Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa
File:                     48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa (raw, json)
Hash identifier:          R/u+GgZcl4RLyyP9XzPezLPP/s0Ir9q4WNnklwYqZFA=
Subject key identifier:   07:40:61:92:79:40:C2:14:F0:74:9E:95:09:44:97:43:49:A2:4A:FA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672357FF7E656A0F4895980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        207.231.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:35:7f:f7:e6:56:a0:f4:89:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=bbd1abfa-70e3-4dd6-95b2-4a6768dcab61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:ed:74:8b:bc:3c:5d:e5:1c:6d:06:b5:d1:
                    d2:d9:41:95:30:71:fd:68:f1:26:b3:8b:d8:c5:d7:
                    d8:ec:93:a0:cc:11:4e:08:88:f1:81:ae:e9:f2:a6:
                    95:47:4e:bd:b6:a7:09:1f:c3:5b:ec:3a:6a:38:d5:
                    bf:04:6e:ef:ea:39:aa:b7:0d:6d:11:2f:2a:73:09:
                    60:40:a1:67:16:72:55:35:06:7d:9f:95:a2:cc:ea:
                    15:31:1a:21:42:bf:f0:7e:28:da:84:3d:cb:72:74:
                    bf:d1:7a:3a:1d:75:a5:b3:1a:e2:0c:e8:20:c7:78:
                    63:58:03:9f:6a:fa:ae:4d:e9:c5:33:7b:44:36:21:
                    65:a9:95:b8:67:04:10:6e:e3:90:43:98:cd:a6:cd:
                    1b:e2:12:d7:7d:62:b7:2d:2d:e9:31:72:f5:70:a0:
                    cb:25:37:a9:29:43:b0:55:7e:65:15:43:92:f8:1e:
                    f1:91:a1:0a:ca:70:c5:4c:ef:cf:28:26:fd:14:e9:
                    5e:b8:de:4a:fd:89:14:7c:3f:00:b0:1a:65:24:03:
                    97:b2:62:de:92:09:80:f0:6f:c2:d0:c3:c2:62:1a:
                    ce:a8:24:ef:9d:17:e8:78:4c:12:c4:f9:ea:47:3f:
                    82:52:7b:c1:4c:dd:62:d0:e0:a4:e4:64:75:2e:c1:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:61:92:79:40:C2:14:F0:74:9E:95:09:44:97:43:49:A2:4A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6c:dc:42:37:97:d4:fa:6a:9e:d5:16:8f:a2:bf:d7:6d:8a:
         a3:26:d3:4a:21:ba:e0:e9:5c:17:0c:12:82:87:72:71:20:fc:
         57:87:70:58:e3:08:af:49:0d:ab:fd:32:a8:b8:33:fe:00:73:
         d7:9c:0a:23:20:ca:2c:2d:d7:5f:cc:97:d9:36:b2:f0:67:d0:
         5a:f7:88:12:ff:9d:c6:09:85:ce:93:2a:77:be:4e:bf:99:b2:
         a8:cb:70:c4:8e:2d:3d:38:d2:22:37:f1:d4:07:c0:56:85:4d:
         fd:d4:92:cf:b6:c3:e8:fb:4f:e7:55:35:56:4b:4a:bd:b0:9c:
         83:7b:97:60:6e:ca:12:bb:59:06:93:8b:3d:d4:00:3f:14:91:
         e0:cd:92:ff:56:f5:87:28:fd:0d:26:ce:f8:20:cc:0f:43:75:
         fd:37:20:ec:60:02:f1:68:3d:03:74:db:23:fd:78:07:e2:12:
         36:df:3b:62:30:b7:19:6e:77:de:47:9b:0b:93:d3:c9:51:5d:
         42:e1:68:a6:6b:f8:97:bd:9a:f5:42:21:bf:1a:c1:9d:12:76:
         d9:f5:40:25:97:20:48:06:5a:f2:35:f6:01:61:33:5d:38:a3:
         77:9d:44:30:55:a7:3a:c4:b8:84:3d:8c:86:57:26:88:6a:dc:
         6c:52:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:19:35 2026 by rpki-client