Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/eec201eb-80a2-3a8c-9d19-e062900e1d78.roa
File:                     eec201eb-80a2-3a8c-9d19-e062900e1d78.roa (raw, json)
Hash identifier:          5J+gVBBF9tkcnl8ZD+VhHvXUeTtlry1TfWlzrrFl2W8=
Subject key identifier:   D9:74:72:44:48:A8:9F:7F:61:F3:D2:D7:55:AD:E0:B4:4D:99:46:08
Certificate issuer:       /CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
Certificate serial:       010D0C9F4328584DB7702C050ED834175B04B520
Authority key identifier: C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/eec201eb-80a2-3a8c-9d19-e062900e1d78.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     22885
IP address blocks:        209.46.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2c:05:0e:d8:34:17:5b:04:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=86c9879a-f35a-424c-af7c-c4cc9df189d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:34:d6:2b:2f:69:5e:62:5e:cc:d2:99:27:
                    d7:01:c9:46:4f:2e:9b:a6:c7:f0:e5:22:de:b6:39:
                    b3:01:60:c5:14:c7:a6:98:60:14:9d:43:fd:13:97:
                    d0:15:27:84:a6:72:20:60:0c:7b:73:de:0d:ad:82:
                    7e:0a:af:57:3c:00:3a:22:90:76:e7:7d:8e:a3:55:
                    cd:07:7b:c4:3a:e8:6d:b6:e9:fa:1a:e8:03:a7:c8:
                    29:31:be:41:44:99:c1:3c:e4:ae:71:17:2a:be:7a:
                    83:f9:17:57:37:8f:31:ea:ab:0f:fb:b2:dc:f2:aa:
                    f3:c6:f7:a3:e3:8c:dd:9e:8c:13:2d:60:d2:b1:89:
                    32:c2:0c:04:12:bc:00:e0:b0:41:0f:cd:4f:b9:f0:
                    88:54:ac:82:41:fe:2a:7d:c6:a7:60:09:16:29:82:
                    a0:4e:5c:d9:79:47:a3:ff:a8:b3:73:fe:ef:5d:e4:
                    de:32:12:06:a1:41:80:b1:67:38:06:2b:ca:6b:4d:
                    7f:40:87:2d:c3:c3:29:5f:cb:d1:9c:7b:1f:03:b3:
                    67:60:0f:68:27:d1:e4:b7:6f:bb:35:41:4a:79:62:
                    81:ab:97:c3:a6:53:56:87:dc:ac:23:e5:46:1a:ff:
                    a8:4c:d9:30:14:32:21:2b:f0:0b:cb:0b:df:af:d0:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:74:72:44:48:A8:9F:7F:61:F3:D2:D7:55:AD:E0:B4:4D:99:46:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/eec201eb-80a2-3a8c-9d19-e062900e1d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl

            X509v3 Authority Key Identifier:
                keyid:C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:d9:8f:54:32:9d:c5:97:df:d4:4c:6f:a5:a2:1e:b2:4f:
         2c:d6:14:8f:49:4a:43:5a:22:7a:70:66:ec:d1:1b:46:72:95:
         c4:fe:e6:28:f1:bb:97:6d:2d:e9:49:fe:10:e4:26:b7:93:93:
         a2:60:ea:11:a7:cc:b5:db:ec:7e:21:83:51:e2:36:bb:3f:49:
         f3:7a:85:fb:bf:3a:e4:75:15:db:2e:a1:87:1f:32:66:9d:a7:
         48:00:d4:1a:9f:4e:87:65:07:8b:4a:f8:6d:a5:69:9f:13:86:
         57:0c:96:d7:22:97:1b:e7:8b:f9:ff:97:e9:7b:9d:e2:8d:d1:
         81:8f:ac:de:7b:f5:16:7c:a0:76:70:24:3e:37:6d:2f:ef:28:
         82:26:97:16:14:ac:8d:23:2d:14:a9:da:b5:14:cd:2d:20:b9:
         9b:ed:3e:72:96:88:35:1b:23:d8:c7:60:35:53:86:c9:a9:8c:
         00:2b:fb:e0:62:df:00:ff:10:d9:24:91:9d:d0:c7:34:67:64:
         a5:83:9a:b6:88:d2:6b:16:e3:81:ac:66:5e:cd:71:19:45:13:
         21:ef:e0:04:99:fd:70:47:22:ce:45:6c:b6:a5:4a:f3:63:88:
         dd:c9:28:c0:5a:a1:e4:ee:c7:e2:c8:56:f7:37:9d:ba:90:40:
         ce:cc:06:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:13 2026 by rpki-client