Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
File:                     d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa (raw, json)
Hash identifier:          cvQ2JLPZdStYd+7tz19FfPCgZdQbBPtxu/MDyfjlFHw=
Subject key identifier:   70:AC:6D:25:24:EA:4F:92:C9:E4:B8:F6:74:43:C3:F2:3F:18:D7:8E
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584F119D170147958BC3BA1BDC80
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        206.180.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:17:01:47:95:8b:c3:ba:1b:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=22754065-508b-4486-8750-a9f903657fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:e8:93:81:e8:59:d2:ea:02:43:57:f9:e9:
                    08:4c:07:31:ca:c7:6c:a6:59:f3:bf:b7:33:4a:40:
                    47:3b:df:4c:39:45:9d:12:b0:b6:c1:70:ef:2a:6b:
                    ac:14:08:32:4b:a6:bb:8a:e9:78:c5:e8:2d:41:fc:
                    f3:18:78:a6:27:d3:c7:02:df:46:4d:62:df:bb:19:
                    dd:49:23:98:68:6e:96:8d:a1:cc:50:c9:44:5e:b8:
                    d9:dd:ea:07:ca:b5:d8:0f:f0:bf:ae:45:d5:83:d5:
                    62:4f:29:41:eb:bb:8f:5c:f1:41:52:33:e8:a7:35:
                    9c:aa:48:2a:de:80:af:74:ec:f8:19:c0:02:c1:a8:
                    50:f4:21:de:d0:8d:e8:a0:45:ef:d8:cc:35:0d:37:
                    61:6b:fb:70:f9:f5:f7:ee:a9:10:e0:8a:cd:56:20:
                    3e:90:22:7f:fa:c5:4d:aa:66:65:6e:b1:5f:f5:8b:
                    80:65:70:48:e6:82:b9:3d:21:bf:09:21:73:82:44:
                    45:b2:b7:4a:95:d1:ec:3c:7d:23:79:7b:df:a9:2e:
                    b5:62:62:c9:63:2a:f1:ca:3f:7d:a8:6e:63:08:fa:
                    f2:54:55:ec:08:20:83:fc:11:38:ce:c4:f7:79:a1:
                    ab:06:7a:fe:10:33:48:96:8c:3b:89:29:26:ed:b9:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AC:6D:25:24:EA:4F:92:C9:E4:B8:F6:74:43:C3:F2:3F:18:D7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8f:a3:c3:e3:f7:51:c8:88:a0:23:cd:51:a0:b9:ce:18:7a:
         dc:e8:d1:27:22:8c:80:9f:fb:0f:b8:b6:23:85:34:31:52:4f:
         c5:4c:60:23:82:84:f6:44:d7:25:02:85:e0:b0:17:4d:b1:29:
         6b:a8:52:b2:2a:be:15:74:2c:1a:cd:b7:89:47:28:4b:43:b2:
         a0:b8:41:79:5c:97:cf:63:9f:71:0e:ff:d7:ea:36:ff:0f:09:
         14:dc:c3:01:45:b1:7f:0e:11:6d:6d:e3:39:e1:8e:9d:f4:0e:
         8a:33:ae:d8:ae:cb:80:f1:27:40:39:a5:64:c5:0f:57:ed:af:
         3f:9e:d8:49:34:c7:dc:f7:92:2a:3d:b7:06:f3:32:f7:00:71:
         23:03:9e:ce:ec:23:37:17:69:a6:36:cd:39:e5:9a:98:94:1d:
         6c:6d:8b:df:c4:92:c2:9e:e7:a6:26:35:f5:8c:d6:78:5e:50:
         57:e4:4b:50:7f:66:5a:9e:77:93:c1:d6:92:29:a9:ce:fe:f1:
         e7:bd:85:53:5f:81:7f:60:7d:9f:88:d9:a5:c5:da:f2:3e:bb:
         39:82:1f:85:1b:2a:73:45:b8:82:69:30:74:94:71:68:f3:e0:
         9e:87:3b:aa:22:89:89:46:9c:5a:1d:b4:3d:46:dd:0a:8f:e4:
         06:5d:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:45 2026 by rpki-client