Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/ec387bd3-807d-3465-a590-709afcc2c134.roa
File:                     ec387bd3-807d-3465-a590-709afcc2c134.roa (raw, json)
Hash identifier:          3/rN3L7QrB76fpxIDc1se/vrMdsx+aD69zEyCh7a26I=
Subject key identifier:   4A:35:5E:B0:68:78:68:B1:0B:AE:C8:4A:F5:ED:99:18:89:BE:CD:D3
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584F4974A354091BDDF29882B8E0
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/ec387bd3-807d-3465-a590-709afcc2c134.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7385
IP address blocks:        208.186.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:a3:54:09:1b:dd:f2:98:82:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cd0f2d74-14d1-4d2a-9969-bbbc9bfc53bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:5c:96:1b:53:df:c6:7b:5f:f8:07:87:77:
                    08:bc:6c:6d:70:7b:00:4d:2d:95:6c:4c:dc:9d:e4:
                    e5:0a:cf:41:fe:30:61:42:d6:5d:98:9f:cd:12:80:
                    72:0c:90:49:8a:37:e4:59:dc:99:8e:6c:1b:be:01:
                    03:42:a7:3e:ef:95:f1:23:91:f0:e2:83:7c:d5:48:
                    41:f9:20:ea:c5:eb:17:59:57:5f:ba:83:d1:4c:c0:
                    2f:58:6d:b7:19:49:ba:57:71:3e:e0:a7:6a:1f:6c:
                    1c:e8:6e:b6:74:04:e9:ae:e7:93:ad:16:1e:f7:4e:
                    88:3b:fb:c7:ad:91:d2:fa:6c:6b:86:ed:a7:66:bc:
                    00:7c:3f:75:42:a4:ef:57:18:4d:9f:ad:6f:b6:15:
                    f9:13:29:d3:d8:ad:df:e3:9c:78:f3:84:3b:22:05:
                    02:c3:45:3f:9b:02:40:61:13:cd:91:bb:a3:aa:09:
                    5a:9d:48:20:3f:45:a7:f4:26:64:1c:4c:9d:34:65:
                    e0:fb:62:ee:8d:62:b4:53:81:13:04:7f:e6:b4:d1:
                    dd:5f:66:43:bc:e4:45:ba:93:a0:3e:56:f7:11:28:
                    7c:06:19:69:8d:81:1b:c3:c1:d4:a2:57:44:66:35:
                    3f:b9:66:95:6b:92:ef:77:8d:2f:b0:a3:7c:79:d8:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:35:5E:B0:68:78:68:B1:0B:AE:C8:4A:F5:ED:99:18:89:BE:CD:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/ec387bd3-807d-3465-a590-709afcc2c134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.186.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:53:c8:b8:bc:3f:ab:65:33:a5:03:14:8a:eb:f0:70:bb:7a:
         d4:1f:3e:68:c7:9d:32:ac:b5:ac:4d:6d:36:17:15:86:2f:78:
         e3:ee:6b:c6:f0:11:05:9f:17:65:4b:4e:7a:ad:71:d0:cd:ff:
         7a:16:f2:ff:f4:6c:40:90:d7:10:ca:cf:8f:6e:25:71:64:56:
         e5:57:e5:76:21:30:66:23:62:9f:86:6a:c5:1d:c2:bd:0b:8a:
         5e:d3:63:8f:4a:c2:00:a5:2a:1f:94:a3:fc:74:a2:77:f5:fe:
         32:28:97:21:3a:e1:83:aa:b4:53:60:7e:ef:8f:79:e6:ba:0a:
         de:25:44:38:32:21:af:da:50:10:93:e8:92:6c:94:af:24:a3:
         00:ad:19:04:23:9d:95:3c:4d:ff:3c:96:6b:63:25:98:97:b0:
         71:1c:a5:45:9c:74:17:ce:06:6c:32:53:2a:45:ac:32:4e:be:
         b8:1d:38:31:db:21:5d:39:9f:90:7e:de:5e:33:c2:e2:03:0c:
         93:04:fc:1e:82:f3:b0:72:55:65:f2:6f:23:51:23:39:70:1c:
         b6:d3:67:5a:aa:4b:5e:53:80:64:20:b1:46:a9:67:bf:cf:94:
         e7:8f:2c:c9:09:99:4a:92:6b:9e:7c:90:8b:2f:0e:93:1a:9b:
         12:6b:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:44:25 2026 by rpki-client