Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/392d864a-aa09-3953-8914-25c1d74e8e4f.roa
File:                     392d864a-aa09-3953-8914-25c1d74e8e4f.roa (raw, json)
Hash identifier:          Rx7a6q3gBH2C4yHu92nrdl9GtmYRXsINZFq7WsztRrM=
Subject key identifier:   AC:77:59:C7:0D:F9:AE:D3:92:D5:CF:EE:2D:F4:4A:B9:FB:FA:7A:58
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F4974C38625E51D51F38A4D40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/392d864a-aa09-3953-8914-25c1d74e8e4f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     152179
IP address blocks:        206.163.8.0/24 maxlen: 24
                          206.163.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:c3:86:25:e5:1d:51:f3:8a:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b7016a4e-86eb-4114-b4e9-1fcaf7dde067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:57:1f:6c:f5:e4:bd:13:33:72:d9:40:ed:
                    77:0e:02:d8:51:94:3f:93:db:4e:12:ca:b9:34:29:
                    ca:85:9a:7c:09:e8:78:fc:51:23:b9:53:e3:f8:85:
                    58:74:43:17:9b:11:b1:9c:d4:d4:d6:09:bc:31:f0:
                    10:52:39:1d:53:29:12:e2:27:eb:53:3e:ca:5d:ce:
                    95:2b:6e:75:81:88:c4:d3:aa:9b:bb:16:e8:29:b0:
                    16:36:07:8c:14:cb:0d:b4:ba:39:58:13:51:ef:4f:
                    dc:7c:f4:a3:72:04:f2:95:4d:c8:6d:c6:fe:0a:d9:
                    2a:4e:51:1e:5a:c0:dd:28:72:ef:0b:b6:4d:30:1e:
                    13:5b:47:84:63:0b:b7:76:25:f2:20:81:0d:6c:ec:
                    e1:68:0e:cc:b0:87:8c:fa:ff:a9:15:ed:ec:34:e3:
                    8a:08:74:ae:5c:8a:57:13:b7:c6:c2:b5:b0:9a:30:
                    2f:c3:dc:03:d5:dd:51:12:e0:7b:2e:88:c7:ab:b3:
                    c0:71:7a:d4:a0:42:30:fb:55:d2:c7:f1:75:d7:00:
                    26:86:72:f6:a2:63:6f:02:4b:ea:cc:a9:05:32:45:
                    e2:90:a3:1e:e1:0f:a0:3d:21:ec:1c:5c:90:6d:d4:
                    d6:b1:d0:87:64:34:84:d7:60:60:b0:68:30:6c:35:
                    74:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:77:59:C7:0D:F9:AE:D3:92:D5:CF:EE:2D:F4:4A:B9:FB:FA:7A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/392d864a-aa09-3953-8914-25c1d74e8e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.163.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:fd:ce:f9:af:1a:0d:e0:5e:18:87:6b:50:fc:d0:11:cb:
         62:6a:e0:83:6b:a7:ad:bc:58:6e:e9:19:81:ec:55:92:54:05:
         be:26:52:68:93:57:bf:08:88:10:a7:f5:b5:9c:c2:28:d1:e7:
         30:d8:9f:cd:2d:6e:97:a4:1f:18:d3:ff:77:99:0b:e2:a1:0d:
         b6:c7:f9:b9:68:ae:dd:f2:50:b6:d0:c4:93:4f:9e:92:a9:02:
         2e:e1:23:59:05:19:34:11:46:b9:58:db:31:30:0a:94:56:2b:
         37:8e:c4:62:f8:42:1d:90:88:19:95:3e:05:02:18:c4:f5:45:
         37:38:ff:03:78:1a:53:d0:39:71:1c:4a:39:d5:a4:57:85:a1:
         c7:f9:ad:2c:1c:76:6d:c3:bf:0b:32:bf:77:02:d0:df:d5:01:
         74:fe:95:a9:d9:c9:75:87:07:10:66:d4:12:82:eb:33:ae:22:
         ca:1e:2d:a1:e7:04:b4:b1:ba:55:dd:ba:03:94:f5:d6:5e:f2:
         16:41:7b:ce:0e:98:90:ed:a5:dc:80:c1:81:d3:dc:b4:1b:bd:
         11:2f:7c:10:13:5e:22:42:c4:44:67:c5:20:59:47:7c:70:71:
         b1:73:d1:63:d5:e7:91:29:56:ba:35:bc:b5:b7:03:a4:b1:f6:
         53:e5:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:48:37 2026 by rpki-client