Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa
File:                     234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json)
Hash identifier:          B7fU9StFQfsssyHGkcyP1kI4GbaIHcIGN476RgqREdU=
Subject key identifier:   65:3B:21:F0:45:D5:B6:2A:5A:0D:6F:28:3D:5C:BA:8A:89:DD:C4:2C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA7972E648F934DA3C535A680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        209.52.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:2e:64:8f:93:4d:a3:c5:35:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=13c60e8d-1c8c-4614-8e6e-2b3678357e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:9a:c3:06:11:58:5d:48:87:98:6c:a5:94:
                    38:eb:fb:f6:86:23:5f:05:e4:0e:cc:30:ed:d9:20:
                    59:37:38:28:eb:b5:ca:76:b5:66:e3:79:9a:c1:bf:
                    dd:fd:ff:8f:fe:9c:45:8a:cc:ea:07:7a:46:03:32:
                    8c:a2:68:c1:60:14:ae:a0:08:c3:b2:7b:42:80:a0:
                    11:a1:e7:55:1d:d2:a5:35:74:ba:bf:e9:53:83:59:
                    e1:c0:3b:fd:b4:69:01:81:0e:6c:83:80:2d:a9:45:
                    76:ec:f3:51:8b:23:0c:a8:0a:05:fd:d4:c0:38:ce:
                    81:9e:1e:04:59:4c:98:d2:91:5b:9c:50:1e:c3:9e:
                    6d:f0:f3:b0:e3:5c:2e:fd:be:b3:81:a8:8a:97:f7:
                    59:39:17:8f:30:36:6d:1f:2a:77:c6:d1:34:c9:1a:
                    3f:5b:c2:3b:fc:2e:1a:a0:7f:a5:d7:c2:34:8d:12:
                    a1:dc:f4:b6:19:1e:82:66:a4:2b:8f:37:55:f6:18:
                    ac:2f:0a:be:32:c8:03:7f:34:5d:5e:40:04:b9:a6:
                    88:3b:7d:11:c3:71:ab:b1:1d:de:ad:be:f4:e3:2a:
                    90:35:2d:d1:8b:74:f9:10:81:75:53:1a:a6:e1:f2:
                    ce:14:f2:6f:1b:fe:7c:4c:31:a6:d6:5f:75:82:0c:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3B:21:F0:45:D5:B6:2A:5A:0D:6F:28:3D:5C:BA:8A:89:DD:C4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.52.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f2:3c:f1:0a:fd:63:aa:86:6d:7b:1b:ab:52:b8:b7:e2:7a:
         6d:96:ee:69:d4:98:a9:cd:1c:c7:15:70:20:33:02:99:08:da:
         ba:6f:d6:ea:1c:73:8c:d5:f9:e6:a8:61:81:74:ac:70:ce:64:
         a6:c9:8e:a6:13:8c:c8:0b:2b:31:17:97:a4:7f:5d:d2:31:20:
         f6:63:66:3e:ac:4a:5e:af:04:f2:5a:93:ef:c0:01:16:3b:d8:
         5e:a2:34:01:67:5a:51:d8:d3:d3:5d:46:71:bc:5c:d8:c8:41:
         af:60:05:ae:49:f8:fa:ce:19:12:90:cd:f6:8c:e2:aa:10:7c:
         c0:f6:90:c0:8a:5a:a0:46:5b:45:5d:7d:d0:dc:2b:70:1f:9c:
         f6:30:a2:6a:d4:bf:fe:38:a2:4f:fd:ef:93:83:cf:6f:fb:68:
         2d:4c:61:8e:2d:11:6b:61:55:43:85:cc:e7:c8:79:84:ba:78:
         dd:a7:69:64:dc:cd:9a:94:26:2c:3d:db:dd:10:30:db:24:b7:
         db:9a:1a:7e:98:91:f9:96:c8:38:ad:81:85:86:64:ad:cf:6c:
         31:b0:08:48:14:b1:93:6e:9d:da:b6:3b:97:4c:49:fe:bf:7a:
         c0:5b:c0:08:fc:99:de:a6:47:62:74:b7:a8:cb:3b:c5:2f:74:
         71:f5:b3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:31 2026 by rpki-client