Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/c9269c39-64d7-3333-b647-96b77321d717.roa
File:                     c9269c39-64d7-3333-b647-96b77321d717.roa (raw, json)
Hash identifier:          QoJco0gguUO8Aa37wD6OKSWl5VwN+I6G3cRsK932ka0=
Subject key identifier:   B2:0D:B9:8B:68:D2:71:0D:A7:E3:91:72:C5:F0:BD:C6:B3:97:00:C4
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584D8AC5405184AD1113A71D8A00
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/c9269c39-64d7-3333-b647-96b77321d717.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     393839
IP address blocks:        208.89.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:40:51:84:ad:11:13:a7:1d:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=644e358a-acee-4c18-af3b-b220d899dc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:dc:10:31:89:16:9d:8a:b3:7e:9c:d8:32:
                    0f:82:0b:2a:fd:55:3a:c9:90:dc:5d:a6:8c:2d:4e:
                    17:d7:5e:ef:be:0a:85:e4:72:b8:1d:43:54:e7:5e:
                    29:ad:85:e7:d5:09:4d:3c:cd:86:cb:c4:3c:a5:a8:
                    e0:68:8f:52:51:ca:da:f7:d5:cf:3b:66:8c:f9:ad:
                    bc:dc:df:ac:fd:5e:98:b0:72:ac:d9:cc:de:8e:ec:
                    c3:0f:40:28:43:bd:4f:5c:ca:76:58:27:e9:60:8d:
                    61:eb:75:d0:a2:b5:71:7f:f4:21:bd:61:95:ad:44:
                    7a:94:9f:a0:c7:8f:1c:66:58:48:69:eb:96:63:1a:
                    af:6a:fc:7a:c8:cc:6f:88:d0:3b:f5:3d:9a:42:af:
                    05:36:35:d9:f5:47:1a:bc:f7:b3:16:aa:66:5e:c1:
                    ec:0c:8b:cb:2e:19:09:0a:af:8a:7f:ad:a4:e0:93:
                    94:b5:38:17:35:6e:96:3b:dc:16:d4:14:87:c8:5f:
                    8a:6f:6c:29:53:f8:c6:70:f9:1d:71:48:72:64:31:
                    30:c5:3c:c9:72:62:14:89:d0:9e:ed:79:ce:9a:a3:
                    82:f5:2f:af:2d:12:4d:50:92:ac:cf:12:6a:fa:16:
                    65:f4:d5:81:b5:9a:39:da:e6:b9:e5:00:15:6f:43:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:B9:8B:68:D2:71:0D:A7:E3:91:72:C5:F0:BD:C6:B3:97:00:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/c9269c39-64d7-3333-b647-96b77321d717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3a:e6:1d:27:ba:14:a8:44:d5:c0:b6:08:13:36:41:69:88:
         38:40:15:b1:7f:1b:2c:55:c6:a5:a3:df:14:85:7e:b1:ac:83:
         cf:b6:2a:d8:eb:4b:a9:5b:84:26:9f:75:b2:24:0c:b2:4e:3a:
         4d:75:ef:f3:55:2f:26:fc:b2:76:c8:01:3d:d9:a1:a3:40:04:
         9d:c4:0a:75:f9:3a:c0:fb:60:c1:50:20:60:ee:f4:ea:fd:6e:
         b4:84:d5:9b:18:f0:df:da:96:83:02:ba:4b:45:7f:10:0c:75:
         fa:e1:1b:3e:2b:02:b1:19:5b:95:70:e6:6a:82:bf:6a:23:c8:
         ee:e9:96:6a:a5:b3:b9:34:d0:e7:c2:6f:00:ce:3a:52:06:ae:
         b1:9e:15:d6:d1:f1:ae:48:f4:b3:58:a2:b5:b7:51:b5:4a:f5:
         d1:80:65:cf:c2:b1:de:24:ab:2c:1f:25:c9:ea:42:38:d4:74:
         9a:62:2f:3f:32:15:8a:de:b3:99:8d:3d:c8:59:4d:17:75:06:
         f1:cc:4b:05:22:94:55:21:b5:55:12:ea:17:c4:e0:32:96:55:
         3e:01:8e:b3:aa:92:bc:ca:95:1c:76:ab:22:d6:5e:30:c4:08:
         3f:80:6f:cf:2d:1d:80:7d:50:45:89:21:fd:a0:3e:c1:f5:06:
         af:77:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:02 2026 by rpki-client