Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9510e768-0d99-3ec2-a572-861100f12f8b.roa
File:                     9510e768-0d99-3ec2-a572-861100f12f8b.roa (raw, json)
Hash identifier:          WWcMhqVUmXxawOX9b7HwnxG6WIgCf9Ea4DoLmEY6xic=
Subject key identifier:   E0:FB:21:F2:76:70:51:EB:38:D6:5A:34:16:5D:69:88:E2:00:C2:FD
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584E5BAF54F9FB0E294E5F1C6200
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9510e768-0d99-3ec2-a572-861100f12f8b.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     11105
IP address blocks:        206.12.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:54:f9:fb:0e:29:4e:5f:1c:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=2a2ad255-9dd6-4cb0-b44a-902700df2650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:2d:47:e1:76:58:a6:c5:1d:66:2f:5c:23:
                    7d:cd:6b:f8:94:de:46:78:15:8c:67:e1:fd:6d:71:
                    39:cd:6d:fb:a1:9e:77:38:d5:a3:fe:91:bd:9a:90:
                    9b:ea:8a:8e:15:53:d8:74:99:e1:a2:7b:da:d4:a6:
                    03:65:cd:42:a2:a5:39:dc:1c:a4:72:43:0e:61:07:
                    de:17:45:93:c5:9d:6d:29:a6:d5:52:bb:8f:36:ec:
                    f6:7e:ed:73:cd:db:b6:b8:16:32:e7:8b:a3:98:70:
                    66:39:e4:3a:4e:c4:41:c2:fc:6a:bb:50:7b:f3:0e:
                    53:93:72:a6:56:fd:ae:4c:60:fc:00:76:c8:e8:6e:
                    90:dc:74:9b:ce:b9:e7:22:17:30:9e:90:70:8e:c3:
                    35:18:a7:50:05:37:ff:c1:d6:30:5d:f2:de:66:0f:
                    5f:7a:d4:b2:ea:bf:6d:47:fc:e8:d2:d1:47:61:5a:
                    16:5f:ac:5c:69:40:4a:22:ca:ad:b7:98:fd:d1:41:
                    8f:31:93:22:9c:47:71:43:d2:49:b9:b3:2e:87:0f:
                    8d:aa:dc:98:53:e9:b4:89:80:bf:0b:08:a7:72:80:
                    da:36:1d:11:92:7c:c0:83:4d:6c:78:32:a2:0f:82:
                    69:72:bf:54:2e:d0:5e:3a:1f:ae:75:b4:04:e5:a0:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:21:F2:76:70:51:EB:38:D6:5A:34:16:5D:69:88:E2:00:C2:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9510e768-0d99-3ec2-a572-861100f12f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:11:5a:50:0f:6a:c9:41:bb:b7:b3:8b:63:73:4a:4c:2c:
         5e:3f:f3:46:12:21:3b:e9:21:1e:63:ac:24:3a:d5:b2:b7:2b:
         6b:60:63:25:60:72:6c:5a:51:dd:5e:67:67:57:2f:26:ff:c6:
         3e:af:7e:91:8c:44:d4:0b:15:ad:d8:3a:d1:1c:b5:a4:62:d1:
         fc:9e:8c:ec:a6:50:e3:8e:f4:18:9f:3c:c3:2c:84:d7:8e:36:
         59:76:b9:9d:c0:e7:17:4b:f1:f4:62:01:b0:0a:79:58:1e:41:
         58:fc:0e:83:b9:40:c8:02:04:63:d1:ff:76:69:40:d6:86:71:
         47:95:6c:18:6e:3c:61:91:3a:71:86:2b:73:00:cf:20:7e:15:
         8a:4c:dd:ca:1a:d8:a8:ff:79:f8:25:18:63:d4:0b:4e:26:0e:
         67:5c:e2:f1:c6:fc:6a:f5:3f:34:b6:ee:7c:aa:f0:cf:b6:9b:
         b5:4c:dc:72:cf:33:89:46:19:2b:46:91:3b:c0:72:af:12:2e:
         7e:7c:90:ae:50:e0:0d:cd:17:ae:6d:26:bc:31:35:28:a4:87:
         db:8a:07:44:70:6c:06:4f:5a:86:bf:43:9b:5d:38:a3:ed:5d:
         b1:be:53:50:cd:71:57:af:c4:f7:cf:b5:ac:d6:24:6d:21:db:
         7c:8d:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:45 2026 by rpki-client