Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa
File:                     bd4733f9-619d-3341-8788-1eee40224373.roa (raw, json)
Hash identifier:          wYnupdLgqUJ3Uag7FkLNdrVbEC9omEzdAH9D4IHp1OA=
Subject key identifier:   97:B6:AC:B3:B2:4A:D2:48:45:9C:C5:79:D0:B9:29:0E:0A:B6:95:A1
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584EA2DFC38BFCD3D92DC758F600
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     11105
IP address blocks:        206.12.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c3:8b:fc:d3:d9:2d:c7:58:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=4cc190ce-745f-4e9d-857a-28cb505d6272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:f5:e3:08:c9:02:e8:2b:2c:bd:12:e6:ac:
                    0d:2c:4e:a4:90:d1:5f:13:9f:51:b0:90:f1:c1:f7:
                    0c:33:e6:7d:66:3b:ce:f6:d8:69:dd:be:bb:51:e1:
                    79:e2:bb:c3:c0:0c:9d:1f:9d:7e:82:ba:f9:6e:41:
                    c4:2a:54:27:70:9c:bf:8a:13:50:ae:c3:34:91:45:
                    2e:f7:50:a1:20:63:40:31:87:f7:39:ac:18:8c:f1:
                    97:fc:5a:2a:14:17:89:d3:fc:87:44:81:4d:21:f9:
                    aa:0e:2e:92:bc:80:dd:77:3f:59:ee:10:03:ec:16:
                    d6:61:52:28:2f:1b:9c:be:06:8a:e1:c7:be:c9:11:
                    b7:6d:53:04:e5:90:65:85:23:5b:3a:bf:a7:26:da:
                    05:3f:8f:2b:2b:a5:d1:d1:df:b0:45:e3:17:30:e8:
                    86:70:e2:1f:c9:36:51:c2:19:5c:ac:40:1a:9f:f5:
                    84:cd:ab:0a:5e:4e:e6:cd:75:d3:26:f4:82:2f:47:
                    7e:01:ed:35:1c:29:ea:7f:e4:31:f5:8d:fc:44:e5:
                    ad:04:d7:01:64:38:61:fa:a7:9a:71:68:0f:60:da:
                    42:0d:b0:b4:4c:2b:eb:91:fd:4e:a2:2a:78:e3:1b:
                    ef:2a:af:24:93:f5:08:78:ba:56:1a:c4:ba:03:65:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B6:AC:B3:B2:4A:D2:48:45:9C:C5:79:D0:B9:29:0E:0A:B6:95:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:65:e2:65:30:eb:30:d0:a2:8e:11:61:5f:86:57:b7:8f:
         85:ba:53:fc:3a:1f:a7:ee:96:9e:3a:e8:d2:e3:53:b5:8a:0c:
         1a:9a:a9:89:9b:5a:b3:a4:d0:b1:94:62:25:c0:53:f0:fc:7a:
         03:78:34:1e:b2:4a:f1:29:0d:75:67:8d:77:8f:3d:1f:99:ed:
         2a:73:35:5a:a2:dd:ef:38:3b:56:e2:3c:38:03:68:8e:4a:28:
         58:46:e8:6d:c6:59:67:bf:6f:d0:10:1f:81:1e:01:fe:82:34:
         d3:1c:2d:95:0e:d4:d9:7d:79:b7:09:c4:51:99:11:4c:52:f4:
         07:35:7f:1a:f4:ad:bc:07:20:9e:2a:ab:a5:f1:c9:a6:f5:de:
         f1:e5:d1:07:a3:68:e5:df:04:64:0f:b9:fc:fe:16:28:b8:7c:
         d7:06:55:7e:15:96:d5:70:ef:cd:9b:3e:6d:a3:21:e1:03:3e:
         b0:12:5f:ff:f4:c8:de:79:ad:4b:5e:97:ba:52:7c:a6:36:1f:
         19:28:92:67:49:bf:66:b6:1a:89:5d:29:8e:2f:b6:5f:a8:19:
         dd:20:a4:b3:fc:8b:71:fd:4f:f1:78:54:a2:d2:e4:e8:f5:3f:
         1e:c8:e2:8b:9a:6e:a6:6f:64:99:b8:7d:93:5a:99:7f:e7:f8:
         bd:46:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:07 2026 by rpki-client