Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/420ab927-57aa-3401-a084-f89e0b030e92.roa
File:                     420ab927-57aa-3401-a084-f89e0b030e92.roa (raw, json)
Hash identifier:          mwrlwNhwiDR2uEi1/b9qrLzFSFrlCtKpSrjmdYc3fYI=
Subject key identifier:   62:32:A2:BF:16:87:A5:FE:12:E2:6A:E2:6C:05:CD:E2:BC:9B:BF:BD
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1E2D03FF050702152D5CEEE0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/420ab927-57aa-3401-a084-f89e0b030e92.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     2914
IP address blocks:        173.213.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2d:03:ff:05:07:02:15:2d:5c:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=7d0f9caf-c975-4fc3-8f83-ab33bc471370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:b3:a0:2e:bb:2a:fb:72:23:27:1d:ce:f5:
                    c4:2e:b2:51:8f:b7:d0:da:3d:96:4b:89:ff:e1:65:
                    19:07:32:d8:d6:f5:dc:9a:67:ea:0b:7d:c8:a2:a8:
                    72:9c:25:30:9e:09:47:30:b6:b3:e2:5c:a1:79:c8:
                    0e:a5:a5:35:be:43:f4:2c:cc:c7:3c:3a:b4:f9:1f:
                    93:e2:7a:b0:f4:3f:c9:8e:5e:7f:bc:80:b8:05:9b:
                    a4:ca:33:13:b9:9c:ff:4c:9b:56:d6:e4:7e:67:bf:
                    e2:fe:f6:23:01:78:1c:6e:1f:cf:fb:8c:f3:0b:24:
                    e1:83:f6:c1:75:6a:4a:c1:db:f5:70:60:39:b1:ba:
                    b9:46:74:2d:58:4b:e8:d6:3a:f2:f5:30:6c:a0:11:
                    fd:d9:bc:c1:d8:6c:2a:79:ad:47:45:f6:97:38:92:
                    f0:e1:5b:5e:29:e3:08:f1:cf:f4:6a:6d:65:f4:60:
                    32:fc:83:53:62:fa:cb:8a:af:24:c5:f7:06:ad:1e:
                    d4:e6:9c:0e:35:96:ea:6a:37:bd:7d:f0:a6:55:39:
                    a8:f8:ae:49:ff:e8:66:ae:c8:91:0b:a0:64:79:c1:
                    6b:ac:8b:e3:90:da:17:e6:9f:29:29:47:2f:94:f2:
                    52:89:41:a3:7d:4d:71:a6:53:12:ed:2f:80:14:fa:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:A2:BF:16:87:A5:FE:12:E2:6A:E2:6C:05:CD:E2:BC:9B:BF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/420ab927-57aa-3401-a084-f89e0b030e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:61:ef:9b:86:10:50:72:c7:2e:27:b3:5f:f5:1a:46:5d:8c:
         b2:15:37:12:d9:39:a1:79:72:3c:b1:31:05:cd:95:7e:4f:67:
         f8:e9:e0:c4:8e:bb:82:c7:bf:7b:4d:eb:09:d5:34:1f:cc:f9:
         de:21:0a:e6:92:f1:de:be:d5:9d:dc:5e:56:02:5c:8b:b8:e8:
         27:ad:d0:df:82:11:84:3d:77:27:9b:cb:81:5a:2b:80:60:ee:
         53:71:a4:0f:b8:59:55:80:15:09:ae:1a:60:a3:03:af:48:c2:
         c9:f1:2c:1e:ae:b1:85:bd:6e:52:3d:a8:a6:df:00:66:b8:41:
         f0:cc:97:24:3e:63:25:5f:9c:7e:7a:26:8b:a4:eb:93:69:16:
         28:ef:57:c4:1a:aa:17:08:88:6f:11:ed:1e:05:a4:7e:8e:e9:
         15:e2:eb:96:a3:90:69:f3:f1:fc:24:af:dc:6e:8e:7f:45:9b:
         bd:9d:87:7b:e1:82:fe:17:6a:b5:71:3b:9f:ef:ff:ca:72:30:
         8e:98:79:88:af:7c:bb:37:3e:d4:6b:cd:fe:89:4d:28:5f:2c:
         04:8f:b3:37:cb:30:52:1a:01:ca:90:05:4a:dc:70:0c:3a:0c:
         56:33:5f:a9:a8:95:84:fc:05:ba:4e:ea:b4:b7:c1:c9:e7:e9:
         52:10:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:11:51 2026 by rpki-client