Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa
File:                     2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa (raw, json)
Hash identifier:          ujhVTlsDED7Hlp/RTxd3S5iUObMstzrwDRbRgjLekIg=
Subject key identifier:   D8:1D:AD:70:89:5C:C4:17:22:A2:71:52:EE:7F:2C:D5:2B:CC:A6:6B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E991A50F0A1E45D11045F4360
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa
Signing time:             Thu 23 Jul 2026 21:00:11 +0000
ROA not before:           Thu 23 Jul 2026 21:00:11 +0000
ROA not after:            Wed 21 Oct 2026 21:00:11 +0000
asID:                     395886
IP address blocks:        207.56.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:1a:50:f0:a1:e4:5d:11:04:5f:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 23 21:00:11 2026 GMT
            Not After : Oct 21 21:00:11 2026 GMT
        Subject: CN=d4a128e7-8288-4671-8fb3-4523e6627c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:0e:dd:d6:0a:22:7b:f1:28:9c:58:11:29:
                    bc:66:6a:8b:2a:f2:16:26:a2:43:04:9f:9b:3a:d9:
                    30:eb:8e:6b:4a:3a:b6:6a:84:99:68:22:d6:6f:aa:
                    6b:34:48:20:c2:b9:fb:c7:84:1c:ea:85:32:0f:3c:
                    d4:68:bd:d3:6a:ac:6e:ba:f6:3b:5f:9e:ba:38:8b:
                    68:c6:62:71:87:b4:5a:13:c2:83:c2:51:be:14:e0:
                    27:9e:bc:95:d3:93:82:64:48:49:25:93:73:cd:1d:
                    fb:34:ab:d8:2d:8f:59:78:e5:28:11:5b:b2:eb:ee:
                    ae:57:f8:a6:e6:78:7b:a1:d3:3a:4c:ce:d6:28:e3:
                    f4:62:91:75:70:ea:ac:ad:12:7e:55:c9:44:cb:76:
                    d5:9f:a2:ee:bc:7e:13:81:2d:5f:ed:20:d2:01:9c:
                    84:9f:3d:43:92:0f:ce:9b:9c:a1:cc:67:26:86:dc:
                    a7:28:48:a0:14:ea:4c:95:e5:a4:dc:4b:b5:93:f0:
                    83:c4:bb:3f:8d:ea:1f:08:59:99:d9:ae:55:e9:7e:
                    68:73:d6:f5:39:39:8c:dd:a7:03:54:d7:2a:ff:0d:
                    c9:ac:12:ac:5d:6d:9f:4f:ce:68:26:9b:61:00:aa:
                    43:22:ea:86:cb:ea:2f:c3:f5:d6:f0:c7:38:50:65:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1D:AD:70:89:5C:C4:17:22:A2:71:52:EE:7F:2C:D5:2B:CC:A6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.56.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:27:2b:da:02:b6:78:07:04:36:54:5d:db:6f:b0:22:23:
         da:b9:05:98:c2:22:da:d7:77:79:30:77:72:c1:d5:7a:be:15:
         6a:5d:61:51:3e:f0:6f:9e:ae:4c:f9:69:5a:9f:65:3f:c8:8b:
         3c:78:1f:32:24:fa:ac:3c:d2:2d:f9:db:78:e2:09:8b:07:e8:
         f4:a1:07:eb:cb:60:b6:fe:59:5e:66:63:22:47:72:a8:28:80:
         bd:10:10:6a:d4:fa:80:22:68:9a:40:83:fa:7d:1a:b1:9c:0b:
         84:95:e7:41:2a:4a:03:49:93:6a:7f:a7:50:db:b9:d2:15:0a:
         cd:bd:54:9e:c3:52:42:32:c2:ca:ee:7d:2e:3e:bc:8a:81:ed:
         72:00:24:b3:f0:48:1d:79:fe:53:52:1c:47:da:8e:03:5e:3f:
         b3:28:ec:0b:07:c7:91:6a:28:f8:f5:ab:d4:ae:58:a0:ce:14:
         b9:0c:95:6b:8b:20:c4:35:ce:88:ca:45:ce:33:6d:e4:19:e9:
         75:a5:02:ad:e8:da:9b:ac:71:62:53:cb:15:ea:cc:cc:43:76:
         6e:00:98:9e:4b:4c:68:72:58:3a:fb:8a:a9:3e:b1:b5:8b:00:
         3e:86:b7:34:f7:40:48:07:c9:79:66:88:54:67:dd:54:6e:62:
         73:46:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:22 2026 by rpki-client