Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa
File:                     d7988856-9a82-35e4-8647-e7dca63b7c9b.roa (raw, json)
Hash identifier:          uveCQx5Jt9r9XOPQiCb41gYksdVO2w+WElKRgc8YFAs=
Subject key identifier:   10:DF:B2:D3:9C:46:52:C8:1F:61:C3:F4:13:5C:A2:C9:E5:64:25:F5
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584CF58798F83E8427D24B01E040
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     16417
IP address blocks:        207.54.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:98:f8:3e:84:27:d2:4b:01:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=177df75c-a56e-4d58-b557-4ddd3199ac9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:be:5f:c2:4c:60:1a:d6:fe:28:09:e3:43:
                    7b:6a:9b:5b:c6:0e:dc:7a:8a:cb:9c:90:20:ef:55:
                    53:f7:aa:fd:05:a4:b8:29:2d:0e:ed:18:9a:dd:9e:
                    8e:ef:d0:05:8b:ab:f3:41:c8:15:90:b9:e3:8f:ef:
                    81:d4:3f:ce:52:c8:8d:86:ef:fd:4b:54:6f:63:b5:
                    7c:e4:f2:ab:72:cb:de:f4:0b:92:be:27:2e:54:da:
                    99:15:a7:72:aa:d1:0e:7a:ba:82:e8:3c:f4:92:e4:
                    65:79:b8:a1:ef:45:c5:41:4b:9e:93:76:ed:0d:0a:
                    ec:30:cd:bb:05:72:03:3a:76:3c:27:69:e6:2b:af:
                    06:5c:d4:3f:0b:77:a6:13:24:f6:66:69:eb:c9:35:
                    16:0b:be:0c:a8:ac:83:36:c0:7d:5a:c5:c2:2f:e5:
                    82:7c:50:bd:82:0f:e6:c9:91:0e:0a:d3:1a:39:08:
                    ea:ed:0f:5d:09:64:c1:00:37:3b:f1:f4:64:b7:83:
                    db:35:a7:52:6c:2d:2d:38:d4:20:4b:2f:43:28:ea:
                    e2:3e:34:91:ea:c0:f0:ba:b9:70:9d:d3:9f:45:ff:
                    b2:5b:a9:cd:26:27:26:05:9c:53:00:63:41:51:33:
                    ea:a4:be:61:34:b2:a3:06:62:87:51:e5:a7:08:59:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DF:B2:D3:9C:46:52:C8:1F:61:C3:F4:13:5C:A2:C9:E5:64:25:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:6a:8f:d6:cc:4a:37:32:ff:79:92:af:7a:71:68:f8:3c:
         28:3e:d4:47:0c:16:a4:7e:03:94:13:67:24:8f:27:f1:d1:2b:
         2a:46:0d:66:02:35:1d:20:c5:98:d5:b9:1a:1f:ce:c9:f2:31:
         47:74:1b:e1:8a:9a:5f:c1:a2:0f:13:ff:42:df:86:9e:09:4e:
         db:4e:d6:a1:52:d2:3a:a2:9f:a5:db:0b:22:d5:ce:b7:f4:be:
         6e:49:bc:81:a5:ab:87:45:54:e2:1e:c5:30:97:ab:63:c4:92:
         b7:15:c3:d9:c7:fd:06:70:56:da:c8:53:50:49:b5:de:a1:c8:
         77:41:7a:e4:ad:51:50:f6:17:fc:3e:a2:23:5b:e3:30:9a:9d:
         f2:d2:98:43:20:dc:1f:80:39:e2:ad:64:50:6d:8f:5f:cb:d6:
         1f:5b:10:26:b4:bb:b1:20:eb:2c:c5:d4:87:83:32:2a:27:1b:
         f9:44:b3:55:64:40:db:4a:4c:1f:e5:e8:fe:ed:0c:51:6f:b5:
         60:a4:f7:77:f7:f0:6f:e5:50:f4:3b:13:a6:5c:39:8e:46:3d:
         94:d7:54:c2:43:65:ef:da:cd:ab:21:39:b4:d2:80:40:aa:f6:
         f1:a0:02:d9:25:6e:e4:9a:f7:c4:cf:f3:3f:74:21:f4:c7:9f:
         79:d7:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:37 2026 by rpki-client