Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8239e1ab-f515-3fab-b871-c65bda327182.roa
File:                     8239e1ab-f515-3fab-b871-c65bda327182.roa (raw, json)
Hash identifier:          D6NVPgxJjG9T05uw+NvqzZyF8H039/ssipEA1Gw9+OI=
Subject key identifier:   6B:AD:A4:EF:A6:11:D0:72:33:E0:1F:0A:3C:B4:2C:41:BF:A5:45:24
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F067299AB886D138F26691100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8239e1ab-f515-3fab-b871-c65bda327182.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     19842
IP address blocks:        207.61.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:99:ab:88:6d:13:8f:26:69:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=66f10292-9ffa-48cc-9576-ad2e193e6792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:42:ba:68:dc:2b:ed:d0:ba:35:95:23:53:
                    e5:3e:29:98:09:fa:73:e0:dc:49:54:22:98:07:37:
                    7e:62:bc:a7:84:81:cc:78:38:c0:55:f2:92:10:1c:
                    c3:14:eb:7c:29:52:59:d0:91:68:b2:f4:bc:20:0a:
                    e5:83:a4:d0:99:b0:85:5b:f2:2e:c5:4b:0f:ef:54:
                    af:79:0b:66:25:f9:69:5e:a2:9f:d8:f7:22:5b:12:
                    50:43:85:4b:8c:52:a2:80:ee:97:53:a5:6f:21:89:
                    77:57:cf:2a:7b:8b:72:50:57:69:3a:62:69:8e:7f:
                    ab:20:ca:3b:1d:10:39:c6:50:8b:6e:5c:cd:7c:4a:
                    c3:21:af:e9:16:ee:24:73:32:e4:68:e6:92:ad:1b:
                    6e:61:d0:92:57:70:bc:24:5b:af:36:c1:31:02:67:
                    56:93:c6:9f:f9:6d:d4:a5:03:6e:45:af:39:9e:3e:
                    6a:2b:fa:5f:02:77:0c:04:6b:f9:ff:27:22:6f:a1:
                    f0:a7:11:3e:91:24:10:e2:25:01:1b:8d:36:01:c3:
                    12:10:3f:8e:f5:06:da:f2:06:06:64:0d:60:91:71:
                    2a:d5:b7:7c:2c:a0:d2:d5:b1:c2:c5:84:6b:27:ef:
                    22:9b:9a:3f:48:eb:0d:b8:0f:8c:cb:fa:06:6a:3c:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AD:A4:EF:A6:11:D0:72:33:E0:1F:0A:3C:B4:2C:41:BF:A5:45:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8239e1ab-f515-3fab-b871-c65bda327182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:de:6a:4f:6b:3a:9a:6a:4b:a9:85:22:28:e8:97:d1:2e:ce:
         b6:3a:87:09:be:14:3b:69:4f:dc:d2:36:de:0f:57:96:8e:12:
         1c:5e:22:c8:c3:82:81:c3:f1:4d:57:f3:5d:d1:66:14:cf:df:
         3e:a9:97:76:82:b3:f8:1e:25:09:a7:61:36:fa:97:60:ba:80:
         53:11:9a:f1:60:3a:d3:bf:ae:9e:b0:8e:56:bd:87:5c:1b:f9:
         74:db:a4:e0:d1:91:63:6e:ea:f7:b0:46:73:41:b0:e4:99:0a:
         ad:df:5d:fd:39:7f:3e:80:3b:36:64:13:93:02:60:9b:c4:e0:
         45:f8:0c:28:ef:31:2a:e0:88:c3:1a:46:28:4d:0e:d6:ca:55:
         0a:61:a5:85:9a:51:54:71:df:75:ee:8b:51:4c:75:e4:45:9b:
         ae:24:3f:12:17:81:86:0f:19:93:a2:7d:d2:66:2b:57:c1:22:
         d6:c9:dc:3e:19:84:81:9c:38:eb:80:9b:cb:14:91:9f:59:08:
         b2:54:b1:8f:26:0b:a6:b6:9f:f8:dc:0c:0b:bf:09:0d:4e:09:
         03:bb:cc:fa:96:f1:a2:6d:7a:c4:89:f5:c1:a5:a4:b1:ce:ec:
         dc:73:7c:c3:e4:51:42:fa:3e:15:be:d7:ce:a7:ef:92:99:96:
         69:56:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:45:04 2026 by rpki-client