Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa
File:                     f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa (raw, json)
Hash identifier:          x7GjXQnuWN8+I2XJCnjM001GZidbiI0afWV/PaHfmFQ=
Subject key identifier:   D8:95:82:02:48:FE:BC:DF:10:40:30:8F:66:A5:0E:25:A9:32:A6:ED
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584F63F822106239FC697125F780
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     33211
IP address blocks:        206.41.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:22:10:62:39:fc:69:71:25:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=c677a15a-b5d2-4585-a124-18d7c627734e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b1:3e:fc:49:b7:9b:43:77:2d:af:82:da:1d:
                    b6:1e:3f:8c:27:49:d8:a4:7c:0c:26:1a:1c:39:dd:
                    77:99:ff:ca:3b:d6:1b:f1:e2:7c:00:fd:8a:f3:94:
                    64:c6:33:c1:85:b6:1f:a3:a8:f7:ae:3e:69:c5:9c:
                    83:2a:ee:a2:b3:0c:2d:3f:2f:40:80:1a:1e:11:d7:
                    4e:7e:44:9a:f3:95:6e:69:7d:62:39:23:b2:3d:d5:
                    6b:81:80:a1:96:69:a5:3f:a9:21:8b:96:84:22:45:
                    3b:73:ea:6e:6e:45:82:e7:86:f8:9f:68:24:e6:53:
                    63:15:fc:94:53:3c:0a:1f:6e:3c:17:f0:d0:f7:5e:
                    00:c2:20:73:27:17:e5:57:67:1d:94:e2:03:b3:8c:
                    f1:32:6e:44:cb:5b:90:9a:a1:d8:77:3f:12:d7:d5:
                    c7:7a:5e:2a:fc:33:69:0a:ef:2d:9c:0e:05:7e:b2:
                    3e:a2:93:86:3e:ee:2e:10:ca:3f:ba:35:31:ab:37:
                    95:e2:fe:79:2f:4a:d3:43:04:27:a5:1d:0d:1d:06:
                    3d:1a:04:cf:c4:2d:2d:09:c2:17:33:06:46:26:38:
                    76:f6:19:a2:32:20:e6:2b:83:84:28:fa:0e:a7:17:
                    c2:af:68:d8:49:23:6e:68:76:03:7b:61:3e:64:85:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:82:02:48:FE:BC:DF:10:40:30:8F:66:A5:0E:25:A9:32:A6:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:35:31:46:eb:28:45:cd:af:8a:7a:51:2e:12:5a:c1:7e:
         36:0d:7f:5e:7d:b1:bc:1c:97:75:d7:d3:cf:2d:e9:82:05:6b:
         f4:ec:bd:d1:e9:95:97:50:9a:a5:d2:9b:58:a8:8b:cd:c9:a2:
         8d:f4:46:a6:ce:08:b8:cf:06:f1:f1:b0:12:a5:fe:2a:fa:4d:
         7f:df:92:88:1b:ce:c1:b5:ad:41:35:06:10:c6:24:6c:ce:6c:
         98:db:9f:5e:da:75:1a:a1:30:92:63:94:df:33:5a:e1:0c:67:
         66:be:d0:73:8f:2f:75:7e:31:61:d7:7c:9f:df:c6:4e:6a:6e:
         94:ad:f9:d0:36:e0:01:3e:42:f3:cc:28:c1:9e:ea:f3:81:3f:
         51:d4:e5:8f:ff:62:04:24:b3:2d:7b:ec:fa:61:c2:e0:6c:bf:
         04:de:79:36:a6:a0:e3:88:10:e9:22:b1:d8:b7:70:32:47:0f:
         28:c8:1f:b9:8d:9a:31:74:09:4d:67:60:e8:24:28:cd:37:61:
         f3:f3:0a:7e:1b:77:8e:62:e6:1a:c7:53:54:c6:c2:65:6c:90:
         6e:3d:fd:45:24:55:a7:b8:a9:fc:7f:0a:76:b1:79:e0:af:a7:
         f6:d6:d6:75:c5:91:39:72:1a:f2:a6:36:57:4d:ab:83:cb:d0:
         a0:a9:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:53:41 2026 by rpki-client