Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa
File:                     87c25570-4629-3e86-92ae-ad1b08d37561.roa (raw, json)
Hash identifier:          oxsAsJ54ipscZfuA452Tbq8pnDWbHesVtHf/7VlZN8k=
Subject key identifier:   C1:63:87:EB:6D:DA:DC:B5:91:8F:75:64:E2:37:A2:E9:CA:D8:C8:BD
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584F225D003F0D2BC95091153800
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     22808
IP address blocks:        206.48.244.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:00:3f:0d:2b:c9:50:91:15:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=6de037aa-a3e3-4e39-8217-fa1767b526a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:76:3a:7c:82:51:07:b7:67:0c:35:cd:de:
                    e4:f4:ca:09:89:0e:3d:82:d1:30:71:39:9c:ca:28:
                    6e:2e:ab:8d:7b:59:28:b1:e2:92:40:24:6b:e3:c7:
                    f3:77:69:b3:fe:08:67:7b:44:79:e4:ff:7e:a4:d2:
                    86:92:b3:7f:f4:c3:fc:f4:40:64:1e:e6:06:d7:45:
                    89:9c:2e:c2:f1:f2:af:6e:96:d4:9c:2d:8d:6a:9b:
                    de:62:73:a6:d6:8b:c4:09:52:0f:c4:cf:3b:0a:7c:
                    6e:8b:12:2b:b3:12:fc:51:f6:07:5a:11:df:fa:f3:
                    9f:9a:ce:af:e4:2c:a5:c7:0b:7a:62:89:b5:0f:26:
                    2f:a2:f7:db:24:f1:b7:73:03:a7:4d:46:3e:a2:f1:
                    e8:8d:94:b1:0b:15:59:50:b2:39:be:bd:bc:51:10:
                    3c:40:47:19:3f:56:d7:97:ce:aa:19:b4:06:6c:af:
                    8d:b4:98:d2:16:e7:1c:90:9f:fe:10:79:e3:0d:f2:
                    bc:68:70:a6:f7:d2:1f:68:c7:ba:13:33:5f:a5:93:
                    8a:8c:83:10:25:40:e3:a0:9d:a4:55:14:d8:4e:fd:
                    5c:ae:85:9e:89:cf:b6:d3:66:51:91:e4:1d:6d:b9:
                    fe:ab:e2:93:e6:fa:be:90:bb:ca:ec:7d:54:ca:1b:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:63:87:EB:6D:DA:DC:B5:91:8F:75:64:E2:37:A2:E9:CA:D8:C8:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:a2:a7:20:3e:bb:a1:50:17:3a:16:e4:c7:26:30:73:f1:
         a8:66:3a:f0:1f:66:eb:42:e3:a1:00:20:ce:e7:69:15:96:43:
         fc:1d:c1:48:7b:ff:c1:64:17:67:62:57:ac:92:3b:42:85:24:
         b6:e4:eb:32:b6:b3:93:99:2d:d6:c1:fe:83:e9:a9:54:26:73:
         0c:50:1c:ce:2f:1a:7d:8f:bd:b0:71:5b:84:2a:e5:a1:cd:ef:
         4d:f5:9e:db:8b:ea:78:65:a2:21:90:71:6b:f1:04:e2:04:04:
         f5:62:53:6a:d8:fd:17:5f:68:23:f2:76:db:5a:0b:2a:d1:b1:
         be:95:b8:16:aa:61:61:f9:8a:29:e0:ea:b3:be:ed:9b:54:4f:
         05:92:da:ec:4a:ea:da:7d:aa:1d:db:13:39:1b:11:f8:14:70:
         ee:41:11:ba:83:af:a8:d9:35:08:a8:cb:8a:ca:89:37:bf:89:
         3d:65:70:13:b4:e8:35:3f:57:2e:d1:e6:ed:11:04:70:de:67:
         db:e9:78:5a:e7:76:29:3f:58:71:4c:04:ec:40:a0:04:df:2b:
         27:8d:11:ab:3e:12:e5:54:57:52:43:5d:32:a4:e1:a1:e4:f4:
         9f:0f:f2:9c:9f:1b:23:1d:6c:74:a1:6f:d3:63:19:30:bd:2c:
         f9:6e:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:28:33 2026 by rpki-client