Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fabe82f-c68a-356e-aeea-805be4eba4b0.roa
File:                     0fabe82f-c68a-356e-aeea-805be4eba4b0.roa (raw, json)
Hash identifier:          8TEk3oSYjadqJt/hsYPQt7UXhMED1lZaKSF1mPbp8ks=
Subject key identifier:   98:26:A3:23:D7:07:B7:20:F8:0B:3A:A4:5D:C4:F0:78:05:C4:11:1D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F067296A7054B1E491E7B0100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fabe82f-c68a-356e-aeea-805be4eba4b0.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     11831
IP address blocks:        209.17.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:96:a7:05:4b:1e:49:1e:7b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c033ad56-d7b5-423e-b966-ad05e1f23c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:9f:e0:b2:2d:a3:a8:0c:7d:59:61:73:40:
                    bd:08:e0:96:bf:77:0a:09:39:52:b3:ae:5c:3c:54:
                    f2:9f:02:a1:ba:b3:e4:66:18:c2:cb:93:e3:12:c4:
                    16:40:4a:c7:d7:d9:d2:52:79:ee:1d:df:59:19:dc:
                    c9:e8:5b:06:b6:70:fb:d5:3d:c6:f1:53:f6:22:68:
                    19:1f:8f:03:0e:e9:5e:3b:79:bf:a1:cd:bb:c0:85:
                    c0:4c:30:4b:66:43:49:cd:56:f2:2f:ae:c5:bf:7a:
                    d1:43:b9:a1:37:7c:28:42:28:74:b2:b7:3b:06:f0:
                    a7:9f:c6:ae:8a:ae:39:3b:e2:76:8a:82:9d:ea:14:
                    78:1f:5d:97:4a:27:8e:de:69:bb:12:8f:df:8f:0e:
                    77:f2:f4:00:cc:17:26:62:63:c2:dc:61:09:f0:a9:
                    b3:07:64:27:94:0b:a5:e6:9d:41:a2:bf:c1:1d:35:
                    5d:65:0d:29:b5:db:15:2d:f0:a3:46:d9:33:63:ac:
                    9d:c5:11:ac:e5:0c:a3:90:4b:f6:9c:24:8b:18:7c:
                    da:34:45:44:69:c3:ee:65:b4:a6:00:45:6f:76:bd:
                    7e:0e:d1:02:72:c5:02:43:b4:68:1c:87:c4:86:d3:
                    81:e1:dc:b9:44:91:09:3f:91:f3:99:f1:79:83:85:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:A3:23:D7:07:B7:20:F8:0B:3A:A4:5D:C4:F0:78:05:C4:11:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0fabe82f-c68a-356e-aeea-805be4eba4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:71:08:98:2e:2a:84:8c:55:f2:86:da:86:3a:7a:b6:76:a7:
         71:4e:c0:5a:77:36:6f:3c:ab:1d:b4:fc:b9:cc:d4:b0:e1:2a:
         f7:8e:f6:ec:67:3b:bd:71:07:5e:fd:14:8b:a3:73:26:e7:a8:
         e2:ab:e7:bd:09:5e:90:71:4a:c8:17:4a:4e:20:12:b7:c5:fb:
         58:42:34:5a:11:e3:1a:67:0b:70:27:28:12:e4:62:bc:2b:61:
         4c:52:c5:24:0e:ea:fc:aa:4b:bf:55:3c:72:f8:59:9b:2d:d2:
         04:b8:29:7b:16:ce:42:83:37:aa:d4:7b:02:d5:b1:99:3a:ee:
         35:51:73:08:45:a1:86:ea:ce:ee:e6:68:62:80:16:5f:be:ca:
         c6:ca:74:63:07:36:e7:a1:1d:63:b3:40:a3:36:06:5b:31:99:
         5a:ee:70:80:58:0a:e5:71:40:f6:17:c6:39:88:57:a3:36:1b:
         ab:00:86:14:b5:17:5d:d5:9d:8b:da:b5:32:52:7d:c8:1e:15:
         97:92:c7:27:8f:48:15:70:dd:1d:4a:73:27:d5:31:c2:6a:2e:
         3c:53:6d:51:9c:26:5a:08:e2:0d:52:b9:8b:f9:70:4e:5d:f3:
         6b:e1:ec:df:e5:25:02:fe:ac:5e:b6:82:1c:29:c6:f9:df:14:
         ed:d6:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:16:49 2026 by rpki-client