Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa
File:                     75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa (raw, json)
Hash identifier:          lUMO/WdF+mDCPdWfiRT8sDOKMF/0zAzan8sPVK5pxr8=
Subject key identifier:   E6:1B:C5:FE:2C:8E:D2:AB:2F:F2:08:10:F5:E7:C8:86:65:90:BA:82
Certificate issuer:       /CN=cae558d5-5cb1-461b-9c33-43f664d3b3b1
Certificate serial:       010D0C9F4328584F4973F083EC73082E9D94CEC1
Authority key identifier: 35:50:74:0B:AF:F9:63:BE:9F:E7:D2:B1:D1:16:33:BB:AD:46:52:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        209.142.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f0:83:ec:73:08:2e:9d:94:ce:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae558d5-5cb1-461b-9c33-43f664d3b3b1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a3ff5ba0-40e6-4730-9897-cbb2f0ffbe4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:f9:cf:2d:34:61:de:79:79:d4:ec:38:2a:
                    7e:99:03:c9:ec:81:1b:dd:c6:d9:0b:ff:c5:03:8d:
                    1f:da:29:46:fd:af:58:95:83:66:28:79:a2:91:32:
                    51:d3:94:ef:83:c2:0a:69:90:27:9c:59:0d:a2:6d:
                    1b:25:87:2c:2e:cd:15:0f:18:06:ee:2c:51:e6:89:
                    00:c5:8d:01:f2:79:66:42:e8:46:e5:0f:ac:1e:f2:
                    2b:e7:b3:9f:9c:a3:91:3e:51:10:dc:a1:60:08:ff:
                    26:93:af:ab:47:a8:ef:51:a1:4b:d9:ac:9c:b0:69:
                    6a:01:3a:0f:5d:8d:90:16:28:de:30:9a:c3:0e:34:
                    b9:a5:59:6c:82:23:07:a3:0c:c4:ce:40:38:26:5e:
                    5f:26:41:80:ec:e7:db:f1:98:9d:c7:38:68:cb:ee:
                    f5:cc:55:33:28:4d:fd:5f:c0:78:ce:78:08:e3:e5:
                    77:c8:8e:e3:a7:dd:a3:d2:c5:85:ae:61:bf:99:d8:
                    24:05:3e:56:33:3a:76:b7:fe:a5:59:07:e5:09:d2:
                    52:fd:e6:37:4a:8e:98:c6:d4:cd:61:bc:11:48:f2:
                    1b:d1:9c:1a:c1:57:9b:73:79:04:47:22:3f:d8:b4:
                    a5:95:89:3e:5f:6f:db:6c:ed:cd:cc:b9:6b:c5:2f:
                    2e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1B:C5:FE:2C:8E:D2:AB:2F:F2:08:10:F5:E7:C8:86:65:90:BA:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.crl

            X509v3 Authority Key Identifier:
                keyid:35:50:74:0B:AF:F9:63:BE:9F:E7:D2:B1:D1:16:33:BB:AD:46:52:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:f6:39:56:b6:ab:da:94:48:36:86:31:63:a3:3d:fd:7b:
         7c:7f:cd:66:2c:8d:1e:2a:67:98:e3:24:9a:8d:4d:3e:d2:03:
         b2:bb:70:c4:c5:0c:94:a8:c0:9c:47:ba:0a:db:c5:29:ed:f4:
         0c:07:78:f7:1a:c6:23:55:ae:b1:52:90:16:77:71:24:7a:6f:
         8b:7d:68:8d:56:cb:40:76:c2:bf:9a:7a:db:59:c7:da:ea:46:
         72:14:4b:23:ba:66:1a:98:71:60:b7:cf:06:79:0a:1e:4e:04:
         7e:fd:1e:43:ea:cf:b2:20:d0:23:f7:ed:9f:f5:bb:5a:c1:0c:
         b9:58:ed:c2:db:d1:e6:96:f1:2d:90:d5:b6:59:be:2a:7a:72:
         e8:d8:db:ea:04:33:24:1c:0f:3a:81:7b:d7:f6:c3:df:88:13:
         ca:08:d4:1b:69:f0:b2:da:46:cd:61:1e:50:10:1f:f8:cf:2d:
         14:1f:ca:6d:c1:46:8f:b6:b0:87:cc:5f:9e:da:38:c1:96:f9:
         5b:26:4e:5f:74:5c:73:55:d1:bd:20:0d:d5:75:cc:45:8d:79:
         43:66:b5:4a:77:70:e1:8c:b5:1a:85:0a:29:c1:00:c5:8d:dd:
         36:7d:92:77:ea:a6:1b:1c:8e:a4:e8:16:7d:ec:52:3a:4f:16:
         c9:aa:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:22:57 2026 by rpki-client