Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa
File:                     dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa (raw, json)
Hash identifier:          f1f1QEtUER+kcxDzWHGjV6eKZHj6asrH/JzssUmWaOU=
Subject key identifier:   6A:02:72:83:A5:95:79:8A:EF:8F:A7:B5:CA:07:67:B9:4C:84:C2:19
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4478C054B598823A55EB00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     7018
IP address blocks:        208.89.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:78:c0:54:b5:98:82:3a:55:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=bd2029bc-0b56-4b6f-a381-e8d81dfbfcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:b7:83:0c:7f:4d:68:81:3b:26:63:2a:bf:
                    76:9f:00:76:db:f8:dc:95:db:e1:cf:f7:81:d8:14:
                    60:81:37:b1:91:19:7f:aa:cd:7f:98:b1:fb:49:4a:
                    cf:87:80:0c:21:9e:c7:20:7f:20:03:1a:3f:b3:53:
                    91:35:78:4a:de:18:35:a5:bd:9b:03:23:a8:fa:36:
                    3e:73:fd:57:7c:50:5f:3a:fe:f2:e1:f3:e8:0e:71:
                    53:c5:72:c7:1c:e5:b9:45:dc:90:30:d7:10:ab:02:
                    1b:f1:1d:74:68:ae:13:06:90:c7:d2:97:a0:01:b7:
                    b1:c9:b6:3a:7a:ec:57:a6:14:69:58:63:3a:9f:85:
                    c3:1f:c6:b7:de:91:6c:6e:bf:6a:43:5a:f5:2e:a4:
                    f6:5e:4a:64:ce:04:22:78:f9:30:6d:5d:9d:d9:3a:
                    49:eb:32:43:c9:ee:14:30:a7:ea:76:a8:49:6c:00:
                    63:f0:09:5b:97:2b:17:ba:9d:0e:15:0e:5b:a0:17:
                    d9:33:f4:a4:65:22:97:c5:3a:f3:50:c2:dd:4b:73:
                    73:59:83:62:44:29:56:08:f6:f7:b8:e2:d7:3d:65:
                    8d:72:7b:d0:0b:9f:89:03:5d:74:15:9c:79:80:e2:
                    43:05:34:08:f9:2a:19:26:48:73:76:30:fc:97:13:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:02:72:83:A5:95:79:8A:EF:8F:A7:B5:CA:07:67:B9:4C:84:C2:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d7:28:30:91:4e:0a:2b:dd:20:e6:0e:f2:49:58:10:32:9a:
         78:34:18:03:c9:5d:d1:db:38:4b:51:74:3c:01:21:f0:fd:c9:
         4b:89:0e:86:af:10:c6:ff:65:3b:38:d4:7a:86:18:9c:9c:ac:
         73:03:48:24:0d:b5:39:d4:84:39:e9:8e:9d:11:de:64:c2:34:
         67:74:dd:e2:30:73:82:0d:cd:82:2c:10:86:cc:a4:e6:81:39:
         f4:93:43:15:5b:3f:c3:90:49:55:fe:30:66:26:12:a5:70:6b:
         db:36:38:15:fd:96:2f:df:1c:89:7e:df:2b:bb:c6:71:37:27:
         48:b3:97:d4:30:f7:a6:a9:8c:ce:34:33:ff:ad:69:1e:76:0d:
         11:46:ad:ec:36:06:78:98:ef:cd:3b:81:3d:44:58:fa:96:72:
         16:6f:15:36:1d:49:be:72:e9:bf:30:e2:e0:44:a3:c3:e6:bf:
         1c:ca:dc:d3:43:2a:29:fc:9d:b6:6c:c2:00:27:e8:56:bc:6a:
         f9:58:df:1b:7f:39:ff:36:93:89:7e:46:01:d3:3f:39:5c:e8:
         b1:b7:fe:cf:8a:09:5c:8f:a2:3e:47:7d:89:ff:c5:de:f6:36:
         f7:35:b2:5f:ca:5f:f4:7a:a9:c5:6f:df:81:aa:ab:2f:19:27:
         49:66:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:05 2026 by rpki-client