Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa
File:                     8b836509-70a5-3781-a36d-d60531590d29.roa (raw, json)
Hash identifier:          YNTSPd7vcoH3WD9dCaZsMq6eOb/PajLtXKhDmtyunEw=
Subject key identifier:   99:9E:E6:F8:17:BF:77:DA:A8:DA:E9:89:C8:45:AE:4F:52:50:DF:AE
Certificate issuer:       /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Certificate serial:       010D0C9F4328584DF4DB5F55B42DF52BD1C3E240
Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     394968
IP address blocks:        204.128.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5f:55:b4:2d:f5:2b:d1:c3:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=8b28f79f-597f-4827-9a71-b072bf68d61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:b0:b9:73:e9:e1:bc:63:1f:da:0f:ac:1c:
                    1f:ec:18:1d:03:23:cd:15:90:aa:cf:03:78:13:9f:
                    35:20:12:c4:f0:2f:6a:20:b1:f1:5f:71:eb:1e:1c:
                    c9:7c:99:ca:55:c2:f1:2d:79:4a:e4:3a:ba:71:07:
                    8b:74:02:15:f1:44:32:ff:d8:c0:4e:32:67:f6:ff:
                    1f:dc:c2:bc:84:7d:01:70:d2:b4:e6:a4:22:f4:87:
                    d1:78:92:74:94:af:f8:8f:9d:b6:79:e2:40:56:c0:
                    39:53:19:8e:ba:d5:f5:5c:db:40:04:ff:b3:03:48:
                    50:25:c5:fd:d8:15:4b:7d:e9:24:b2:b9:60:63:fb:
                    41:45:cd:47:c0:65:31:27:56:98:96:4c:cb:f2:fb:
                    f3:52:61:68:51:3c:96:19:00:52:02:27:f3:84:a3:
                    5c:95:75:b6:52:b9:76:b3:4c:89:48:21:e7:fa:4c:
                    b0:8b:ee:2b:09:d5:b5:6b:68:42:31:11:65:30:c1:
                    dd:06:a4:48:59:b4:3e:a7:ff:dd:46:e5:ca:31:fb:
                    2a:de:05:6f:51:9a:d8:93:1a:db:c9:7b:de:52:79:
                    fc:8c:21:e5:56:69:6a:0a:e6:7b:34:a5:57:d8:3d:
                    f6:79:88:36:aa:ed:54:43:03:a1:1a:7c:37:d0:4b:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9E:E6:F8:17:BF:77:DA:A8:DA:E9:89:C8:45:AE:4F:52:50:DF:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl

            X509v3 Authority Key Identifier:
                keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:68:00:22:9b:1d:16:5c:0b:66:1c:bc:ec:86:fb:b1:da:57:
         13:9f:65:70:32:f3:8c:ce:27:bc:73:6c:eb:c8:66:fa:52:79:
         7a:ba:63:de:b8:8d:39:f5:19:a2:99:c1:e2:ab:d2:3c:4c:43:
         b2:1e:b9:e2:5b:19:13:53:87:af:c7:4b:9c:64:82:b5:3e:ce:
         b3:d4:19:d3:71:19:5c:26:11:00:bb:45:5e:7c:f1:c5:53:ac:
         2f:34:56:5e:8f:92:94:98:75:63:ce:e1:2b:f3:f2:a5:33:75:
         48:cb:b0:60:e1:8a:9d:28:2e:65:18:ac:b9:2d:6f:28:ac:e1:
         6d:4a:c7:cd:ef:ab:a7:51:b4:31:26:8b:a1:19:77:d7:22:02:
         b0:81:60:69:d8:dd:f1:ea:e2:c6:1c:43:9d:b2:59:7e:80:2a:
         45:8b:c3:4a:88:8c:8d:4d:25:2c:aa:3d:ee:e9:fe:c5:e4:25:
         9d:64:43:49:f0:32:92:89:85:13:ae:cc:e0:7e:85:f8:0d:3f:
         6a:b3:e9:a2:bb:15:ca:e0:4f:3e:7b:71:3b:c0:53:65:dc:54:
         71:a9:4b:be:64:01:8b:f7:cf:af:88:c5:27:20:e8:d4:52:79:
         5b:c2:72:c4:6c:b2:c0:af:9f:0a:c3:10:17:f3:a0:c6:f0:d6:
         ce:98:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:03:41 2026 by rpki-client