Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/9db941a2-2e75-3417-8db1-220c6d4a928e.roa
File:                     9db941a2-2e75-3417-8db1-220c6d4a928e.roa (raw, json)
Hash identifier:          RJC3bcxpboUCoqZ8MK/n6xgFUlTiN7OL/ytCwvZouCM=
Subject key identifier:   01:F6:02:C5:2A:9C:D6:1E:A7:35:F3:5A:E6:BA:E7:3B:51:29:3E:9A
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584F30527AD854F2B0B5343CF7A0
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/9db941a2-2e75-3417-8db1-220c6d4a928e.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     3855
IP address blocks:        206.188.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7a:d8:54:f2:b0:b5:34:3c:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=fd7d56c7-54bd-40fe-936f-6da27a3edb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:22:75:e0:c3:ef:06:8b:2e:5f:fb:02:2c:
                    55:5d:b6:60:30:cb:a5:bb:b1:c1:bf:32:5f:46:87:
                    87:57:9e:96:24:4a:46:82:02:30:45:ea:b5:4e:a0:
                    8e:c7:88:c4:b9:44:21:d4:03:15:a8:0c:f0:96:16:
                    5f:1a:0a:28:b8:bf:97:e2:34:8f:04:00:f5:9c:5a:
                    84:47:47:87:e7:9d:92:56:b6:96:7f:28:b2:5e:b0:
                    94:83:86:e7:23:5e:d1:dd:25:92:0f:45:21:66:8f:
                    cc:82:46:93:f4:ab:0c:45:91:b5:f8:f4:57:82:3e:
                    5e:3f:8c:b5:e6:86:06:da:87:f4:4a:28:4e:7c:87:
                    62:42:56:1d:16:18:a9:40:84:06:65:86:7e:fc:ea:
                    f7:6b:ca:85:7a:11:06:84:5a:ff:92:af:34:10:7a:
                    01:2d:69:25:f5:6b:53:95:39:31:97:b3:3f:5c:06:
                    a4:9d:43:84:2a:cf:eb:66:41:88:a8:78:60:b2:f2:
                    6e:78:42:1e:c1:73:96:32:03:58:fa:11:d2:95:9a:
                    da:c4:24:45:2d:78:9f:67:34:c3:4c:3b:b5:a0:62:
                    ab:01:90:4d:3b:24:36:bf:36:40:84:f8:3a:06:a9:
                    cb:66:f3:bd:81:2c:60:f7:15:b5:5f:9f:16:25:78:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:02:C5:2A:9C:D6:1E:A7:35:F3:5A:E6:BA:E7:3B:51:29:3E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/9db941a2-2e75-3417-8db1-220c6d4a928e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:4f:83:f1:bb:3f:07:77:55:71:46:89:4c:1b:bc:60:74:
         c0:d3:4e:a7:e0:43:fc:2e:65:0a:85:a3:eb:9f:6c:2c:44:f4:
         fe:e9:e5:75:13:ba:8d:8f:94:ab:6c:e1:cb:cd:59:33:18:f3:
         a6:34:47:9e:da:d5:5f:c9:7d:c5:24:fd:8f:12:38:7d:04:b5:
         a6:8b:7c:54:35:95:db:cd:2d:35:dc:1e:a8:7f:d7:be:66:71:
         0a:34:37:40:ea:4a:10:b0:92:dc:91:66:9e:ca:d6:b7:28:27:
         f5:1b:37:68:2d:50:9a:13:e8:4e:59:52:21:58:53:ed:06:22:
         d3:7c:fc:b4:8b:95:56:57:fa:33:23:27:5a:21:33:cf:d6:d0:
         e5:8d:22:d1:51:5d:9b:35:e8:b6:3a:9f:5b:79:09:3a:08:67:
         33:bc:d7:56:86:70:3a:bb:71:15:e0:82:07:10:2b:c2:22:07:
         0e:56:db:61:5c:b7:ae:f6:15:b7:e2:99:db:ba:39:7b:e0:54:
         e5:bd:77:23:5e:fa:47:a6:b4:c4:72:0f:cb:6c:46:b9:60:5e:
         25:2d:af:d2:ee:db:89:c3:d6:03:08:75:ba:4e:76:d4:b1:4d:
         d2:b2:d8:0f:99:c3:5b:2e:ae:54:cb:98:97:c8:ac:3b:4b:66:
         b2:42:c0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:15:34 2026 by rpki-client