Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa
File:                     757c630c-1704-3fb8-b8aa-a6f536633ed2.roa (raw, json)
Hash identifier:          lLFRYsPgW/LxViqfmZ3Vx2FNuB4RC+kuZIonQmuLlG4=
Subject key identifier:   DB:A9:E1:24:A1:F8:78:09:38:67:F6:E7:62:B3:A4:E6:7C:AA:4E:10
Certificate issuer:       /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
Certificate serial:       010D0C9F4328584F1897A9E7B07A8B452FFA2800
Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     8075
IP address blocks:        209.51.100.0/24 maxlen: 24
                          209.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a9:e7:b0:7a:8b:45:2f:fa:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=408d870b-8375-4a92-87c4-abb376fb93de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:00:ab:8f:76:96:ad:9b:b7:90:de:7c:24:
                    a6:97:43:42:3b:1f:46:16:44:37:c8:d8:ea:4d:73:
                    69:4e:67:98:d4:e6:4a:f8:82:c6:d2:1c:78:4f:a0:
                    92:28:c0:e6:df:f7:d9:ea:9c:af:f1:85:c7:b1:07:
                    22:eb:a0:cf:4a:ff:e5:ca:ca:6b:0a:fc:01:47:7c:
                    19:13:f1:bb:8c:d4:c9:95:a3:fc:4f:0e:00:93:d3:
                    af:27:73:7d:d5:11:2f:e4:d1:13:7f:4b:90:73:6d:
                    f9:1c:37:9c:93:ba:dd:00:a0:05:93:9f:b4:c3:30:
                    c7:05:13:4d:31:c4:44:af:71:a6:f9:c5:b5:80:83:
                    dd:c8:3b:7b:b2:83:bc:ad:b2:3c:10:73:8a:38:c1:
                    e1:aa:06:a4:92:e4:85:92:b7:01:ff:6d:41:8b:ff:
                    93:3f:67:42:7f:35:4f:b5:f9:4f:78:c6:89:fc:71:
                    b1:42:a4:e9:a1:7c:8b:23:c8:db:6b:6b:50:53:b3:
                    56:2c:fa:03:b4:5a:be:46:f5:f8:20:9f:2d:1e:36:
                    4e:d2:fa:1a:b1:cc:53:5f:c2:a2:a0:c2:4c:e1:39:
                    cc:5c:d2:61:81:8c:88:07:95:38:43:9e:9d:95:1b:
                    e0:bb:f5:cb:8b:11:6e:bd:50:56:30:e1:7d:8a:9b:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:E1:24:A1:F8:78:09:38:67:F6:E7:62:B3:A4:E6:7C:AA:4E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl

            X509v3 Authority Key Identifier:
                keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:a1:52:a2:9d:b2:c4:41:5a:1e:70:c6:8d:62:d2:94:27:
         5d:12:ff:2b:32:9a:9d:ad:1c:d8:3c:0e:9a:0e:0e:dd:e2:60:
         bf:c7:79:b4:10:d6:dd:87:67:1e:16:0e:f4:80:b7:96:be:00:
         aa:bb:e6:5b:6a:f0:a9:d6:f3:7d:93:0f:20:27:7c:a7:67:1d:
         f7:1a:fa:70:8f:c5:8f:83:59:63:c7:f5:02:83:9f:79:0d:15:
         95:b3:85:2f:2c:91:b9:3a:3a:0a:74:b1:3a:8c:f5:ea:e0:2a:
         fb:a4:7c:2c:4a:cc:cf:88:c1:c5:c1:d4:01:8f:a4:00:9a:81:
         6f:1a:b6:14:b4:c9:e6:d4:24:28:e6:d3:e2:2c:c0:92:be:c1:
         22:e6:d3:f4:a7:d5:a0:94:0c:ee:70:8a:93:29:b3:31:bd:fd:
         7c:a7:ff:a1:0d:19:6e:cc:fc:0f:8b:6d:1a:a4:6c:aa:64:71:
         fc:32:b1:16:d2:e8:45:98:aa:51:d8:4a:0e:a1:21:77:95:8d:
         5f:46:27:28:15:24:dc:02:6d:50:b3:97:2f:a9:a1:af:70:6f:
         33:db:a6:05:19:4a:b5:61:6b:c1:9e:0c:95:75:fa:3f:ca:cb:
         fb:74:0b:f3:e6:31:22:f6:be:ea:3c:70:56:79:34:7f:b3:54:
         04:63:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:06:16 2026 by rpki-client