Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa
File:                     a44749b3-2884-3b75-b78d-0868496658de.roa (raw, json)
Hash identifier:          n15ElMZr4wRpmYWn4a7qbuifnoxqa5sYShAxDBgZMr8=
Subject key identifier:   12:32:CA:12:AA:5A:04:3B:4C:FE:54:B1:08:91:16:C4:19:FA:BF:59
Certificate issuer:       /CN=b036528c-d877-46d3-a948-64c8f3b600cc
Certificate serial:       010D0C9F4328584ED001EE7A9300280B100DC700
Authority key identifier: 51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     23038
IP address blocks:        208.71.200.0/21 maxlen: 21
                          208.71.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ee:7a:93:00:28:0b:10:0d:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b036528c-d877-46d3-a948-64c8f3b600cc
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=cfd6e0fe-72ac-4cdb-96b0-4f98f0747395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:50:eb:95:3f:a5:d1:7e:21:3b:f8:5d:55:
                    f9:8c:a7:4f:d5:41:55:87:1f:81:c5:e6:9e:26:d9:
                    40:fa:5b:3b:e1:a6:d1:fc:28:20:0d:b5:cf:c6:bb:
                    e8:a8:03:42:60:1c:07:49:d9:8c:fb:54:53:f8:e5:
                    98:94:0c:db:f6:52:00:6c:1d:cb:7b:6d:2d:23:ea:
                    ac:03:c3:f4:21:43:48:a0:9b:2f:cf:0b:5c:6b:a1:
                    f9:8a:34:04:91:b1:68:0b:ea:ff:f9:9e:b7:85:fe:
                    b7:c5:bf:5e:9e:ec:35:bb:d8:f9:72:32:8d:0a:1f:
                    ac:be:3f:3e:42:de:7f:02:1c:ed:fc:ce:ac:fc:46:
                    82:dc:4d:fe:33:60:cc:e2:4f:95:25:c5:82:75:1c:
                    8c:78:97:42:21:e6:88:09:22:19:cd:d3:ca:46:c7:
                    a3:6c:80:37:f4:a5:72:d7:cc:03:e0:9b:15:33:84:
                    ef:fd:cd:e4:e8:2c:bf:30:9b:09:52:27:71:90:a7:
                    e4:79:8c:c0:3c:c4:d5:44:b6:b2:c2:36:b9:29:4f:
                    ec:0e:fc:f0:7a:e2:2c:f4:e4:f5:5c:26:8b:28:8b:
                    61:33:71:2b:9c:42:b9:dd:65:bb:96:99:88:9a:d9:
                    eb:7b:d2:1f:01:7b:e0:a8:a6:5b:0f:ce:47:1d:4e:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:32:CA:12:AA:5A:04:3B:4C:FE:54:B1:08:91:16:C4:19:FA:BF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.crl

            X509v3 Authority Key Identifier:
                keyid:51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:2d:e0:d1:17:60:cc:6f:4d:9a:46:1b:0f:07:af:82:b9:
         45:13:a4:fc:e2:37:c6:86:78:08:a4:c2:0e:1b:26:ff:2d:99:
         91:6b:1f:a3:2b:dc:4b:4e:61:59:81:71:ef:b4:58:58:04:14:
         b4:81:e2:e6:be:de:49:d2:b4:5a:96:2f:6f:72:69:a3:2c:33:
         0b:da:00:ca:7c:c6:0f:cd:3e:04:06:e7:bc:11:07:7b:20:e5:
         46:d7:85:72:5e:e5:16:91:df:1d:0d:50:2c:3a:7d:66:ca:96:
         00:1f:28:f4:18:40:91:77:33:21:99:2c:f1:8c:8a:af:0c:6f:
         5a:ee:18:57:90:de:2e:8e:08:b8:1e:91:d1:a2:16:b7:66:0d:
         b4:39:82:10:b3:97:2f:ac:98:16:30:4e:5a:5f:b5:e4:43:13:
         64:97:c0:d6:98:eb:66:73:1a:22:f2:cf:07:6f:cc:cb:84:19:
         e9:ec:b7:ee:e8:3c:91:bf:2d:f1:7a:fb:ae:7c:b8:7e:e9:47:
         3e:10:a8:98:a9:eb:a8:fb:16:16:eb:cb:ae:8b:33:fa:ab:e7:
         0e:34:ca:c2:d9:5b:0e:4e:62:e4:cb:33:75:40:04:7e:58:79:
         4a:5b:7b:80:80:e1:57:25:1f:ee:03:bc:c9:23:79:d2:57:90:
         7a:78:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:09:45 2026 by rpki-client