Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a/9d8c6000-8d30-3695-949f-b1e5dcdfb5e8.roa
File:                     9d8c6000-8d30-3695-949f-b1e5dcdfb5e8.roa (raw, json)
Hash identifier:          ffdGCuJUK9rvlighCXgTWoO234B5TddBuvCi+JJDDDM=
Subject key identifier:   C9:F0:1A:6A:79:BA:D7:A3:B4:4A:47:E0:A6:FE:E0:30:A0:48:81:D9
Certificate issuer:       /CN=ddc88354-9cf9-4a68-b623-9353d437800a
Certificate serial:       010D0C9F4328584F7018686A671AD623C5E70700
Authority key identifier: 7F:AD:F9:63:BD:01:6D:3A:11:0E:9D:40:38:C7:88:C8:D6:A5:85:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a/9d8c6000-8d30-3695-949f-b1e5dcdfb5e8.roa
Signing time:             Thu 08 Oct 2026 21:15:10 +0000
ROA not before:           Thu 08 Oct 2026 21:15:10 +0000
ROA not after:            Wed 06 Jan 2027 22:15:10 +0000
asID:                     40300
IP address blocks:        208.111.56.0/21 maxlen: 21
                          208.111.56.0/24 maxlen: 24
                          208.111.57.0/24 maxlen: 24
                          208.111.58.0/24 maxlen: 24
                          208.111.59.0/24 maxlen: 24
                          208.111.60.0/24 maxlen: 24
                          208.111.61.0/24 maxlen: 24
                          208.111.62.0/24 maxlen: 24
                          208.111.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a/ddc88354-9cf9-4a68-b623-9353d437800a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a/ddc88354-9cf9-4a68-b623-9353d437800a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:18:68:6a:67:1a:d6:23:c5:e7:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc88354-9cf9-4a68-b623-9353d437800a
        Validity
            Not Before: Oct  8 21:15:10 2026 GMT
            Not After : Jan  6 22:15:10 2027 GMT
        Subject: CN=4534050b-1b36-48c0-8d85-2c4bf872a4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:60:49:57:d2:08:70:57:58:d9:a8:2c:8e:
                    6a:38:9b:0a:28:5d:35:f4:c8:b7:c6:2f:ef:86:70:
                    85:82:16:cf:06:10:4c:09:cf:fd:ff:d7:2d:43:fc:
                    53:00:8d:f9:0b:90:31:37:dd:63:70:c0:33:fc:04:
                    e3:ab:f9:47:b0:a3:c0:bb:40:46:7e:6b:06:61:bf:
                    29:e5:b0:d4:af:74:95:68:42:99:dc:d0:ad:2b:5c:
                    32:59:5c:ff:af:9e:01:e5:40:66:b7:62:72:e3:45:
                    06:b6:83:1e:ac:ac:cf:6b:cf:b8:10:68:ab:10:ea:
                    24:e0:88:47:3a:08:22:b5:ca:45:28:0a:30:a7:ab:
                    b0:ce:05:a1:24:bc:a4:46:ac:9d:39:d8:e2:80:68:
                    39:2d:11:b5:04:c7:d0:53:c4:a2:2e:7e:82:b8:0c:
                    9e:61:b7:7b:bc:ad:25:24:60:e9:dd:4b:91:a6:50:
                    2a:3a:b8:6c:85:30:63:a2:fe:11:a9:0b:cf:64:fd:
                    6b:46:94:57:a7:b0:2f:6e:3c:11:a3:07:d7:f1:f8:
                    e1:53:51:ea:2d:f1:47:74:92:90:9a:bc:08:0c:ef:
                    db:c7:5b:c8:f6:ed:fb:5f:3e:2d:43:d5:22:c1:35:
                    bc:9f:75:b1:0d:1a:83:23:8d:91:92:1a:f9:0c:05:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:1A:6A:79:BA:D7:A3:B4:4A:47:E0:A6:FE:E0:30:A0:48:81:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a/9d8c6000-8d30-3695-949f-b1e5dcdfb5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a/ddc88354-9cf9-4a68-b623-9353d437800a.crl

            X509v3 Authority Key Identifier:
                keyid:7F:AD:F9:63:BD:01:6D:3A:11:0E:9D:40:38:C7:88:C8:D6:A5:85:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ddc88354-9cf9-4a68-b623-9353d437800a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:ea:d5:65:a9:5d:c8:9a:50:c0:50:e5:7e:ec:bd:a8:5c:
         c6:d4:7f:a3:1f:a6:49:df:de:c4:25:e6:73:c8:31:0a:2d:e5:
         22:65:33:6e:42:4c:dc:55:39:84:08:0a:e5:e0:5d:44:51:cc:
         3c:95:29:2f:e7:a8:e9:5d:e5:1c:40:39:dc:89:66:ed:a8:ed:
         07:5b:5e:a5:bf:db:58:91:2e:82:42:63:af:b6:78:aa:3f:54:
         79:d7:63:07:e1:85:14:5f:d8:3c:32:0e:05:3b:a8:69:a0:d3:
         4a:13:8d:e9:6b:aa:96:73:76:c3:9a:bc:5c:b0:9f:5f:1f:91:
         96:3a:8c:5f:68:19:3c:64:df:69:6d:24:d0:63:e5:76:3e:a6:
         27:47:ad:d7:ac:67:95:df:68:95:f3:fd:4c:35:8e:25:92:34:
         b5:6a:60:66:db:86:7e:ca:65:b0:e6:c4:43:b0:ea:71:e2:38:
         42:31:e9:82:0f:d4:51:bb:79:be:50:73:b6:52:bc:59:1d:39:
         02:e7:c7:a0:28:91:8c:5c:e9:99:7d:26:29:a0:63:96:e0:a5:
         c3:4d:44:69:32:69:ba:02:e2:7b:74:03:57:d4:10:8c:66:ff:
         37:8a:f0:27:2a:42:28:31:b1:7e:22:40:19:47:7d:17:f2:47:
         70:3f:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:16:52 2026 by rpki-client