Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa
File:                     d97bba36-eba0-3176-b968-980f5a55ba17.roa (raw, json)
Hash identifier:          cBoc4VoNKqzoZwqJarph84JrLQsfrcEUgOlu3hGAn48=
Subject key identifier:   E7:22:5A:8C:1E:3E:2B:E2:F3:B2:32:9C:41:44:15:05:D4:2A:40:1B
Certificate issuer:       /CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
Certificate serial:       010D0C9F4328584EF44CC8F2539B82F98174B8F0
Authority key identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     208414
IP address blocks:        195.85.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:c8:f2:53:9b:82:f9:81:74:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=4fb198fe-1228-4875-803f-0d0dd3e51cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:9b:a9:9a:0f:bd:37:8f:eb:ea:e7:5a:0d:
                    08:f2:36:de:2c:32:75:cb:ca:8b:9b:1d:5b:d4:a0:
                    8e:4f:3e:8b:f0:d2:a4:aa:62:bd:72:bc:f9:b7:1d:
                    2b:31:ef:11:d2:54:32:e5:f2:22:b5:e1:59:1f:03:
                    48:ed:56:26:91:77:e6:e7:e0:5e:22:86:d4:06:83:
                    12:f3:b2:13:4f:11:52:52:76:34:7f:d8:bb:9f:56:
                    07:da:bd:06:2b:dd:2a:3e:ee:5d:b6:e4:72:d4:74:
                    8b:30:6e:bf:58:a4:c9:46:b6:24:24:2c:c3:19:64:
                    32:44:e3:6b:d9:1f:7a:d9:1f:77:80:1c:e5:24:38:
                    51:f2:a8:a7:51:6a:2d:22:f2:72:82:13:01:1f:fd:
                    62:a1:6d:ef:6d:b5:3b:db:e8:46:17:b6:bf:34:eb:
                    88:c8:5c:87:9b:d4:a7:a6:1b:39:53:24:ad:a8:f9:
                    bc:54:5f:0f:b5:5a:40:75:ca:22:03:d8:27:ba:9c:
                    91:b2:68:04:75:6d:58:ce:cb:35:d1:78:d5:9e:a5:
                    c7:f4:70:7b:02:ed:b6:91:38:53:4d:07:f4:34:24:
                    85:b7:64:c6:0e:6e:28:c7:55:fa:a3:d7:ff:ac:36:
                    31:0f:28:53:21:63:af:1c:2e:23:eb:24:0f:b7:7c:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:22:5A:8C:1E:3E:2B:E2:F3:B2:32:9C:41:44:15:05:D4:2A:40:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl

            X509v3 Authority Key Identifier:
                keyid:B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:7c:5e:69:d4:10:11:42:c8:2b:8a:36:04:c7:64:a5:86:
         5c:16:f1:94:c7:0d:17:c0:0f:64:80:de:d7:50:98:73:ab:89:
         8b:a3:91:7f:de:85:ff:7c:57:3a:fa:a0:48:ac:b4:67:7c:78:
         cb:ec:28:70:36:1f:d7:28:3f:64:3b:12:24:c3:f6:59:bd:ca:
         e1:0c:d9:b7:59:32:24:66:95:d1:3a:fd:59:25:1f:3a:96:58:
         3d:b6:73:87:fe:b1:55:d4:8b:2f:be:f4:be:cb:c5:27:eb:b2:
         c2:bc:db:40:34:a8:01:1f:67:9c:01:43:f3:a7:dc:8e:50:3c:
         87:c7:91:e6:db:64:17:66:3c:eb:d3:68:06:0b:73:bb:ab:6a:
         a8:c9:0e:a4:c2:ae:c5:77:c7:d5:93:c0:84:c6:6c:e2:d7:49:
         b5:f9:90:7b:ca:cf:52:81:19:a6:cf:48:d8:75:93:17:1a:a7:
         42:50:90:37:cd:84:47:2c:30:0d:a7:f6:7e:83:68:63:51:fb:
         3b:6c:00:43:f4:e9:36:0d:c3:35:d3:ae:99:ca:75:95:87:b0:
         01:60:95:9a:a6:e2:30:f5:69:c8:ed:bc:30:63:01:3f:be:1b:
         f4:8b:3f:3e:9d:12:c6:ae:1e:70:39:5e:02:44:a6:cb:ec:13:
         f2:57:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:26:32 2026 by rpki-client