Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa
File:                     f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa (raw, json)
Hash identifier:          WmiV42vksNo1gDDAPbt/xWuE4t1MjPGK19v6O8VpviA=
Subject key identifier:   82:E5:A3:FA:86:CC:A6:30:1C:FA:8E:AF:44:A8:04:68:8A:18:F7:99
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584F15CD083861CB109442E86BC0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     22359
IP address blocks:        207.22.32.2/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:08:38:61:cb:10:94:42:e8:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=35f9f90c-fa20-49ee-a5c2-8027efae2bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9b:5b:6c:50:88:d0:bf:81:e2:10:9e:61:5d:
                    35:31:27:35:a9:45:c9:05:a6:69:f4:cf:33:42:44:
                    fb:fa:34:91:a1:9e:c4:8f:f4:ba:1d:07:a1:4e:bb:
                    87:89:e7:57:e8:de:d0:5f:ca:b5:8d:e7:27:fd:c8:
                    ce:73:b5:15:fe:7d:90:4a:d9:60:1e:12:a3:09:c2:
                    94:90:cb:03:c6:db:e1:89:04:85:ae:e6:13:8b:02:
                    b7:14:11:31:f8:88:4a:26:b6:ec:58:fe:3b:53:fa:
                    4c:1d:56:58:e5:b3:c3:d4:da:b5:73:2c:93:7a:65:
                    da:8d:75:28:58:50:d6:b3:80:49:a7:16:30:62:5e:
                    f3:a3:46:3e:ea:63:3b:9d:1d:f2:91:8e:d3:65:8c:
                    7d:54:e0:e9:8f:13:9c:14:be:15:49:14:25:c2:fc:
                    9e:59:08:95:4a:c6:1b:3d:21:6a:be:6f:90:a6:86:
                    28:8e:c5:c3:47:21:b6:ce:65:5c:11:6e:41:09:39:
                    76:31:a4:85:4d:47:54:4a:92:fc:7d:3d:06:eb:f0:
                    cb:52:7c:e0:f7:87:a6:ff:6d:ec:80:dc:d0:82:81:
                    63:24:23:a2:13:97:ab:34:14:74:52:f2:5f:dd:44:
                    e6:e7:82:a7:c8:60:f2:47:7b:1c:a4:48:e4:09:22:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E5:A3:FA:86:CC:A6:30:1C:FA:8E:AF:44:A8:04:68:8A:18:F7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.32.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:98:ac:4a:0d:26:de:02:fc:53:78:1d:7d:bf:b8:14:9e:
         c1:2e:64:9b:9a:9b:40:1e:f9:12:04:06:26:33:a1:59:ce:7e:
         94:4e:3e:21:d1:53:a3:bd:c6:84:64:71:f0:e4:32:85:ac:68:
         bf:ab:54:23:57:49:2f:ee:9d:0f:aa:6f:a9:17:42:d5:60:99:
         9b:ff:64:0e:18:eb:37:90:11:9e:28:ee:99:ad:97:1e:ba:4e:
         c6:1e:e7:81:27:90:1e:c7:55:95:d4:4a:16:0e:0c:e1:58:00:
         d1:37:8f:aa:fe:39:be:c5:14:50:9f:aa:76:fa:db:4e:dc:1d:
         cf:ae:3c:ab:2e:c5:11:97:fe:92:cd:83:3a:86:45:65:9e:d3:
         89:a3:1b:e8:9d:90:5c:75:4d:7e:ec:d9:aa:64:fc:0c:d2:ca:
         ac:50:25:59:25:25:8f:0e:30:9c:be:25:d7:75:3e:18:6d:43:
         5e:36:32:c1:08:79:a2:a5:93:a6:cd:59:bf:39:e1:7b:e3:cc:
         bb:d5:55:13:02:dc:62:70:97:88:d8:34:fe:42:9f:50:74:e6:
         42:08:c8:7c:f3:d2:dd:40:95:f1:a2:98:ce:51:16:c5:94:21:
         75:2a:0b:42:22:03:99:a1:8c:f9:fe:34:44:1e:80:57:33:41:
         f9:10:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:44:56 2026 by rpki-client