Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fd2096d8-571f-388c-bf8e-a818491f75ce.roa
File:                     fd2096d8-571f-388c-bf8e-a818491f75ce.roa (raw, json)
Hash identifier:          0j0tTwJ+yryWc04lUAJ06rTIwJ6/qmPvakIBGnUa7Po=
Subject key identifier:   D1:19:3B:70:64:12:88:83:1E:A7:BA:62:C2:22:96:4E:D2:2F:48:FB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE282F5E3D9FBE155EF2E80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fd2096d8-571f-388c-bf8e-a818491f75ce.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        208.89.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:82:f5:e3:d9:fb:e1:55:ef:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=bc67b174-2b7a-4d9e-be33-f9c63913e680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:3d:3f:35:f1:96:a9:48:cc:a3:70:a3:4e:
                    a2:9b:f8:59:d0:2d:c9:a6:fb:78:02:30:ec:77:9c:
                    20:ac:5e:76:b7:04:77:11:e1:6c:45:33:6c:6c:06:
                    54:a2:79:17:86:68:71:2b:16:3e:f5:59:b7:a2:24:
                    31:0f:5b:d9:f7:15:5e:d7:da:d5:54:dc:a5:fa:31:
                    83:e2:86:9d:2f:f1:71:d5:3d:fe:c2:4e:fc:35:6e:
                    ca:99:00:5b:27:c0:a1:b8:88:2f:d2:01:89:6c:cd:
                    c9:3b:d6:8d:94:57:a6:01:ce:7f:9b:f8:c8:9f:da:
                    91:72:6c:db:4f:93:01:98:00:eb:d4:e4:68:e4:7e:
                    a9:b0:79:f2:26:34:7f:a6:99:76:47:dc:91:52:8e:
                    bb:ab:b0:2c:d3:cc:94:d0:9e:46:4e:49:53:c6:13:
                    45:b8:89:86:d6:7a:ff:e8:fe:11:16:15:75:90:c4:
                    21:9d:79:2e:59:58:78:0e:18:73:aa:77:08:21:ae:
                    cb:55:a8:4a:94:58:21:fc:98:c2:b4:74:b3:30:6e:
                    59:ba:ed:d8:2c:53:e3:14:c9:18:51:cd:c9:1c:a0:
                    92:30:54:10:17:14:10:c7:a0:4a:3a:cb:6e:7a:78:
                    51:75:32:b5:b1:86:60:08:08:bc:df:d0:d8:ee:bd:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:19:3B:70:64:12:88:83:1E:A7:BA:62:C2:22:96:4E:D2:2F:48:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fd2096d8-571f-388c-bf8e-a818491f75ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:bd:8c:31:3b:2c:53:15:a6:c9:be:38:cd:42:9b:74:4c:6f:
         74:62:88:23:05:a8:2c:c7:41:c9:7f:c7:22:39:a3:b9:4c:04:
         98:36:44:48:82:24:ff:00:80:f7:d9:6a:73:b2:40:4e:8a:db:
         1e:22:51:f3:84:98:de:75:06:a9:ca:07:a0:be:9c:e6:d7:a2:
         31:88:81:86:f3:84:00:28:cd:0e:e6:72:be:79:fd:e3:58:1a:
         2d:c0:dc:f9:06:d6:d1:c8:ed:27:8c:25:dc:1a:a3:93:91:3b:
         65:db:fc:24:95:91:4c:de:e2:aa:d1:12:6f:b2:fa:d6:34:3d:
         8a:09:e3:15:cf:fd:42:0e:d3:06:45:47:ac:7b:1d:a5:d7:45:
         33:ee:27:54:09:8e:51:f4:d3:58:d2:fd:69:00:ca:9c:18:8d:
         8b:bc:6d:91:f8:4b:d6:da:8d:78:ef:d7:84:47:53:1b:b9:d3:
         d4:d3:92:e3:9e:83:22:67:fb:fe:17:da:84:bc:90:60:fe:15:
         3b:bf:5c:7d:6d:64:85:fd:d4:62:37:4a:a0:8d:1e:e1:e9:43:
         b4:7e:fd:38:a1:59:e6:0b:b9:66:64:11:23:65:46:f7:e6:bf:
         01:b9:8b:6b:60:4c:6c:35:49:ba:72:43:66:b0:de:f0:65:f3:
         d5:e2:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:50:24 2026 by rpki-client