Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa
File:                     f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa (raw, json)
Hash identifier:          Qc+FvehScRaAeExjCOd1nZWBtondi3y/relg1i6svF0=
Subject key identifier:   93:C3:F4:8B:EF:D6:2E:D6:38:4A:0E:0E:70:89:07:65:3A:7E:5F:3A
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584DDD20717A22CF341C1E74ED80
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     398210
IP address blocks:        207.211.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:71:7a:22:cf:34:1c:1e:74:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=d17ac1b1-659d-4370-b637-bc97d7824de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:10:b4:d5:98:ba:bf:f6:90:93:86:91:c3:
                    96:4f:3c:c7:57:e6:4f:67:90:60:b3:72:48:f5:5d:
                    db:6c:0f:11:08:36:3e:0f:6d:bb:5e:1d:72:e7:23:
                    f2:1a:d6:54:0c:a1:be:e9:40:35:2f:f8:42:32:90:
                    b4:26:3e:03:29:86:94:ec:cf:67:eb:d7:81:bc:7f:
                    b4:41:3f:d1:a3:82:38:1e:71:3b:4d:9d:50:3c:0f:
                    68:52:c5:0e:45:cf:8c:d8:da:bd:c5:c7:8d:78:8b:
                    36:12:12:35:6f:fe:f7:44:95:ff:b3:af:34:52:ae:
                    cb:64:80:e4:63:1a:2d:34:b5:41:ab:d6:48:c9:fe:
                    ea:37:5a:55:8d:00:23:ad:f5:59:cc:09:a2:55:8d:
                    41:d6:91:59:48:7c:23:0f:04:ad:64:55:85:e3:2e:
                    8f:50:e3:4b:ad:9e:22:30:56:3c:df:9d:22:b5:fc:
                    86:3f:34:f7:dd:a8:32:8e:9f:57:9f:d9:26:39:9d:
                    66:a8:68:84:f0:32:5e:b4:bd:b1:32:72:a3:35:04:
                    88:a3:86:90:70:c4:78:e6:3d:cd:d1:14:c0:b7:8a:
                    67:69:d4:4e:90:22:9d:43:f8:55:6c:9d:6c:ef:2e:
                    47:ef:45:ac:c3:16:c1:a0:82:20:5a:ab:1b:74:50:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C3:F4:8B:EF:D6:2E:D6:38:4A:0E:0E:70:89:07:65:3A:7E:5F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:70:45:50:2d:46:0a:1f:23:0b:79:c8:80:0e:97:1f:61:
         a3:69:10:c7:25:9e:51:f4:8f:bb:fc:f1:44:7c:d2:ad:47:1b:
         ec:e3:a2:3a:4b:94:1d:53:ea:1c:f1:2f:f7:d2:40:84:5e:f2:
         10:3a:3f:87:44:01:b2:2e:52:21:fb:5b:e6:4c:a0:51:b1:11:
         85:03:de:a3:77:7c:5a:d1:f9:89:7a:ce:3e:21:59:49:11:ae:
         74:3f:37:44:40:05:31:5b:ea:64:3e:04:67:3c:26:51:67:b8:
         42:e2:b9:ab:8b:1b:07:0a:79:dc:74:10:0d:fc:c3:d3:1b:42:
         4e:1b:af:48:9c:9b:ba:23:36:da:7b:a1:c1:01:b3:1e:fe:c2:
         96:1f:3e:b0:19:a2:58:41:75:7a:58:3d:db:e9:44:0b:f5:7e:
         b4:25:67:40:09:44:98:a1:9a:36:61:ab:cf:96:b9:cf:91:6a:
         ef:7a:30:42:b3:22:65:c4:b3:1a:ee:0d:2b:e6:b2:57:cf:91:
         5a:4c:ae:76:76:2d:6a:36:ff:ca:4c:c1:c7:85:69:ed:7c:09:
         78:fa:1b:f2:6b:fd:5f:1d:1c:3a:b4:b9:5f:d4:21:ef:54:b3:
         66:74:d7:a6:90:57:4f:24:ea:38:39:35:34:fe:ff:06:b7:a1:
         b5:cf:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:02:26 2026 by rpki-client