Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa
File:                     3edda63d-a054-36de-9fc9-3501960d7503.roa (raw, json)
Hash identifier:          mJ4z7/ZP5k7QNJU3G/a0Pva1nqmxpBOhB71UffA7bnU=
Subject key identifier:   67:94:AD:67:D7:78:DE:C1:E8:F5:17:CD:18:FE:9C:A1:B7:31:D9:67
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584E15E437A548883AAE90E3C8C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22652
IP address blocks:        207.96.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:37:a5:48:88:3a:ae:90:e3:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=c66b9386-ddbf-4ed4-a793-263fd5af152a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:bc:68:08:12:d4:8c:a6:73:ce:a1:a8:cd:
                    fd:08:a3:b3:3a:42:0e:b3:14:ba:c0:fb:8f:96:e5:
                    96:69:c7:e2:2b:af:12:79:dd:bc:5f:e6:10:a4:62:
                    90:20:f1:9e:f9:c1:e1:47:83:b6:a1:c0:5b:ac:a3:
                    7f:31:e4:fa:06:e3:24:8e:1c:9f:38:c3:3e:aa:eb:
                    bc:6c:f2:96:32:d3:12:d7:00:da:e0:a7:37:0f:81:
                    25:99:c9:cc:97:ac:e0:53:f0:5a:a8:78:fc:53:40:
                    ec:08:c6:c8:ce:21:7d:6f:ae:5a:18:14:b1:c2:39:
                    ac:18:9b:78:76:44:fe:f2:bd:0d:81:2d:86:ec:e8:
                    66:a8:a7:e4:f1:9e:11:fa:ce:04:82:88:a5:a6:f5:
                    af:85:e7:79:2d:2c:64:12:e1:27:45:44:78:95:62:
                    34:71:6e:3b:a7:a2:e0:0f:7c:48:96:61:80:4a:a2:
                    6a:65:5b:36:29:72:93:1b:ba:b4:6e:2e:50:cd:d1:
                    82:ac:e6:b0:df:5c:ca:f4:2c:e2:43:3b:0e:14:23:
                    f8:15:c9:97:89:da:6f:4e:d6:4c:c1:89:7b:7f:af:
                    a0:59:b7:d2:37:3c:c7:18:62:b2:ef:0b:cc:82:5a:
                    a4:4a:d3:a2:66:5f:df:f6:bf:04:a7:be:c4:b0:aa:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:94:AD:67:D7:78:DE:C1:E8:F5:17:CD:18:FE:9C:A1:B7:31:D9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3edda63d-a054-36de-9fc9-3501960d7503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:d9:a3:ca:ef:7b:9e:ab:88:e5:98:36:44:8d:06:b8:f7:
         7e:5a:58:6c:20:4b:3b:b0:d9:a4:17:73:f0:d1:95:cc:ab:42:
         8a:33:db:18:b6:4d:13:17:fc:28:76:77:aa:b3:3d:8e:34:fc:
         85:a6:5e:4b:8e:7d:8f:dd:ab:e2:82:8f:4a:9c:28:ef:03:0a:
         13:94:e0:84:e3:ff:18:a8:74:d1:b4:8d:30:75:d2:e0:d6:aa:
         70:45:68:46:36:08:b9:ec:01:4f:bc:02:5e:99:fb:ea:5c:82:
         ab:e6:f3:a5:fc:ba:7f:c1:66:b6:9e:50:f6:23:69:a7:b9:33:
         c8:21:96:6b:c3:14:4f:72:fe:0b:dc:92:a6:d9:49:64:fc:f7:
         47:20:e7:c9:39:01:42:0b:1d:aa:4d:1a:9a:fd:cc:99:bc:f9:
         1e:12:bc:52:30:b5:0f:6a:c0:bf:ab:4e:d5:f1:4f:fd:94:6b:
         fb:ad:58:44:45:ad:c7:ba:5b:38:dd:b2:ba:ea:5a:d7:2c:50:
         63:75:26:1b:12:87:21:86:ab:b3:e9:9e:8b:8f:60:66:28:ab:
         3a:97:79:9a:28:0f:e6:ac:06:a9:be:ea:22:2b:e3:60:76:c2:
         52:33:4f:26:38:9d:3e:e4:1c:b6:98:02:44:d9:fb:c7:ed:72:
         8b:2f:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:32 2026 by rpki-client