Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d20267f-b471-33fc-86e3-cb95622fe20e.roa
File:                     6d20267f-b471-33fc-86e3-cb95622fe20e.roa (raw, json)
Hash identifier:          yaCMKPnTaceb9k7rQe4Jghxy9iUh/UafqjrpQrIE3ZI=
Subject key identifier:   20:A7:F0:13:98:8C:91:7F:3C:AD:09:18:F7:AD:D1:DC:57:E8:CD:72
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584F497CE0FDA87453361421BA70
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d20267f-b471-33fc-86e3-cb95622fe20e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        209.107.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:e0:fd:a8:74:53:36:14:21:ba:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=25cdcead-a808-48fb-99aa-b9bc7f70516b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:71:eb:81:ce:b8:00:ba:9e:4e:83:e1:e9:
                    f5:b2:f1:d9:39:a9:7c:02:07:eb:2b:cd:12:57:8f:
                    3c:2e:a1:00:10:5b:38:b8:ff:86:54:8f:48:cb:1e:
                    22:40:c1:63:0c:ff:ff:3c:e7:2b:c5:a1:c4:6d:bc:
                    18:c7:db:86:0f:0e:80:16:48:11:d3:71:aa:a7:9f:
                    2b:ca:26:d6:5b:01:09:ec:52:c8:fa:1c:c5:85:63:
                    a4:b9:2f:2b:cc:06:59:d3:ea:dc:10:e9:1a:59:2a:
                    ad:d4:db:18:08:3b:a2:2a:41:57:4f:a3:ef:9a:3c:
                    73:c1:cf:9e:2a:71:11:7d:a9:26:49:f6:59:ab:1d:
                    8b:eb:d2:16:07:e2:81:cc:f9:37:c0:df:54:59:4a:
                    ab:1d:26:94:c8:08:3d:99:28:21:2f:09:ca:cf:c0:
                    0e:96:2d:37:b9:4e:43:22:43:cd:64:91:5e:bd:ab:
                    f0:b7:89:1b:b6:e4:a1:7f:ce:54:58:ff:53:98:d9:
                    c4:79:fd:dd:a1:74:6e:7d:ab:32:41:10:a6:0b:9e:
                    60:d3:b4:3b:e6:57:c4:a7:24:3d:55:ee:9c:71:dc:
                    2a:66:cc:db:31:30:db:2f:83:13:d6:29:0d:0e:7e:
                    8b:61:5e:1d:a4:d0:ae:83:fc:16:2b:0d:13:8c:7b:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A7:F0:13:98:8C:91:7F:3C:AD:09:18:F7:AD:D1:DC:57:E8:CD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d20267f-b471-33fc-86e3-cb95622fe20e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:b0:47:08:0c:97:1a:78:18:74:6a:95:f4:12:6c:39:a8:
         84:77:9b:52:5a:ba:e6:cb:03:f0:ed:b1:4d:64:64:49:ec:0f:
         0d:94:b6:04:28:f4:62:ba:46:76:96:70:9d:04:15:c1:65:c7:
         fa:84:c6:50:57:b3:3d:55:e6:cd:54:e5:74:d6:f1:93:df:bf:
         26:fc:fe:31:00:06:a9:53:16:37:9a:eb:b6:92:a1:26:56:c5:
         af:e2:f9:4c:25:97:06:7a:a6:dc:e3:5e:3b:ca:37:05:18:b1:
         e1:f1:a7:ed:0b:a9:81:cf:2e:91:4e:67:c6:3f:f0:6f:2e:34:
         6c:87:79:0e:d8:96:21:6b:d7:48:3a:a4:b2:ec:29:07:6c:62:
         65:7d:1e:59:9d:1a:23:c3:65:e9:d6:59:a0:2c:22:3b:78:9f:
         48:87:b0:5b:cc:21:c2:67:32:f4:5c:b4:79:fa:bd:90:38:10:
         3d:2a:5a:3b:14:ea:9b:5b:08:82:47:fb:86:8c:81:78:99:a4:
         c5:f1:33:a2:1e:7b:6f:52:f3:00:f4:5d:ca:88:5b:0e:3b:2c:
         b1:93:fb:02:79:ff:1f:c4:46:2d:e5:ab:84:bc:db:a2:7a:a1:
         cb:6b:33:a0:3e:c4:c2:e8:80:4a:93:53:6c:e3:da:93:f8:bb:
         d8:b0:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:13:12 2026 by rpki-client