Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa
File:                     cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa (raw, json)
Hash identifier:          9mYWo8Ozy4fXM/hNPDv7N2sjY125AzPW6R37Pv0xwOQ=
Subject key identifier:   C0:87:F1:1F:90:E2:BE:EF:FF:47:96:D1:20:91:5C:02:A9:13:82:4D
Certificate issuer:       /CN=9eccbc7e-a4e8-4673-ba6f-4c67350003be
Certificate serial:       010D0C9F4328584F02422D99478C0E7E5C305292
Authority key identifier: 0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     26824
IP address blocks:        208.79.182.0/23 maxlen: 23
                          2602:fc8c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2d:99:47:8c:0e:7e:5c:30:52:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eccbc7e-a4e8-4673-ba6f-4c67350003be
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=ee0ef145-d095-4572-be1e-439cf55e67e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:e3:73:86:2e:de:cd:52:2b:be:3b:9c:da:
                    79:22:61:5b:26:2b:21:00:9c:1e:66:81:93:e3:b1:
                    72:69:00:46:86:80:7b:d6:60:db:7a:73:55:a2:52:
                    00:5e:91:ec:5b:ce:9d:6f:bc:99:21:0c:35:3a:4e:
                    99:b3:34:c5:fc:50:64:3d:84:71:95:f9:a3:e9:f3:
                    dc:02:15:8f:f7:1d:41:c7:16:9d:08:a1:2b:64:d9:
                    9b:58:14:be:6d:d3:16:76:5a:30:8b:4f:41:4b:bd:
                    d0:17:2e:fc:44:e8:7f:38:d2:04:ae:cc:50:95:2a:
                    0c:07:b3:ac:1c:ca:b6:74:5c:de:1f:43:a7:38:73:
                    8f:65:fb:c6:eb:ec:04:bd:77:d5:ab:58:9b:5c:1e:
                    47:14:0d:24:64:6e:9b:ae:34:15:74:a8:0e:7b:f7:
                    09:47:ff:bb:17:75:90:2c:ba:5a:4d:1b:22:22:cb:
                    ed:ce:35:a4:2d:05:b9:87:5a:e8:25:65:b0:ac:4f:
                    15:b4:ae:54:11:ee:06:fd:73:f1:36:65:ad:f8:15:
                    0d:40:ad:da:7b:c4:49:ea:3e:58:7a:08:ad:ee:78:
                    3d:47:4d:7e:08:68:17:fa:c1:43:20:20:dd:9c:ae:
                    9f:16:10:a9:af:24:f6:ad:b6:04:6a:cb:77:ce:9d:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:F1:1F:90:E2:BE:EF:FF:47:96:D1:20:91:5C:02:A9:13:82:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.crl

            X509v3 Authority Key Identifier:
                keyid:0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.182.0/23
                IPv6:
                  2602:fc8c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:74:cd:1c:59:b3:df:2d:b3:87:e7:a2:db:a3:c6:f8:89:6e:
         27:a6:79:83:f2:46:7c:dd:40:03:8f:d7:e3:a3:04:e9:79:9e:
         1a:60:53:09:24:99:38:8c:ff:79:9a:7f:f7:e0:f3:67:f9:99:
         9b:28:d8:cb:c0:28:65:50:30:ed:91:b1:3c:93:0e:15:26:4d:
         b3:bf:9c:a9:ce:86:91:57:3f:80:e9:c8:90:6b:80:38:c4:c3:
         f4:91:78:bc:78:84:c6:ed:08:37:91:4d:9f:66:cd:bc:df:56:
         de:6b:4b:c5:5b:de:d1:6b:91:b7:56:00:cb:d7:1c:fe:cb:e9:
         07:f2:b4:c4:19:03:35:ae:50:50:31:76:f5:ac:16:95:f4:e0:
         5e:86:6a:bc:61:6c:f4:8c:33:35:f5:65:ec:96:85:2f:24:3b:
         e8:9e:f4:d8:92:3f:95:bd:d2:af:50:d3:c0:23:64:2b:ab:ad:
         2e:77:d1:20:c0:12:b2:aa:9b:6a:b9:d3:a5:5f:b7:f2:e9:ba:
         e9:9f:e7:63:30:34:9d:0e:7e:49:48:a5:9a:2a:ae:a5:78:fe:
         f7:cd:b7:ad:06:7c:89:e6:1a:5e:48:7f:5d:25:f1:a4:7c:e1:
         b1:34:5b:82:7c:9a:32:ae:56:aa:5c:0d:bf:80:bc:84:96:01:
         8b:6e:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:36:00 2026 by rpki-client