Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa
File:                     c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa (raw, json)
Hash identifier:          xDZWg+Tyw0kjWu3rPJq3f3YHWR2gYYKNwxp2hXRIHBI=
Subject key identifier:   64:A6:1C:98:F6:6E:9A:22:9F:FC:D7:1C:98:1F:C2:8B:EB:15:FA:AD
Certificate issuer:       /CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
Certificate serial:       010D0C9F4328584F1897C2AA7DD4B39E1E048380
Authority key identifier: 2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     17274
IP address blocks:        207.229.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:c2:aa:7d:d4:b3:9e:1e:04:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=0ac98450-7cd7-43bd-aad4-b1dedc105e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:c4:70:72:c4:da:47:c2:c8:cc:61:df:ad:
                    42:9e:c6:65:5b:38:e7:7d:29:99:ef:9c:f6:55:25:
                    43:82:df:dd:d6:b5:f3:a6:8f:51:59:f1:d2:30:33:
                    f4:56:06:d2:2b:f5:0d:83:8e:f5:f8:28:ff:ef:e4:
                    92:5a:1b:85:ec:9b:8b:01:6d:38:46:76:94:e5:08:
                    de:84:45:2d:1e:a5:5d:86:5f:ee:04:9c:18:7e:76:
                    92:84:5f:ee:95:b5:97:bb:e8:72:06:58:1a:df:eb:
                    d6:0c:15:b6:79:09:9a:32:38:aa:fd:87:4b:b8:a0:
                    d0:8a:d6:b0:5e:30:23:da:20:e7:c8:83:04:40:c5:
                    1c:67:f3:1b:11:37:2a:48:fa:d0:0e:aa:74:de:d3:
                    a3:53:0e:6b:b7:c2:ff:56:fb:43:52:a0:69:df:45:
                    b3:fd:06:b8:8a:ee:2f:f8:1d:63:04:9a:70:7f:aa:
                    73:10:25:39:ad:61:af:d9:f7:01:fe:38:6f:0f:e6:
                    2c:0e:33:28:f4:72:10:a6:5f:f8:7d:e8:47:47:86:
                    0d:43:d1:36:33:39:81:3e:f7:89:92:ec:2a:15:d1:
                    21:6f:0b:d9:1c:9b:c6:53:4c:c4:9e:1d:3f:82:5d:
                    b7:bc:ee:55:ce:01:cf:e0:46:ae:4f:16:e8:48:31:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:1C:98:F6:6E:9A:22:9F:FC:D7:1C:98:1F:C2:8B:EB:15:FA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:10:8d:c0:a6:ed:75:38:9d:93:2f:b0:f1:5b:eb:b7:99:ab:
         a2:d8:97:97:52:bd:97:b6:3c:e0:c7:2f:e0:58:26:ff:b4:2e:
         a6:d2:7d:b3:76:dd:b0:ee:e9:d2:c1:cb:b7:f5:1a:84:e0:60:
         06:62:b5:7b:51:4d:46:73:e8:04:7c:18:45:10:bf:a3:7a:64:
         16:c2:be:ea:7c:2a:7e:47:c2:49:76:70:3c:64:c9:01:3e:dc:
         09:af:e4:2b:50:9c:29:73:2f:ff:3d:2d:b1:a0:94:bb:5f:e8:
         18:d1:6b:e9:e1:32:b2:f1:b4:4f:00:04:2f:93:0f:cc:58:49:
         3a:de:6e:89:05:f7:ca:e8:e6:c2:87:ff:00:49:e8:35:69:67:
         5d:4f:5b:fa:47:bd:bb:35:76:77:64:d0:0a:3c:32:5e:35:67:
         63:cf:03:88:38:8f:15:0e:cc:5a:4c:5c:49:1e:02:31:21:24:
         3d:55:85:2f:35:91:3e:58:26:6b:9f:89:be:81:2c:e6:e6:a7:
         85:78:4a:36:09:e5:7b:be:31:db:8b:d2:6e:1e:5b:96:c7:12:
         60:6d:58:03:7d:a9:ae:2a:7a:33:9c:80:e8:c3:90:d1:d1:cb:
         74:e2:f0:d9:5c:a4:10:fa:d5:96:d1:c2:ae:03:20:cb:99:fa:
         9e:33:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:04 2026 by rpki-client