Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b1af58df-7943-3424-ae8c-c8c1c17cc735.roa
File:                     b1af58df-7943-3424-ae8c-c8c1c17cc735.roa (raw, json)
Hash identifier:          AXBmxNJPr9CwnN1dpxm1SJWIiZxtN3MrGoWd3eJ0utM=
Subject key identifier:   B7:79:09:91:F5:DC:3A:CB:80:95:C4:DA:D1:41:96:54:6F:5C:D9:6D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DD0905DB6FF96BF07781F9880
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b1af58df-7943-3424-ae8c-c8c1c17cc735.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16462
IP address blocks:        206.12.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5d:b6:ff:96:bf:07:78:1f:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=92b35c6a-b568-4269-9475-41a5e374791a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:32:10:3f:e8:16:e1:9e:da:a2:a3:0a:ff:
                    6e:b0:bf:af:d0:e6:e9:da:4b:dc:59:d9:98:05:85:
                    d0:eb:b4:3c:00:ee:05:c0:14:58:71:a2:12:77:ee:
                    d0:87:33:92:9f:c4:5a:88:21:21:99:5a:0e:e9:bd:
                    0e:c3:d3:a0:d8:7e:fe:64:66:52:5b:f6:f5:e8:2e:
                    8c:17:7f:37:82:e0:99:97:c7:4f:66:4c:a7:c7:ba:
                    8b:12:e6:af:7e:31:02:1a:b7:a0:dc:5c:ac:91:e1:
                    ee:be:b8:6f:bb:cf:10:4a:b8:fb:c1:0a:50:c9:86:
                    df:d0:d1:d3:d8:7f:4a:3d:d4:09:a3:3f:04:fd:5d:
                    16:3a:ba:29:32:61:82:13:ce:90:da:25:30:30:62:
                    fe:33:56:8a:02:b5:ac:00:df:bf:e5:55:86:2e:32:
                    d5:2e:c3:6e:db:66:6e:4f:23:3c:8a:c4:99:6d:3a:
                    c4:df:c6:57:64:01:eb:40:d8:8b:00:9c:ab:c5:7a:
                    36:f0:4b:e6:6d:51:e5:4f:d4:0a:b2:18:a8:ae:7b:
                    fb:d5:7d:42:57:92:c0:83:7c:aa:92:8a:b9:39:5f:
                    4d:a8:2c:89:9d:bf:e5:82:78:0e:5c:fa:68:ab:62:
                    57:1b:4d:1c:69:c8:22:b1:a9:25:57:c7:4f:fc:63:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:09:91:F5:DC:3A:CB:80:95:C4:DA:D1:41:96:54:6F:5C:D9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b1af58df-7943-3424-ae8c-c8c1c17cc735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:81:e4:3b:37:9b:f9:5e:e4:82:24:8d:ba:3d:bb:9c:fb:
         b1:56:a3:ef:7f:a0:ca:db:b8:81:1e:00:99:50:01:f9:3e:0d:
         0d:2a:d7:04:7b:5f:d6:ea:ac:12:34:b1:85:08:87:63:93:7e:
         07:72:b9:25:05:fc:96:ce:e4:bb:b8:8f:a6:68:1c:32:0c:3b:
         ea:5d:36:e8:e3:a2:ee:26:03:28:e1:b1:e6:52:69:4d:39:33:
         3a:21:82:01:75:b7:47:de:e7:5f:67:c8:2d:0d:49:53:d8:eb:
         c1:d7:4f:a3:02:0a:91:39:db:08:68:64:1a:27:3c:d3:e0:a3:
         4e:29:49:f2:db:51:2a:54:d2:ff:4a:ff:3f:54:37:c0:e8:8a:
         5d:7b:16:91:d7:8c:bf:36:56:12:0a:cc:9f:f5:c7:24:14:4c:
         f3:8e:81:38:d6:7e:19:2f:f8:94:ab:da:6c:1c:07:da:86:b9:
         9c:13:4c:7c:2f:52:38:7f:2d:4d:25:c2:19:57:d3:3f:1e:29:
         bd:24:9f:f7:8f:2e:8b:40:09:48:ec:fa:8c:1b:c0:31:34:b4:
         b1:63:c2:a5:67:23:07:b3:72:1d:52:be:24:42:99:41:eb:92:
         82:ad:33:59:1f:03:e0:be:8b:10:1d:dc:65:3d:d3:c0:16:32:
         22:66:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:42:20 2026 by rpki-client