Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4212d7f5-f5f8-3e9a-8c8d-3e58ba43bb41.roa
File:                     4212d7f5-f5f8-3e9a-8c8d-3e58ba43bb41.roa (raw, json)
Hash identifier:          o0WLkgR5ddV07tK7yEXK7NxgAqyIWdfAy3K930dCOQc=
Subject key identifier:   09:11:62:B3:69:80:94:E6:94:63:EB:5D:53:6B:17:07:00:D9:85:76
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DBD05A1619B708448E6C9BA00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4212d7f5-f5f8-3e9a-8c8d-3e58ba43bb41.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     393249
IP address blocks:        207.23.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a1:61:9b:70:84:48:e6:c9:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=d2e21664-20a4-4374-b201-fb7886cc3a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:5b:04:75:d0:70:22:39:1c:66:2d:15:c5:
                    cb:7f:b5:68:97:ef:50:b5:04:fa:7e:7f:00:62:28:
                    d7:b7:c1:e6:27:5b:de:6b:33:f7:bc:0a:2a:14:5c:
                    6f:d1:cf:03:cc:9f:1a:c0:d1:2c:09:90:3b:6b:50:
                    8a:7c:d9:78:f8:d4:90:b0:5c:63:d4:4d:26:d3:02:
                    c4:4e:04:3d:19:6e:e4:8d:5c:00:47:ee:6e:75:68:
                    fd:1c:43:c0:78:44:cd:22:11:db:0a:dd:5e:cc:63:
                    1f:b7:4f:1e:b8:f3:97:c7:1f:41:ba:a1:50:4a:10:
                    56:21:6a:d6:59:f2:ee:c3:d1:fb:aa:1e:8d:55:0c:
                    1b:9f:6a:e7:3c:14:56:17:98:70:a1:cb:30:cf:22:
                    75:32:88:55:e9:ff:97:fd:ae:21:37:2f:07:75:35:
                    29:5e:1f:d8:b8:d1:ef:dc:50:ec:df:56:37:6b:75:
                    ff:3a:ad:ac:7e:df:80:b8:60:61:d9:30:11:75:b9:
                    3a:5a:d4:6e:d3:f9:c3:56:19:cb:d2:ae:72:b6:86:
                    63:e9:af:03:4a:ac:88:f7:c5:a7:3e:62:d9:ac:72:
                    aa:b8:61:e9:36:5c:de:b0:45:ef:71:ed:82:a4:4a:
                    d9:fa:54:dd:7b:45:07:c9:60:76:99:98:0a:e9:56:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:11:62:B3:69:80:94:E6:94:63:EB:5D:53:6B:17:07:00:D9:85:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4212d7f5-f5f8-3e9a-8c8d-3e58ba43bb41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:75:eb:d3:2d:26:70:0e:94:f0:32:25:37:45:5f:cc:a3:
         a5:9c:85:29:ef:05:74:84:34:df:3e:b5:0b:6e:26:34:a0:db:
         e2:bf:f8:8c:ef:ab:54:33:48:46:b8:74:cd:e6:3d:9d:9b:a8:
         06:b0:f8:fb:bb:08:a5:fe:1a:b8:b3:bc:47:4b:75:49:71:59:
         9c:e8:f6:83:7f:3e:c6:aa:7a:cb:b9:36:7d:0d:57:06:85:2f:
         db:38:bc:56:78:91:bf:cf:05:04:e5:d6:68:bf:d9:9f:66:4b:
         33:9d:59:07:41:43:b1:f3:46:cb:99:2f:47:08:23:9b:4a:3d:
         c9:db:60:95:19:e2:13:94:d2:83:f0:6e:45:c3:c4:22:ce:de:
         68:b9:87:75:c3:c6:fa:51:e9:10:29:c0:7c:dc:e7:d9:1e:bc:
         56:2e:71:96:75:ad:a4:8c:51:e6:a5:3d:80:16:79:3c:c6:84:
         b3:94:85:15:27:20:b7:18:66:d4:35:86:5f:56:2a:d3:07:0c:
         72:b5:f2:8f:e7:22:3a:11:22:9c:0f:04:b6:46:dc:cf:00:8c:
         ab:8b:28:dc:51:e2:f3:71:c1:75:72:4b:29:3e:8f:2a:58:ac:
         b5:7d:5d:91:0b:48:58:85:b1:6c:15:71:19:fa:f1:fe:34:85:
         86:5c:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:05:07 2026 by rpki-client