Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d2bed273-b1c1-3910-af48-15e90d582c33.roa
File:                     d2bed273-b1c1-3910-af48-15e90d582c33.roa (raw, json)
Hash identifier:          RPFoxl6202SPqE44SxrC/7PwUF2yuQpH12cNNHvk22U=
Subject key identifier:   95:9A:AF:D2:0C:76:97:26:E2:2E:02:83:96:A1:49:96:04:BE:20:17
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F45428D0FE1E6671ECE807580
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d2bed273-b1c1-3910-af48-15e90d582c33.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     11105
IP address blocks:        206.12.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:8d:0f:e1:e6:67:1e:ce:80:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=6a184f28-64ad-4aad-b079-63e06575aed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:67:82:18:00:5a:de:59:6a:1c:37:ab:a4:
                    0e:4c:9a:c1:8e:70:dd:88:42:8e:18:68:e1:2d:12:
                    5a:4b:b6:94:66:3c:a3:b2:fb:d4:54:a3:1e:a9:0b:
                    c0:6c:d1:8b:bf:28:0e:09:f9:a5:8f:20:8f:02:b6:
                    e0:1b:9a:8d:fb:db:7e:a9:ae:6d:fd:d6:8a:89:81:
                    0d:e3:2b:8c:e8:13:95:fa:65:c9:42:b5:61:34:87:
                    40:84:13:6e:c2:1c:98:be:78:b8:4b:ba:15:ac:bb:
                    bf:3b:c1:71:8e:ac:39:29:6e:60:94:bd:e8:f3:bd:
                    4a:b9:76:d4:2d:76:cf:3e:b9:51:a3:f1:fc:ad:10:
                    67:eb:16:2f:2b:bd:14:f0:78:1d:f1:0a:d8:6a:f7:
                    ba:ba:40:0f:d6:98:97:55:a5:59:cf:8b:9f:ac:1e:
                    75:b3:81:af:54:76:24:37:ca:a3:18:8e:dc:32:af:
                    4e:b7:01:b8:a1:a7:b0:1c:2c:a5:fe:f3:0f:22:a6:
                    cc:bb:0f:54:7c:76:6a:f5:95:37:62:d2:65:3d:50:
                    25:f6:46:f1:67:60:2a:ec:3b:b1:b7:39:c8:3c:ae:
                    3e:d3:1b:cc:ad:ae:54:79:07:b2:38:c8:e3:be:51:
                    cc:ed:bb:7c:4c:3e:c2:a1:77:3b:69:5e:ce:3b:12:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:AF:D2:0C:76:97:26:E2:2E:02:83:96:A1:49:96:04:BE:20:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d2bed273-b1c1-3910-af48-15e90d582c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:47:b0:d5:01:d5:68:96:e4:a1:ea:fb:6d:c3:08:9e:23:ca:
         70:c2:9f:09:5c:ee:4c:73:80:ea:be:3a:57:57:51:09:94:18:
         22:1b:02:4c:90:5a:c8:0e:79:75:c6:46:aa:c1:05:06:86:c2:
         59:79:ef:0e:ce:27:63:96:62:b4:f3:ab:0e:57:fc:15:6a:30:
         05:4d:7e:c4:fb:c3:4a:d1:0e:9c:a6:29:97:be:23:44:6c:dc:
         c0:ed:c8:b9:81:95:84:0a:aa:b0:a9:3d:e2:50:b0:f9:26:b5:
         7a:fa:d1:35:80:00:7d:98:c5:b9:90:ab:44:c8:d2:85:51:dd:
         9c:7d:9b:b7:8e:8e:1c:32:14:5c:85:95:83:5e:a0:d5:bb:b9:
         4d:43:18:81:ce:2a:c8:36:86:f1:19:43:35:5b:8c:3e:2c:c0:
         39:7f:e4:9a:e0:67:d2:b9:cd:45:68:48:9c:20:d7:b7:7c:ee:
         81:d3:9a:6e:5d:fe:ce:2e:f5:b2:a4:32:53:b2:20:e0:71:15:
         76:b7:4e:ea:d1:68:df:b2:07:cf:a5:3f:ac:d3:8c:49:b4:97:
         ef:97:5b:50:aa:b0:7f:9c:85:7d:fd:b6:ab:c8:94:a6:76:c5:
         b4:30:ba:da:8c:6d:ad:f4:1e:6c:df:d4:54:df:3b:cc:a2:91:
         c2:77:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:18:12 2026 by rpki-client