Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa
File:                     edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa (raw, json)
Hash identifier:          5NGIYqPQzK0O/vVOG03Oflc6zyenl4Bd9v/4YteCMvs=
Subject key identifier:   B6:D6:16:D0:4B:96:2C:1A:02:C2:F0:AE:EB:3B:74:DA:04:54:84:F2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA79410D286440ACC91501F80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15247
IP address blocks:        209.53.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:10:d2:86:44:0a:cc:91:50:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4093f8c0-a618-438f-8a56-b10b484a6d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:f9:62:c1:dd:e0:59:fc:6b:a8:bb:e2:29:
                    d3:35:19:01:00:a2:0d:c4:e1:8d:5d:cf:c0:ec:19:
                    95:25:83:12:bd:32:17:35:9c:a8:fa:30:5f:6b:9f:
                    6b:4a:54:7d:d4:ca:f8:bf:f6:9e:db:4f:45:dc:17:
                    78:7d:3a:48:c6:84:48:d8:b3:41:c5:9d:ca:f9:a2:
                    18:8f:2f:11:de:c7:f7:33:19:49:f5:36:93:7d:6a:
                    69:24:11:48:fe:d5:71:e7:f8:55:82:ec:50:44:2f:
                    c5:80:00:bf:ca:28:fc:3f:7e:59:07:c2:69:6c:58:
                    b7:70:4c:fc:ca:c1:6f:82:e4:a0:72:1e:5f:2c:06:
                    74:81:15:8f:91:60:dc:56:08:7b:56:c2:c3:30:6d:
                    1b:92:bf:97:fe:7b:05:2a:6a:53:d9:23:e7:85:28:
                    90:ea:01:a7:04:af:44:52:bc:eb:8f:ca:50:dc:bd:
                    b9:75:81:b8:6b:b8:dd:d9:85:60:1c:3b:72:28:7c:
                    67:6e:cd:1b:a9:b0:be:8a:6a:35:01:32:94:07:bf:
                    40:77:ef:bb:ae:dd:10:a6:1d:88:6e:9a:2f:0c:4c:
                    95:42:89:e5:bb:20:21:82:b3:26:38:a0:43:3b:43:
                    7d:7f:5e:6d:e9:6f:a4:19:83:80:0f:a9:cf:89:2e:
                    0c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D6:16:D0:4B:96:2C:1A:02:C2:F0:AE:EB:3B:74:DA:04:54:84:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:61:eb:c8:ac:03:0b:6b:99:92:ce:3c:80:08:a4:7a:31:26:
         69:39:8c:ea:65:df:78:45:92:f7:d1:97:0d:a2:3c:00:d6:b2:
         1d:e9:dd:d8:cf:a8:ee:25:a6:7e:0a:53:12:f0:13:87:a2:93:
         06:40:e4:cb:79:4e:9a:fe:f0:2d:11:93:10:7a:a3:73:02:15:
         0c:c4:a1:54:5b:bc:a3:c3:17:88:30:95:83:0f:87:09:ec:90:
         55:0b:26:58:ba:3f:7b:df:02:aa:96:2b:04:04:0b:1f:96:99:
         cb:82:63:d1:be:42:91:81:5d:98:59:03:1b:03:76:22:44:c9:
         6c:d5:8f:03:d8:fd:8e:d8:91:1f:68:4f:66:b0:14:c9:bc:c7:
         01:5d:45:67:0b:22:1f:af:36:48:75:00:84:48:1c:3f:eb:04:
         3f:6e:8e:23:8f:56:64:01:0f:b7:66:fd:ac:e1:2f:45:a6:aa:
         fd:11:59:0a:a0:89:b5:6a:ee:50:cd:8c:f6:64:37:19:92:84:
         cc:3d:1f:d9:92:6f:fb:33:0f:96:19:74:8d:e0:08:e6:6b:62:
         ac:09:d3:69:6b:f7:96:6f:5e:5d:39:13:a8:f4:cc:be:14:71:
         5a:f6:88:71:43:9a:e0:32:11:40:e7:d3:62:04:cc:3f:1c:86:
         32:ae:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:58 2026 by rpki-client