Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/376df6f5-a235-341a-9edd-7f05fa6ea0a1.roa
File:                     376df6f5-a235-341a-9edd-7f05fa6ea0a1.roa (raw, json)
Hash identifier:          D0O4cCotFxzE59UPiJdE/8vNhSuIwJHVQRhu4FBvfu0=
Subject key identifier:   F3:E1:F8:EE:24:EC:B1:E3:33:68:3D:22:64:C1:7F:90:93:53:03:80
Certificate issuer:       /CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19
Certificate serial:       010D0C9F4328584F15CCE3F600F4F337D526BD80
Authority key identifier: 91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/376df6f5-a235-341a-9edd-7f05fa6ea0a1.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     25955
IP address blocks:        207.210.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:e3:f6:00:f4:f3:37:d5:26:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=56193b51-682d-40da-b1c0-413564b182eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:c9:bb:ff:1c:98:c7:9e:4f:cd:3c:b0:f6:
                    6c:bd:f8:bb:19:1e:3a:7c:25:f6:38:bb:49:c7:b4:
                    10:bf:6b:b6:fe:7b:d0:1a:5a:a2:7c:13:a4:47:d9:
                    f5:49:3d:39:40:8c:a3:2b:1f:d4:50:1d:79:96:03:
                    12:6d:e0:6a:38:36:b4:02:43:02:e1:9b:b0:2d:c2:
                    89:09:d6:16:37:09:88:6f:76:c9:e6:de:98:9d:a2:
                    4e:19:9d:5e:b8:0a:3b:50:e6:ce:65:19:25:fd:b5:
                    c2:b6:ba:88:07:c2:1b:11:23:6b:fc:25:d3:b7:84:
                    26:a6:38:cc:8d:58:69:30:75:38:53:5c:62:92:0c:
                    9a:96:8c:5a:bd:5c:8f:1e:f9:14:3b:18:9a:0c:1d:
                    be:01:71:98:40:d6:7b:f7:c3:57:c4:91:11:e3:dc:
                    f2:7e:5d:05:4f:34:fc:4c:55:0b:8b:04:c4:37:6c:
                    20:5e:b0:95:90:69:bc:59:1d:fa:2e:f6:f0:8b:10:
                    cd:90:83:67:63:67:0d:6e:e7:66:24:ec:49:4e:bd:
                    8b:cc:1f:f5:5a:f6:f9:d8:61:d6:bb:d6:0b:23:d9:
                    f6:12:27:5a:29:e4:d5:58:cc:d8:1d:f5:f2:5d:3a:
                    ff:cf:ed:e1:5c:72:26:3e:b4:2e:81:4b:57:89:f3:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:F8:EE:24:EC:B1:E3:33:68:3D:22:64:C1:7F:90:93:53:03:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/376df6f5-a235-341a-9edd-7f05fa6ea0a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl

            X509v3 Authority Key Identifier:
                keyid:91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:93:76:b4:8a:21:e7:a8:4f:40:a8:ce:f0:73:be:61:82:66:
         6f:4e:b4:ed:45:23:0e:2d:9b:db:39:4d:6f:d4:e2:35:29:4e:
         51:94:d0:77:6a:40:d4:26:eb:f8:a6:e8:2c:f1:3b:22:b0:2d:
         eb:42:3f:aa:eb:12:d1:51:8c:f1:83:ec:1c:c9:59:e0:ae:e3:
         82:a8:9e:39:6f:18:cb:37:5c:c8:cf:dd:bd:36:b9:98:98:f0:
         47:dd:c1:b3:9f:d0:a9:5f:f3:f8:78:ba:c6:f8:f8:e8:a6:58:
         95:f9:3c:8e:2d:78:dd:8e:79:d9:f6:3d:3a:79:7f:d0:32:16:
         97:98:3c:61:ad:e8:63:c5:a6:39:44:0e:08:f2:a1:55:b0:b8:
         22:a9:d3:85:6c:b6:25:28:f9:b1:9a:21:4e:8a:7b:7f:f4:12:
         bc:d0:02:8f:0b:79:d6:4c:e0:d3:89:66:6d:f2:bf:80:33:19:
         e8:f6:32:12:40:32:c7:ad:54:6c:7b:06:bb:27:0e:9b:15:46:
         cc:91:87:c3:05:a3:78:9e:d6:40:51:de:81:83:b5:2d:f8:c0:
         7c:3c:b0:de:e1:55:ea:4e:6f:0b:23:41:19:24:cf:cf:d8:7a:
         db:d9:1c:f2:77:fd:8c:7a:4e:15:91:a2:65:d9:29:13:bc:8a:
         12:74:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:04 2026 by rpki-client