08:FE:E4:87:4F:6B:CA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/c0def7c1-6cc1-387a-90e8-c2835bc18a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:a0:fb:3d:af:c9:50:02:41:bd:fd:8f:e2:69:62:fd:58:4d:
         31:ce:dc:50:1d:65:0b:d7:0d:31:9f:46:a2:5c:42:3d:e2:49:
         97:83:c2:05:66:04:aa:a5:bb:75:2e:28:8e:47:c2:dc:40:58:
         74:11:ca:88:d4:31:c1:d6:72:3e:e8:af:9c:a0:82:16:81:8b:
         37:60:b7:44:e2:15:1e:7c:0c:26:05:e8:8f:a5:65:33:2e:1f:
         19:98:c5:b4:23:d1:18:96:c2:a3:3a:e9:16:5c:72:51:bb:d6:
         5f:9d:e0:86:5f:c5:95:ee:54:42:91:2e:55:81:9a:b3:9d:7d:
         d7:16:55:32:cc:16:fd:99:e8:de:f6:58:18:4e:81:03:31:53:
         ed:70:c5:65:8b:18:8a:f5:c4:ca:23:32:05:31:16:31:c4:8a:
         ed:94:98:90:ea:64:c3:45:7f:89:2f:31:34:c6:72:70:f8:30:
         90:b5:ab:b3:36:c9:28:40:2d:c0:2c:f8:ff:b8:31:8e:63:c5:
         2c:03:02:93:6b:92:39:0d:79:c3:f2:5d:6d:e6:2e:1f:46:c7:
         66:23:0a:6f:cc:dc:24:35:4d:07:dd:70:38:73:c7:9f:df:9f:
         1c:be:75:08:02:bd:8c:ee:dc:8c:11:22:ac:ca:46:70:bc:c0:
         75:90:5f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:28:24 2026 by rpki-client