Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa
File:                     3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa (raw, json)
Hash identifier:          FV3W3SVMvyjqMZPNTGp0ZysLGYh4c2b32JcgTxwfEwI=
Subject key identifier:   F9:23:CD:E7:44:15:70:B0:A1:02:94:82:10:7F:78:C1:1C:4B:A1:9F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAE6EB21377A098F90200
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     62044
IP address blocks:        209.55.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ae:6e:b2:13:77:a0:98:f9:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=7e4d18b4-753e-4b1b-8801-ed224afabadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:3b:fc:96:17:81:52:09:04:83:bc:b4:27:
                    24:d9:d5:13:db:84:ec:bb:36:a9:46:ba:79:36:c3:
                    cb:5b:8f:a9:50:c1:8a:bf:06:de:00:28:e8:98:c2:
                    00:e0:bb:9e:9f:3d:12:29:c5:9c:60:b0:aa:3f:8b:
                    84:f0:d9:85:93:c4:f5:37:9b:62:a5:63:9f:31:5f:
                    db:69:24:73:ce:2b:fc:46:54:f8:82:5e:5f:4a:cf:
                    c1:a1:37:80:0b:c6:88:a3:ba:28:07:15:cf:0a:9f:
                    ce:4a:d6:aa:a5:c4:2b:9b:77:92:9d:81:16:e7:e9:
                    41:ab:6e:c4:b2:91:4f:a8:c9:14:4d:0b:a0:92:8e:
                    c0:9b:5b:ec:90:bb:81:b7:55:4a:3c:2e:fd:c2:cd:
                    d6:e4:02:a4:c8:79:54:ab:00:95:ba:05:0e:09:27:
                    bf:a9:2f:a6:32:e4:f8:ad:1a:e0:e5:46:87:f7:09:
                    04:a1:20:2d:1e:84:ab:2a:97:c3:ae:3f:e1:8b:67:
                    96:2c:d6:e6:e2:0e:a2:9b:f1:8d:cb:29:04:06:63:
                    ee:4d:39:a9:b7:bf:d4:fb:db:e9:f3:a1:5d:be:38:
                    93:a0:dd:e0:34:13:b5:c0:dd:e6:70:2e:3c:f6:3f:
                    01:36:33:c6:9b:50:6a:4c:51:b0:6c:11:63:36:de:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:CD:E7:44:15:70:B0:A1:02:94:82:10:7F:78:C1:1C:4B:A1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:09:83:58:16:11:c2:3f:cf:bb:93:e4:4d:60:ac:08:b3:87:
         f8:fc:f2:70:94:e4:b3:4c:e0:af:96:e1:8e:75:a0:3f:7b:a4:
         22:e1:de:9c:36:95:13:17:0b:57:c0:7d:b1:8d:a1:42:77:ff:
         ed:e3:b1:66:86:d9:06:52:5a:c3:da:ee:50:21:2b:04:1c:c8:
         d4:ac:02:b8:06:16:82:6e:1e:69:e8:99:a7:76:28:6c:f9:c7:
         a5:15:46:a4:ea:1f:c7:f6:b8:28:62:53:e4:fe:85:17:36:33:
         90:bd:1b:84:77:5b:e4:bc:2c:6c:29:1a:7f:da:5b:74:a0:e1:
         81:79:39:89:54:77:ef:9e:c4:16:06:77:b8:91:b2:09:99:f4:
         51:e3:c8:48:4a:fd:ed:a3:10:81:72:c0:1b:bc:be:23:2d:25:
         8c:71:ca:2a:f3:2a:8b:25:1b:14:f6:12:de:72:87:48:7a:69:
         9b:6c:91:48:87:51:3f:ec:73:c2:1c:a1:10:c8:42:2b:f0:17:
         c2:68:07:f1:13:06:7c:8d:2c:41:28:38:1c:32:65:ee:d3:2c:
         8e:4f:0b:6a:e9:41:35:c1:7b:b0:a2:df:9b:c3:3f:7a:9f:09:
         d1:42:38:8b:ad:bc:9b:60:89:b7:45:a9:ce:ee:e0:d5:b9:27:
         67:bf:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:27 2026 by rpki-client