Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa
File:                     2338458a-35c8-3785-8934-34add329d7cf.roa (raw, json)
Hash identifier:          Dc0gE9NZLI6b5StSrZ+GXwVykaW4R8LE9icq5O/dXPE=
Subject key identifier:   F4:7C:AC:F6:0A:13:C3:0F:79:D4:1D:9B:E2:35:F8:F2:5D:BF:25:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5A330431C134E2AA34DD5CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     7342
IP address blocks:        209.131.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:04:31:c1:34:e2:aa:34:dd:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=f308e667-159c-4a50-bfcb-e17c464c6f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:ba:32:01:8a:6b:dd:08:52:ce:6d:05:45:
                    ff:50:7a:ff:7c:ae:65:c0:46:92:21:43:b6:13:a8:
                    a1:9a:70:18:ef:67:b9:2f:dd:67:cd:a8:a3:93:0c:
                    e6:66:20:53:7f:d2:ed:f1:89:9d:55:dd:c3:09:a6:
                    71:a8:88:91:39:b1:95:83:0b:9a:f8:d6:55:a4:9d:
                    35:8b:72:c8:d0:c5:95:71:a2:a1:d3:5e:f8:73:28:
                    af:fd:60:0f:0d:12:7f:ab:c3:bc:73:cf:1c:61:04:
                    c8:ed:aa:23:49:bf:98:d7:38:97:ae:e9:ed:c2:60:
                    f6:73:cd:6b:a2:06:b8:eb:75:06:c4:11:2a:26:f7:
                    05:34:db:0a:d7:c8:81:92:ca:51:4d:08:c4:f1:3f:
                    c6:2e:9a:0f:e0:fa:66:b7:18:12:99:7a:ef:ee:da:
                    2b:a1:02:47:5b:9e:8a:3b:a7:7d:be:1b:94:b6:9c:
                    ad:7a:66:1d:1c:d2:95:52:42:42:b4:24:61:b6:8e:
                    37:0a:63:2c:fe:51:18:3e:5e:6d:96:f4:d9:cf:1d:
                    d7:d3:54:a8:23:86:ca:13:df:45:31:5f:c8:ca:be:
                    e7:e8:d6:40:40:63:0f:29:bf:e6:b5:5d:b7:c0:e5:
                    e6:24:73:56:ca:12:67:f4:31:a7:44:3e:66:32:1d:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:AC:F6:0A:13:C3:0F:79:D4:1D:9B:E2:35:F8:F2:5D:BF:25:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:82:22:cf:d0:55:99:c0:4d:4b:b5:de:e7:ff:0b:05:b8:ce:
         3e:15:b2:78:d4:21:ce:da:f4:05:3e:fe:7f:ce:2e:30:f5:7d:
         43:8e:5c:22:7b:db:d4:92:18:8b:fc:2b:6f:af:36:94:ac:36:
         01:dd:f5:4c:f1:0d:c4:61:d9:a0:b1:b3:25:43:f1:c6:c4:33:
         4e:87:96:a5:bf:12:36:f8:5c:a0:e9:ff:42:b6:2c:01:4b:a2:
         57:2d:2e:88:9e:e1:c3:95:31:93:a3:85:d1:74:3d:11:2c:ae:
         11:f8:a8:9f:a1:cd:42:5b:c0:ae:90:3c:bf:3b:47:df:97:18:
         75:a1:f4:53:ac:ec:8f:97:62:d1:be:a9:6c:07:fd:e6:c8:eb:
         09:f3:df:4f:04:2b:2d:7f:d0:b0:2f:c2:4f:0d:43:8b:17:62:
         95:7f:81:f1:5b:e6:d3:04:8e:43:ac:9a:dd:3b:58:10:d2:79:
         00:f1:7d:d9:ad:35:a3:41:fc:72:86:05:fd:d2:16:03:54:11:
         12:9d:7f:77:df:ba:86:65:df:07:c9:bb:da:53:75:09:b7:ba:
         a0:92:10:34:2e:bc:79:a7:cb:a3:0a:73:4f:e7:b2:a4:a6:db:
         bd:b6:62:8b:98:db:0c:1e:84:20:fa:1e:70:ad:92:1a:94:fe:
         13:87:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:25:42 2026 by rpki-client