Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa
File:                     b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa (raw, json)
Hash identifier:          8nsPKIt5SExYjN4+7Yaptt9BsO0ePloHHumcd8RgFP4=
Subject key identifier:   6E:F9:B4:36:98:E7:48:71:11:23:28:E4:7C:C6:DD:26:BE:DF:A7:CE
Certificate issuer:       /CN=213412d0-2e00-4f54-95bc-e72555790689
Certificate serial:       010D0C9F4328584EA788D53018FD0253906BD100
Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40509
IP address blocks:        209.71.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d5:30:18:fd:02:53:90:6b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=49c9c8dd-b4ed-4108-ae4c-539fb837c257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:f7:45:b6:82:7d:98:91:9a:18:73:c4:7e:
                    09:93:45:f2:80:7b:90:c7:51:65:06:d1:0d:f3:03:
                    63:3c:99:7c:b9:94:f7:18:d3:90:67:8c:89:bb:85:
                    16:53:15:8b:9f:07:86:44:de:fe:24:9d:d9:e2:f6:
                    3b:b6:20:5c:44:97:46:3e:b8:ec:a2:00:0e:b0:fb:
                    10:76:68:db:ee:70:9d:a2:1d:99:76:8b:c6:8d:67:
                    f4:94:28:21:8a:e6:7d:0e:4b:20:d1:47:12:59:f1:
                    f9:7c:c8:bc:fb:a1:52:b7:66:88:db:2c:ab:a3:c1:
                    25:00:2d:c8:14:fb:73:9d:98:a4:8a:fc:5a:4b:6a:
                    5b:f4:17:e7:f9:e2:10:2d:48:88:69:e8:3c:f5:42:
                    24:a9:1a:f3:63:f8:68:55:d0:4d:56:e4:c0:e3:27:
                    4d:96:fe:66:ae:e3:83:d3:18:5c:eb:6e:af:62:5b:
                    03:d3:c2:76:bc:df:1a:ac:7e:db:a1:c7:90:26:cf:
                    5c:a1:c9:c3:fe:a2:d4:d0:c2:e9:48:26:9d:34:31:
                    68:fe:23:1c:a6:a2:c9:68:26:13:35:13:e8:2e:4a:
                    ca:f2:33:02:1f:1e:1d:44:92:0e:7a:88:99:c2:48:
                    c3:e4:7a:40:a4:d8:c1:3c:2b:0b:f5:f8:f2:a3:6c:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:B4:36:98:E7:48:71:11:23:28:E4:7C:C6:DD:26:BE:DF:A7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl

            X509v3 Authority Key Identifier:
                keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e0:50:b0:28:d6:46:a1:5e:54:6b:f4:0a:5a:cc:6a:ca:46:
         ff:89:02:1d:10:3c:0b:e0:13:ad:0a:0f:b9:9d:a5:3f:69:62:
         ac:f5:35:f8:cd:6a:54:67:ee:eb:3d:b4:f3:56:f2:96:c0:5f:
         b2:62:b8:8f:7f:d0:60:dc:61:f2:75:1b:7e:53:72:b5:b2:43:
         27:31:0a:fb:e0:f9:c0:1d:bd:3e:e3:59:2a:6b:84:b1:07:03:
         9f:a6:2a:15:5f:09:39:8e:57:15:63:17:61:5a:d7:db:e2:de:
         5c:3c:f6:d9:26:a4:de:d9:c4:7c:91:db:69:09:32:a5:9a:d0:
         45:ca:b8:11:e7:7e:98:86:c0:43:f5:ad:99:55:18:08:b0:d4:
         f9:af:81:19:8e:70:ce:e5:9f:d1:85:0a:00:a1:3e:62:5d:83:
         2d:65:11:07:63:9b:fb:17:23:a9:f0:f3:19:55:4c:62:31:e7:
         b7:e0:16:d9:d9:77:a8:da:d8:39:b1:63:ed:f3:33:82:77:3c:
         d1:b5:4a:51:60:6c:f1:31:ba:1e:96:da:48:29:80:d7:c4:b7:
         e5:83:46:60:db:44:e4:bc:92:1c:5e:06:11:cf:41:c1:17:62:
         91:33:97:1e:78:16:3f:aa:7d:a7:39:e9:b2:df:8c:f7:75:f0:
         e7:c8:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:10 2026 by rpki-client