Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa
File:                     bf475d03-436a-3341-a882-e4bd4a170795.roa (raw, json)
Hash identifier:          eP//5lP1NMTcCwMVGEqdtzHXt08Vxrfh9ouIhT55MbI=
Subject key identifier:   F2:35:48:B2:8B:74:91:1F:5E:45:61:A2:17:8E:D9:79:22:8F:9D:5B
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584EA7983562C67FF73C21AFEFA0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53437
IP address blocks:        206.167.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:35:62:c6:7f:f7:3c:21:af:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=688e1d98-132a-4c6e-b596-995b9afdc6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:76:38:0a:52:75:93:d6:59:c2:68:81:98:
                    ee:63:5e:8d:ad:26:43:6f:49:86:ee:45:d5:f8:59:
                    12:7d:24:ac:e3:72:21:d4:24:b8:01:c2:dd:e5:7d:
                    a3:06:b4:04:5f:49:9d:99:38:e8:b7:74:53:e2:24:
                    a4:4e:85:95:2b:9c:20:79:45:e2:28:2a:ae:d8:b1:
                    f9:89:90:dd:24:5a:5d:75:e8:b7:53:62:18:9a:0a:
                    72:d4:a6:a4:72:f3:ae:5f:5f:50:46:9b:50:08:38:
                    48:c3:b7:1f:7a:d3:6e:48:79:e4:09:6b:4f:54:c7:
                    eb:fc:8d:61:08:f4:e3:f0:58:ee:50:5f:22:50:d9:
                    bd:de:b1:08:3b:ef:48:10:f1:2e:53:b3:99:80:92:
                    32:72:92:f0:24:ae:82:c3:2c:13:4d:6f:bd:ee:6f:
                    80:dd:7f:99:2e:6a:3e:c3:f1:a8:65:67:c9:64:31:
                    e6:d5:a7:02:1a:15:c9:f9:f4:ce:43:fb:86:84:16:
                    1c:fc:c9:1e:a9:35:20:5f:98:05:4e:d5:81:78:eb:
                    ce:94:16:37:15:18:47:ab:dc:c1:71:39:bf:b3:5c:
                    d5:01:ff:03:10:79:5e:7e:39:b9:da:33:75:b2:b7:
                    c2:23:b9:71:3b:42:75:98:00:c4:de:18:e7:97:18:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:48:B2:8B:74:91:1F:5E:45:61:A2:17:8E:D9:79:22:8F:9D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ca:32:4c:98:3e:9b:d7:36:7f:db:ef:d0:18:85:6c:b3:d7:
         35:4f:db:02:c3:0b:0c:fb:1e:94:d5:5c:7d:d3:dc:73:87:fb:
         b1:50:00:2d:e2:70:4f:00:26:53:43:2a:76:fb:e8:fb:4a:8c:
         0e:47:6b:36:e5:44:37:fd:ff:af:20:66:97:0e:f8:4e:b8:40:
         13:fc:8e:ac:99:53:9e:d8:4c:1f:15:e3:62:52:41:a1:e3:91:
         62:53:89:ac:50:ca:c0:6a:c4:5c:14:b1:99:62:12:4a:9f:71:
         db:88:6f:52:1e:b3:97:66:f5:3a:bc:20:f8:74:3f:5f:5a:cd:
         40:9a:9f:1a:30:22:89:93:94:33:4d:f4:d4:44:41:1a:a3:69:
         7d:81:8f:bb:89:28:13:7e:4f:d8:b6:e0:86:c8:77:b7:bf:27:
         cf:6b:45:4f:c4:3f:30:91:8e:57:ce:51:88:d1:f6:79:30:9c:
         b0:6b:95:ce:91:28:7b:6f:ee:f2:cf:79:ac:4e:de:a7:3d:34:
         54:32:f8:e7:30:6c:e7:8e:47:78:6d:2d:c2:4a:b6:99:a1:fc:
         d7:2e:dd:33:73:22:2a:5f:cc:bc:f9:20:04:0b:a7:bd:e0:fc:
         b0:8d:b7:42:e2:e9:2e:a9:4f:b0:23:cb:d2:b2:a6:c2:2d:53:
         95:f8:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:32 2026 by rpki-client