Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/31e5d2f4-7f67-3d06-8455-9039ef65a131.roa
File:                     31e5d2f4-7f67-3d06-8455-9039ef65a131.roa (raw, json)
Hash identifier:          q9IthS96HjXToA2ZRyCeO0glQbRp4MtjuSJuQf6aDIk=
Subject key identifier:   D7:CD:80:F2:A3:59:B9:21:06:6C:48:0F:86:49:E1:91:4A:A9:15:B6
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584EE38C9FC4E13519FF0B1BE6E0
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/31e5d2f4-7f67-3d06-8455-9039ef65a131.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     30690
IP address blocks:        205.173.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9f:c4:e1:35:19:ff:0b:1b:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=6fe1ccb6-1726-4f04-8d8f-65b198c791bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:2a:5d:27:63:f5:78:23:60:07:81:17:7c:
                    95:45:24:5e:ee:0b:c4:ad:45:0a:cd:5e:db:2b:21:
                    de:0e:b7:59:7e:7d:21:32:e2:10:06:9b:67:e6:80:
                    b7:e0:dd:7c:e8:f0:a3:50:b4:8d:cf:a3:f2:cf:f6:
                    14:3f:5d:c7:83:cb:53:eb:c4:0b:8e:b7:c1:94:2b:
                    e2:17:73:ff:e7:1e:a7:ff:58:9f:57:d0:4e:c2:11:
                    d7:33:8d:4b:cc:84:69:5b:f2:12:05:36:94:11:bf:
                    a1:50:f0:97:91:48:b4:b9:9e:97:bf:ae:e8:a4:56:
                    3b:80:0c:c1:49:66:ce:62:fd:1d:4e:b8:f5:35:76:
                    78:5d:46:bb:52:a5:b8:a2:9f:4b:28:15:fc:a6:29:
                    5d:cb:08:ec:1d:aa:ed:6f:e2:b6:90:cc:e4:b7:f6:
                    2e:72:e4:c7:6e:ca:ec:0d:29:a7:e2:90:c5:bd:4f:
                    77:02:72:31:b7:62:7d:3e:51:f9:d7:fd:3a:d0:5a:
                    ee:89:cb:59:c5:23:fd:f8:47:37:e6:8f:3f:06:e4:
                    1d:88:ed:51:ba:32:0f:7f:33:21:6d:5d:b0:f7:8b:
                    5a:22:a3:d8:cf:82:17:59:74:77:18:55:ab:5b:7d:
                    99:a1:3e:fd:da:2b:6c:5c:34:db:6b:a6:e8:00:11:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CD:80:F2:A3:59:B9:21:06:6C:48:0F:86:49:E1:91:4A:A9:15:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/31e5d2f4-7f67-3d06-8455-9039ef65a131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.173.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ec:a9:f2:03:8e:63:d6:08:ab:41:ad:aa:c7:36:65:2a:fb:
         78:0c:71:06:eb:a6:77:99:4b:ff:4a:d3:4e:23:87:6a:35:32:
         de:0d:e7:61:df:44:49:cd:78:1e:ff:45:8b:04:3b:fa:a2:69:
         08:fa:da:b4:fd:bb:98:56:09:2d:d4:8d:d9:01:ce:b4:31:b0:
         7c:4a:3a:69:5a:22:d8:31:6a:c1:bd:39:07:50:6c:e7:22:2f:
         5c:f9:75:45:15:44:14:74:a2:2c:13:f9:50:cb:2b:ed:41:5e:
         da:d2:d2:77:08:d9:14:68:9a:32:23:64:1f:be:6f:5b:4b:36:
         bd:36:d1:65:7d:3f:40:d1:e0:af:f3:b6:90:72:77:92:b2:8d:
         03:23:0a:0f:53:3d:63:65:18:c8:8e:63:f3:c0:c6:32:ea:18:
         43:80:c3:b4:9e:83:4a:1b:67:84:04:b3:f2:ba:cb:96:80:b0:
         e9:a0:0f:6a:aa:77:cd:07:66:60:d6:1c:f9:72:9a:f0:78:67:
         02:61:48:65:99:cb:13:93:4d:cf:54:99:96:05:ba:14:ad:fb:
         62:11:96:9d:1f:3d:32:c9:cc:c9:47:66:bb:8e:87:14:60:38:
         e9:67:65:66:2d:c1:38:2e:0e:42:f4:c7:02:0a:f1:08:18:2c:
         23:4e:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:28:01 2026 by rpki-client