Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8fe763-cb1f-3fc6-bf57-00adda136c92.roa
File:                     aa8fe763-cb1f-3fc6-bf57-00adda136c92.roa (raw, json)
Hash identifier:          juI1E5l+esod3Ou8w2aaHGYURSGwN0xKj8W2RKs+BqY=
Subject key identifier:   B0:ED:D5:91:E9:7C:8B:2F:83:18:10:6A:69:70:A4:90:CB:88:EB:AA
Certificate issuer:       /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial:       010D0C9F4328584EC7A1E672392D63CC975AE380
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8fe763-cb1f-3fc6-bf57-00adda136c92.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     19871
IP address blocks:        209.17.112.0/22 maxlen: 24
                          209.17.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e6:72:39:2d:63:cc:97:5a:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=c188c1d3-d564-4b28-b86a-81a0204ccf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:e5:33:75:37:3f:c2:13:4b:4b:05:4c:8c:
                    c4:1e:c0:05:47:92:3d:0c:e0:d1:a6:67:90:19:63:
                    63:f6:e3:3c:76:d4:3b:68:11:de:4a:29:7f:2c:17:
                    13:2d:d8:29:83:fe:01:87:96:35:53:15:e9:4b:20:
                    49:f7:28:cb:7a:b3:96:9f:2a:fb:82:65:aa:83:7f:
                    0b:dc:7c:f7:9f:3e:ba:7c:6e:99:f5:d6:d9:b9:24:
                    28:c0:ff:d2:ff:b5:bc:7e:ba:48:50:63:b9:b9:3e:
                    54:30:ca:5c:93:5d:57:2e:f3:4a:fb:44:df:9f:da:
                    7f:fa:3b:2c:a2:a0:af:7e:8b:20:ce:d6:2b:83:4d:
                    72:e5:f7:c2:59:1f:8c:fa:19:3e:14:70:01:74:0d:
                    9e:14:08:1b:7e:32:1b:ae:35:1c:aa:7f:e0:88:92:
                    78:d6:3a:e7:2e:4b:03:31:d8:14:94:ec:be:39:e2:
                    d7:27:d1:b7:c0:73:31:d6:42:e8:2e:72:c8:ed:7f:
                    8f:91:f8:dc:3d:dc:31:20:9e:dd:33:a2:8e:03:c2:
                    5f:5f:f9:70:0b:17:d6:a4:3f:ef:40:ff:e0:e7:ce:
                    b5:0b:e9:bf:dc:7c:88:26:24:62:25:0d:0e:8b:d4:
                    e4:9f:c8:bc:3c:24:a7:52:11:96:dd:d7:de:28:34:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:D5:91:E9:7C:8B:2F:83:18:10:6A:69:70:A4:90:CB:88:EB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8fe763-cb1f-3fc6-bf57-00adda136c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl

            X509v3 Authority Key Identifier:
                keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.112.0-209.17.117.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:4a:9c:b7:9e:ac:5a:95:69:5f:70:65:98:95:f7:e3:7b:
         dd:09:e0:51:21:88:dd:24:74:ef:ed:6a:7e:ce:c7:f9:0c:8a:
         8b:36:bf:9f:53:30:2b:65:ac:fc:d0:e2:e9:29:01:31:d4:5f:
         28:01:7b:63:36:c2:3d:5d:c8:75:bd:ee:ce:42:4a:9e:6e:22:
         5c:26:7d:64:96:11:22:77:65:c2:6e:84:b2:5d:29:5e:9b:5d:
         4b:7c:2e:ed:ee:bf:cc:61:3f:cb:c5:0d:a1:43:a4:3b:21:4e:
         21:e4:8b:33:24:cf:ef:af:12:2e:aa:49:aa:0f:40:8f:93:37:
         5f:0e:0f:0e:c1:a8:e0:e5:a9:39:0c:bd:59:6e:2a:12:f2:61:
         8e:bd:cb:a9:af:ea:e1:18:aa:79:3f:f2:ac:d5:90:d6:b6:e5:
         1a:a8:8f:75:26:7a:95:6d:28:a4:5e:2b:1f:d8:de:6b:ae:61:
         4b:28:8e:62:7c:b3:4b:5c:5f:db:de:dd:a3:a0:19:38:c6:a7:
         d2:54:13:d0:04:6a:63:4f:b4:ec:5c:d7:45:91:62:bc:39:93:
         64:4a:0e:c3:9d:6e:66:b8:59:ac:22:17:e8:6a:7b:89:d5:89:
         23:74:42:0b:92:f8:44:b6:b1:18:59:29:4f:5e:41:e5:a0:71:
         da:b7:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:52:43 2026 by rpki-client