Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa
File:                     b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa (raw, json)
Hash identifier:          FA1QCcmnz0EW3dPxLT9gsoj3pB3KtRyFs6mt/hggTB0=
Subject key identifier:   58:EF:CC:2C:8D:B0:CA:C9:DC:2A:2E:F8:EB:93:84:7C:0E:8A:D1:8C
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584E86F4EE41C7375A9F86852180
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     9009
IP address blocks:        207.230.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ee:41:c7:37:5a:9f:86:85:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=205b0973-0975-47b1-a232-2017a4d516d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:6e:34:67:dd:f5:67:22:89:f1:63:5c:34:
                    a2:02:59:bd:bf:0e:7c:6f:e6:1b:80:68:1a:b8:a0:
                    bb:9d:42:ef:7b:23:52:4c:08:ff:b3:61:6e:9a:26:
                    f6:c8:34:84:8b:0a:a7:57:33:d2:c6:c6:ef:f0:ca:
                    28:b8:d2:78:72:5e:30:a7:b4:5b:0b:2a:87:50:66:
                    8a:88:18:ff:47:88:4a:a5:5b:00:56:98:d9:5d:22:
                    45:1d:81:61:fc:e5:af:6c:81:d5:fb:2e:1d:20:48:
                    c3:4d:c9:52:5c:67:74:bf:b2:13:9c:04:77:1d:17:
                    14:36:06:7f:fa:36:f2:d3:66:6b:3e:63:af:84:49:
                    43:50:6f:e4:a9:87:90:34:7e:0b:c2:fa:f7:52:78:
                    72:ec:d1:3a:a6:6a:a4:20:75:3d:a2:6b:78:1e:19:
                    9f:4a:83:5e:89:8d:61:e6:17:48:37:af:81:97:44:
                    4a:cc:9b:3d:7b:a9:bd:04:e1:86:86:a4:72:e9:c7:
                    93:b6:75:51:74:83:92:ab:ae:69:46:e6:af:8a:35:
                    01:fe:cd:c6:2c:05:0d:6b:a3:3f:2e:e5:4e:3f:b0:
                    e4:59:fb:9f:06:19:a4:01:21:b6:96:7b:57:98:a2:
                    64:65:c0:4f:d8:7e:47:ae:7c:80:1d:e3:7a:83:bc:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:CC:2C:8D:B0:CA:C9:DC:2A:2E:F8:EB:93:84:7C:0E:8A:D1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:df:c8:36:70:51:16:8a:70:c5:1a:eb:1c:d1:e8:a0:47:31:
         c1:5a:61:fd:2b:3d:11:74:7c:2e:74:29:22:cd:3a:48:8c:6f:
         7d:ea:83:bf:52:32:d4:1d:af:fb:8a:c3:45:18:b2:bb:40:b8:
         ca:11:be:af:8e:1b:d8:4b:e9:f3:c0:0d:cc:a3:b0:a9:4f:a1:
         f0:a7:78:ce:6b:5a:0f:44:c4:8a:5d:cb:91:6c:13:91:e3:d3:
         6c:96:72:78:0d:66:29:dc:03:2f:83:25:c5:ac:b9:62:52:65:
         b8:35:d4:94:1f:45:39:50:36:52:df:9d:b4:76:72:19:aa:e8:
         44:fa:40:5f:ed:da:b1:d2:01:84:25:20:85:bc:99:bd:6b:2e:
         03:f4:44:a5:9f:7b:a2:16:58:46:68:0c:54:e5:36:f2:d3:27:
         6f:d2:91:13:f0:52:dc:b3:00:9d:33:24:fd:d7:44:12:b5:ea:
         9c:64:77:77:ca:59:d1:84:98:74:fd:5c:15:6c:79:f4:ab:85:
         00:31:b6:5a:38:b9:fb:36:48:6e:d6:7c:25:49:1d:15:e7:04:
         be:51:c5:0a:c7:8c:e6:13:4b:82:36:fb:bf:5a:b4:6a:3c:81:
         0d:c3:04:05:4b:73:ad:63:18:13:fc:ce:2e:d9:fe:2b:86:cf:
         b1:f5:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:24 2026 by rpki-client