Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa
File:                     4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa (raw, json)
Hash identifier:          /GIX7brtya+f/KK4KCecL7v/RkOE3J5TnqXLkcEHr5U=
Subject key identifier:   C6:FB:89:AD:42:49:E4:D5:B8:1D:EE:85:76:EB:2A:98:C6:C0:5B:23
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584F480D3C0F5DD955CA6086CE40
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     14299
IP address blocks:        207.135.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3c:0f:5d:d9:55:ca:60:86:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=32a2a56c-3253-4e51-891e-7c06d3584c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:7f:f1:62:37:5b:9d:97:26:6f:80:fd:9f:
                    85:cc:c0:32:2c:7a:ab:fb:b7:d2:c6:a1:5b:48:55:
                    b5:15:b6:31:40:5b:46:9e:41:46:b9:73:01:f1:c1:
                    d1:06:6f:9d:d8:d9:fe:d4:0d:8c:aa:2c:96:da:52:
                    56:e7:ce:fa:23:1e:1e:95:d1:89:ae:2b:85:c6:45:
                    98:a6:0f:1c:38:e1:db:20:23:04:ed:45:b9:cd:6d:
                    c4:e4:10:78:af:41:6e:03:2c:f5:36:fa:8b:66:0e:
                    7d:29:59:27:5c:5a:96:6b:97:8b:62:4b:da:e7:45:
                    86:18:82:10:c7:be:1e:cb:3d:f9:2d:46:f6:9a:39:
                    d7:fb:34:ba:2d:c8:de:50:3a:2c:0b:c8:cc:a0:8d:
                    be:4d:d9:b2:92:4b:c6:e5:e0:cb:a1:2e:79:f3:64:
                    a7:cc:3a:21:5f:da:85:eb:f9:7c:8f:a7:1e:4a:c1:
                    16:f4:1c:a3:da:d4:30:3f:a7:c6:07:6f:85:b3:6b:
                    f1:1e:94:b8:f3:e9:02:30:d6:3d:7f:b3:1a:f4:bd:
                    d5:9e:e3:c0:f1:53:97:db:22:85:65:99:a3:24:b5:
                    c4:2e:c4:78:dc:14:13:9a:f7:69:16:0a:93:47:45:
                    b0:29:5b:99:21:cb:bd:6a:38:e9:7e:88:e0:7d:4e:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FB:89:AD:42:49:E4:D5:B8:1D:EE:85:76:EB:2A:98:C6:C0:5B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fa:64:04:d5:72:06:be:0e:4a:53:99:50:56:80:0b:73:ce:
         e0:6f:9b:be:a8:1d:12:51:d8:1c:6e:48:f8:22:a9:0b:23:b4:
         e4:18:11:1a:1c:0f:96:9c:4f:24:ee:db:96:84:a1:2a:32:39:
         0d:a1:5c:ef:76:a3:21:03:07:a1:a9:63:99:21:11:69:e5:5d:
         fc:bd:03:23:8f:cd:af:40:6d:c8:89:fd:33:4f:09:56:4d:bb:
         46:b5:14:55:5e:5f:ad:5e:15:bc:26:4d:16:64:23:96:81:6f:
         1e:d2:80:7f:2b:0c:11:ae:7d:d1:72:d7:01:5c:89:41:f5:17:
         79:a1:f1:00:4a:6f:78:a1:76:79:27:a7:de:85:31:a6:5e:8b:
         6d:32:eb:c1:76:69:5e:70:7c:a8:e1:7d:f5:f6:af:c5:19:50:
         9e:8f:e8:fe:bf:4f:58:3d:e4:87:bc:3b:7a:6f:a2:90:10:33:
         d7:96:73:a9:87:b0:88:02:ad:a8:70:05:08:31:9d:6d:83:7f:
         58:27:b1:f8:8f:20:4b:24:01:32:1a:05:db:0d:7e:fd:ae:b4:
         d2:6d:a3:23:d8:ba:8e:d7:f3:c8:b4:07:a0:b9:25:38:b2:f3:
         01:18:1e:34:38:61:a3:93:7e:ab:41:3a:b5:5e:c8:97:62:ef:
         0e:c5:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:44:36 2026 by rpki-client