Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/7197d77c-df29-3591-bda2-4c2db684fe2b.roa
File:                     7197d77c-df29-3591-bda2-4c2db684fe2b.roa (raw, json)
Hash identifier:          6rw3EfRVm1wJb2Far2MxPP2Lh4UfcPPscXJk7PjrHZI=
Subject key identifier:   F2:FD:CE:08:EF:74:04:47:9A:2F:84:CE:9D:99:C3:51:B2:A4:BA:2C
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584F2671B25090343D2FCC3FA6C0
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/7197d77c-df29-3591-bda2-4c2db684fe2b.roa
Signing time:             Sat 12 Sep 2026 12:05:15 +0000
ROA not before:           Sat 12 Sep 2026 12:05:15 +0000
ROA not after:            Fri 11 Dec 2026 12:34:52 +0000
asID:                     11179
IP address blocks:        206.201.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:71:b2:50:90:34:3d:2f:cc:3f:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Sep 12 12:05:15 2026 GMT
            Not After : Dec 11 12:34:52 2026 GMT
        Subject: CN=ba815eb8-665b-45af-ad32-b5dd55dc9c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:40:20:fa:5d:8b:d8:9e:7a:b8:e8:5c:65:
                    13:92:2b:9b:8f:49:7d:72:f3:f8:7b:91:03:58:d3:
                    fc:96:cf:d2:ae:53:bc:a0:8a:af:fc:68:4a:da:32:
                    af:0c:ca:2f:95:06:00:d7:00:0f:8f:af:8f:b2:c1:
                    ab:28:0d:52:4d:d0:61:ef:8e:25:08:5b:ef:6c:6f:
                    09:98:e9:36:63:20:49:ba:8c:ef:fa:db:2c:40:25:
                    00:aa:e5:ce:5a:c2:4e:be:5a:1d:33:1c:f7:42:1b:
                    13:60:84:21:3a:c6:b0:39:53:f1:9c:7e:5c:e5:b0:
                    30:88:da:2a:d0:91:29:ae:84:10:ae:a4:0a:46:ad:
                    9a:b4:5c:d5:3e:82:ad:0a:6a:1c:02:21:f9:99:c5:
                    2b:d2:cb:22:b8:01:23:ea:11:2f:1d:41:e7:d3:19:
                    b4:64:7f:4c:f1:1b:11:14:6e:71:79:81:00:59:51:
                    f8:e5:ac:7d:8d:9f:3d:a2:ce:da:43:ae:ce:41:f8:
                    b3:e2:fc:30:09:eb:0d:d3:cf:b9:ed:a7:6c:12:21:
                    7c:37:2d:fc:67:7f:38:a8:57:61:2b:d8:0a:f5:37:
                    c1:f8:88:29:91:9d:fc:ab:0b:c4:16:b1:de:27:92:
                    c7:13:a2:75:2a:b0:bd:87:53:4c:94:41:da:76:e1:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FD:CE:08:EF:74:04:47:9A:2F:84:CE:9D:99:C3:51:B2:A4:BA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/7197d77c-df29-3591-bda2-4c2db684fe2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a7:09:77:56:8d:4e:c6:c8:b3:27:df:94:1c:68:65:54:35:
         4f:62:ca:10:3c:f1:cf:a9:a7:17:c6:d5:ba:03:e5:6c:cc:bc:
         c1:25:76:6e:a3:a4:09:2d:94:08:9b:e1:19:0c:80:8e:20:37:
         7a:e1:c7:53:81:c0:3d:b9:1a:35:e4:53:a4:ff:cc:64:67:41:
         2a:1b:39:f0:87:1f:9b:b2:4c:cd:cb:aa:db:f8:6a:dc:a2:2a:
         8c:30:57:82:e6:46:f1:23:dd:29:4d:79:1b:cf:db:b4:62:91:
         fc:5b:e8:01:26:de:1a:11:bc:cf:b7:e3:d7:f4:3d:0a:0d:45:
         31:f6:f8:2d:42:19:ea:6d:80:5a:ec:eb:80:0b:0c:45:5d:6b:
         fd:60:7b:08:6c:23:01:f1:e7:66:5d:28:2f:bb:b9:a3:53:1d:
         a3:96:5b:25:b0:b4:32:33:ab:2a:60:e5:a7:34:bb:b0:89:67:
         a0:09:a0:5a:6c:0c:01:76:d0:d7:8b:f8:89:4e:9b:75:6d:23:
         c0:51:83:fe:14:cc:b2:cd:3a:8d:92:4b:47:d2:48:81:a3:d5:
         35:d6:5e:a7:04:63:29:99:09:33:f3:b4:5f:71:c2:6f:0f:8a:
         32:8d:a8:24:c2:6a:43:50:63:c7:ef:c1:ca:1f:30:c5:73:e6:
         9d:1a:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:57 2026 by rpki-client