Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa
File:                     c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa (raw, json)
Hash identifier:          hbR7QrllTP4KE6QzRxEpJ4yALwVPGocOWW4p8PNGMBA=
Subject key identifier:   BE:6D:F6:37:0D:3F:8E:1F:3E:E9:6E:B7:24:CF:3A:FF:F9:5C:B3:DC
Certificate issuer:       /CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
Certificate serial:       010D0C9F4328584E76A68922DA4524BE9C3A2980
Authority key identifier: 2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa
Signing time:             Sat 11 Jul 2026 12:49:27 +0000
ROA not before:           Sat 11 Jul 2026 12:49:27 +0000
ROA not after:            Fri 09 Oct 2026 12:49:27 +0000
asID:                     17274
IP address blocks:        207.229.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:a6:89:22:da:45:24:be:9c:3a:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5daac0f-4c03-4977-95e3-914ed717fe6e
        Validity
            Not Before: Jul 11 12:49:27 2026 GMT
            Not After : Oct  9 12:49:27 2026 GMT
        Subject: CN=dce8e4bf-c27a-4c90-afe4-541aee2d137d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:f3:92:04:7c:7d:a9:42:1d:9c:b2:d6:a7:
                    f6:a5:a8:b8:14:aa:d1:88:7d:29:8a:08:99:fd:6a:
                    6a:23:f9:0a:60:c8:f6:4a:fb:f8:6d:e5:02:e1:cc:
                    1e:93:06:5e:1a:b9:a9:4c:aa:18:54:c5:11:05:ad:
                    8a:72:f6:b5:97:ac:67:23:d6:8b:0d:70:b5:45:5d:
                    9e:85:96:02:cf:24:cf:af:2b:09:8f:9f:11:f5:29:
                    cb:f4:f3:85:b9:6f:cc:47:a5:d3:81:de:75:90:b7:
                    ee:00:9c:89:03:6e:5e:f5:86:e6:d6:22:32:6a:90:
                    15:6a:bc:69:0c:4b:3a:a1:df:6b:95:28:59:13:e8:
                    0a:6b:ca:9f:bd:ae:2a:01:89:ba:eb:07:97:5f:be:
                    17:47:46:64:fc:c8:e6:05:bc:1d:60:da:7b:2a:0d:
                    b3:84:ee:0b:40:07:29:fb:60:8e:24:45:17:d0:c9:
                    7a:a0:12:b0:6c:d9:10:20:32:08:71:3c:2f:66:43:
                    00:2e:cd:c7:e0:57:07:41:a6:f5:69:e3:9d:34:85:
                    d4:59:f8:7c:c1:e2:2f:5c:e3:fb:eb:2d:fe:a8:3b:
                    72:51:6a:fc:86:56:77:56:c8:77:64:35:4f:5c:6d:
                    3c:1a:67:8f:97:68:32:0d:75:4c:71:fe:2f:c3:4f:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6D:F6:37:0D:3F:8E:1F:3E:E9:6E:B7:24:CF:3A:FF:F9:5C:B3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/c9764e96-0183-3e07-89dd-e8e578f4b0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e/a5daac0f-4c03-4977-95e3-914ed717fe6e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:AB:CB:92:B3:A6:48:C0:82:25:1A:65:26:C1:3C:C5:19:BF:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5daac0f-4c03-4977-95e3-914ed717fe6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:ce:67:4f:ad:79:c8:4d:38:6b:4a:54:20:51:a9:f5:ac:
         f9:59:c5:f5:f9:0d:07:0d:28:bb:9b:65:32:d6:65:cc:81:13:
         a3:f2:3f:44:c9:56:89:28:a7:f0:1f:ff:66:91:81:f5:c5:88:
         d6:65:c5:b1:b4:e2:e8:eb:c0:39:01:5d:e1:51:85:41:3b:42:
         66:f0:06:ae:26:ab:28:d1:39:11:bf:db:0c:96:18:b5:a2:d9:
         df:da:df:72:b3:0f:68:ef:26:d6:56:33:19:06:7b:4f:de:2b:
         a9:d7:97:ed:0b:33:13:76:aa:7e:27:da:32:a7:95:21:42:9f:
         cc:09:d7:55:03:98:51:53:f4:6e:71:d7:61:0c:fd:a4:01:29:
         cf:9a:71:dc:aa:7f:d8:2d:94:8e:20:32:38:08:b8:6c:c5:6f:
         29:63:94:2d:01:65:38:59:c1:42:ce:8b:bb:7d:ca:cc:93:96:
         dc:f6:2c:60:05:f4:e4:5f:b5:5e:5f:ff:4f:f9:4c:ae:1b:e1:
         3b:08:8f:c7:05:14:99:f7:ce:39:e2:f9:c2:3b:d0:ac:64:52:
         f8:85:b4:ff:e4:4e:a3:f4:c6:e3:ee:4e:57:ca:f0:3c:4f:00:
         2c:e5:9b:e7:b9:e7:21:58:10:e5:be:64:88:df:1a:26:13:d2:
         43:cd:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:43 2026 by rpki-client