Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
File:                     ee97e258-8632-3ff0-ab06-d0fec008173c.roa (raw, json)
Hash identifier:          fW1NVMd3pBmYeAFGvcshWLxtvxEMcOfjhBrerv1T4CY=
Subject key identifier:   FE:38:1A:E1:93:1A:3A:44:17:01:EE:C6:87:62:79:06:E9:F1:49:78
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584F4973AA551BAF361730E6C500
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     35950
IP address blocks:        204.235.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:aa:55:1b:af:36:17:30:e6:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ddc1fb45-7930-499a-ab7a-5d453ea166e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:3b:ca:51:88:d7:e6:5f:9d:ce:63:89:c3:
                    4f:a8:32:9e:c8:2d:1d:47:72:35:e1:7c:5e:67:00:
                    90:b6:de:54:99:e8:14:45:49:c8:e0:05:b2:c3:28:
                    22:59:f3:d0:32:55:6f:a5:f3:57:00:94:16:07:1e:
                    57:79:ea:6e:11:52:91:04:69:1e:88:fc:46:9c:9a:
                    df:91:11:94:a2:f9:dc:6a:0f:72:25:fb:5d:52:f7:
                    1c:0b:2c:f7:17:2d:10:5c:b9:cf:8a:68:a9:b5:8f:
                    2a:44:f7:f4:a3:d1:10:b5:d8:dc:31:a2:1f:86:c7:
                    ec:8b:61:41:1d:47:3e:b9:62:9d:9e:e7:52:6b:c3:
                    ce:7c:ab:7a:2e:ab:00:ad:ca:0b:b4:24:4a:cc:5f:
                    74:fb:2b:76:88:95:44:95:80:41:1f:b7:41:7f:f2:
                    49:78:95:4e:57:bf:ef:2f:9a:0f:6f:cd:c6:2e:ba:
                    32:fa:5b:3b:36:a6:24:71:f9:ae:01:8d:56:da:8d:
                    be:2a:01:bf:53:c5:03:af:28:fc:b9:58:dc:2f:e3:
                    18:cb:63:e3:04:5e:d8:da:c5:64:a8:13:5f:78:6b:
                    ea:ae:61:5a:1b:64:7f:91:25:db:e9:e3:6d:e0:47:
                    fc:78:67:6b:2e:42:a7:77:5e:c6:f7:49:34:bb:e8:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:38:1A:E1:93:1A:3A:44:17:01:EE:C6:87:62:79:06:E9:F1:49:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:5f:ff:e4:e2:bf:93:00:da:8a:73:42:e9:13:04:bc:ea:
         67:d3:aa:e0:8d:9c:28:dc:87:1c:11:ae:9f:d9:20:e4:79:63:
         77:ba:62:1e:aa:cf:f1:43:3d:c9:3d:5c:ba:35:79:19:8a:fc:
         f0:4f:2d:0b:f2:9d:60:d3:9c:18:74:9b:bf:d3:27:e0:63:09:
         79:51:d4:03:c6:43:5c:9a:e7:82:50:a0:81:5a:ae:31:b5:78:
         95:22:c8:2c:b1:d0:58:0c:58:12:32:34:47:07:87:0c:ae:67:
         0f:c7:ba:03:48:ab:f1:cd:11:11:57:d7:4a:b6:28:59:c9:a3:
         7c:ef:d0:84:d0:16:56:ff:72:ef:b3:6a:ec:f9:14:f8:22:fe:
         9b:d0:dc:b1:2e:d9:7d:92:a6:38:7a:97:c7:14:34:11:5b:6e:
         2c:13:bc:38:ac:6d:bf:7a:bf:bf:88:ec:68:67:7c:d3:87:d0:
         fe:e7:04:6c:d2:8d:bf:f9:be:8f:47:ab:36:a5:0a:8c:01:3a:
         2b:d0:cd:66:1e:77:a9:cf:f5:1d:5d:1b:ef:db:ed:64:fe:a4:
         bc:d1:2e:6b:59:4c:a9:f5:14:60:3c:5f:4b:dc:bf:df:2d:e9:
         1e:70:30:be:2c:f6:54:35:e0:f7:e2:cc:cd:99:f3:f3:0b:93:
         ec:69:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:03:11 2026 by rpki-client