Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa
File:                     2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa (raw, json)
Hash identifier:          GnTO29XbQJ1FiuEDgJQOZiARkgjvP/AQktvXyLVLXHM=
Subject key identifier:   DD:23:ED:AF:6A:18:52:62:5A:FC:1F:92:D9:43:0C:22:00:AB:D0:A6
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584F497D0738C511F84B71010000
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        209.107.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:07:38:c5:11:f8:4b:71:01:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=abb7cfe4-e617-4352-b18a-1d6b3ecb4868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:49:9a:a3:1e:3d:83:e4:3f:d9:04:de:da:
                    7d:68:6a:8b:9f:a3:e3:05:91:74:57:55:3d:dd:fb:
                    2e:51:22:bb:6b:8f:bb:a7:50:1e:06:bb:2f:8c:69:
                    47:fd:db:b1:91:ea:e5:de:37:05:f9:00:fa:9f:ed:
                    88:a6:d4:0a:9b:d3:ce:09:b6:70:87:f1:9c:3c:42:
                    bc:6d:c6:0f:2e:bd:fd:ae:e5:aa:82:f8:c3:b9:ae:
                    10:6d:d4:cc:1b:93:bd:99:1f:3b:51:ff:7a:d7:b1:
                    0d:ae:31:a7:c7:a7:6d:ae:93:e6:82:13:1f:ba:6b:
                    3d:f5:90:55:3c:52:79:61:66:47:c5:f1:9d:ff:bb:
                    95:8e:f1:19:19:59:12:4d:83:13:2c:74:59:10:42:
                    56:06:80:0f:2f:3f:87:2c:c3:05:17:d5:a2:d1:ea:
                    86:38:24:f3:fe:8c:e0:c4:1f:7e:f9:76:0d:a5:9d:
                    8f:6e:1c:b6:02:3d:32:a5:98:3e:5f:fa:d7:3b:91:
                    ef:ae:28:f7:89:e9:6d:d6:73:e7:a9:34:71:fc:42:
                    61:a7:5f:b1:41:2b:bb:7b:7b:33:4c:10:4c:c3:0b:
                    ae:a6:26:a8:34:2d:9c:ff:62:61:22:f3:2e:a3:ca:
                    b0:04:20:f4:c8:a9:70:46:3b:87:6c:21:af:81:68:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:23:ED:AF:6A:18:52:62:5A:FC:1F:92:D9:43:0C:22:00:AB:D0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2a9fd13b-0666-34b8-b8c2-074c52f22efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:69:0f:02:e4:12:11:a3:a8:bd:90:78:c8:67:5c:cf:89:
         8b:69:ae:2f:a3:b5:99:9d:e4:c5:bf:6f:f2:0e:2f:36:32:80:
         82:6d:9f:0f:77:49:d4:a4:0b:32:c0:dc:cf:4b:21:6d:10:18:
         f6:0a:0d:0c:96:00:b8:36:0e:03:d3:33:da:6e:d3:ac:2f:51:
         b0:36:f2:29:89:01:b5:e4:8f:e0:60:09:fb:a1:85:05:e1:2b:
         fc:7c:c8:51:7a:53:2a:c5:9a:cb:0f:31:b0:88:1f:aa:2d:29:
         35:29:fa:13:ba:c1:98:64:45:48:52:4c:a2:1e:4c:52:98:e6:
         c0:93:91:17:30:d1:68:01:e0:3e:64:ec:46:f1:ab:80:ef:b9:
         0d:f0:7c:ac:01:f0:71:92:64:8d:dc:78:fc:25:de:11:33:6c:
         b7:ac:ba:a1:dd:af:d1:13:4f:a4:d6:75:98:b5:24:6c:97:21:
         36:a7:b8:e5:3c:24:36:13:36:d9:c8:d1:c4:9c:2d:e6:26:81:
         5b:0c:28:1a:62:4e:65:bd:33:a7:6e:c1:fb:16:a8:da:71:aa:
         bb:96:8f:3f:ce:e0:d3:97:71:fd:09:a3:e8:5f:41:fd:80:81:
         fd:39:0d:d6:2b:1a:37:31:cf:24:f3:5c:06:6c:5f:16:86:03:
         51:71:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:54:49 2026 by rpki-client