Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa
File:                     0c95cc7e-347c-343b-9a60-43effbd437ce.roa (raw, json)
Hash identifier:          IGvenUTp8ShNqsI7vJHcqtCVQSdA2FLKh7yCItxFBcE=
Subject key identifier:   83:6E:1A:90:1D:F3:AD:A3:1A:FD:13:7C:A7:1C:25:A9:F0:77:2F:DA
Certificate issuer:       /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac
Certificate serial:       010D0C9F4328584F497669193FDDF713557B3AA0
Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        206.209.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:69:19:3f:dd:f7:13:55:7b:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2d929a7d-979e-4fc1-878f-9c8343436e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:99:47:48:13:7b:e5:f0:f8:7c:f0:90:5b:
                    7b:46:15:b2:0f:9f:17:a9:77:06:ea:68:63:84:ab:
                    84:71:23:07:04:cc:ab:2a:69:bf:8c:9d:a7:21:3a:
                    fa:f3:8c:68:6e:28:df:6b:00:55:22:e6:73:4d:f5:
                    e9:70:68:18:5c:d9:50:97:32:c4:57:e6:7f:cc:02:
                    c8:1a:00:56:e2:89:e2:51:68:8a:c4:62:b1:68:ba:
                    94:35:55:f7:c0:bd:18:95:8b:ff:4e:11:31:05:c4:
                    94:4a:6a:87:69:cc:8e:2b:63:09:6c:63:a3:15:b5:
                    93:19:9d:28:97:4c:d7:71:13:0c:e7:e0:0f:52:bb:
                    98:fa:3d:17:a9:da:ba:c7:38:28:ce:fd:78:86:76:
                    15:f3:ab:17:8f:24:67:6a:4e:70:cc:8d:f7:92:95:
                    6b:34:a2:1c:04:f9:dd:2e:ec:40:24:8c:5f:3c:26:
                    f6:de:3f:9d:66:76:81:4b:55:39:b6:51:24:be:ea:
                    51:cb:a2:81:94:a9:73:a0:98:d0:ad:60:3f:b0:d5:
                    a0:c9:1b:56:63:75:e2:91:ee:0e:d7:22:96:0f:41:
                    9a:30:2f:db:13:c0:ca:7f:63:df:f4:fc:08:8a:79:
                    53:f1:6d:60:ee:02:ec:8b:43:d3:c9:07:c2:d8:f9:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:1A:90:1D:F3:AD:A3:1A:FD:13:7C:A7:1C:25:A9:F0:77:2F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl

            X509v3 Authority Key Identifier:
                keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:15:dd:ef:0d:7f:76:4f:ce:71:90:ef:9a:da:ff:e9:64:f2:
         f8:d2:ad:16:12:4a:92:1f:61:1f:0b:f0:6f:6c:7f:11:dd:c6:
         bc:d6:ca:6c:5b:76:2a:eb:78:7c:ec:8c:01:12:88:5b:5a:75:
         f6:a1:0b:8b:10:45:d1:b4:54:ef:76:21:37:40:bb:68:58:d2:
         ee:bb:f7:64:f8:f9:60:c0:58:86:7e:ad:ea:1e:21:ea:e2:ce:
         1d:a9:27:be:c5:52:d2:09:8d:fd:6d:fb:10:2b:3a:f5:2b:26:
         71:c2:0a:4f:3b:cc:24:2c:32:2c:2a:b4:e8:7a:f3:ef:e4:69:
         95:c8:d6:f9:8c:fc:db:ec:fb:1b:8c:44:79:5f:77:f9:03:7f:
         bc:30:c3:b3:1a:4c:69:cd:32:17:a0:ef:11:c0:34:67:7c:fe:
         56:c6:36:b0:31:f6:fa:f3:df:54:dc:cf:7b:90:12:31:0d:61:
         d9:16:f9:00:43:24:e5:ad:95:03:ee:08:24:e5:36:53:b8:1b:
         a4:62:d2:29:61:55:10:86:06:3e:67:63:9f:71:b7:88:ef:5b:
         a0:03:a7:fe:53:19:c5:6d:81:8b:23:50:f3:bd:2c:38:c3:e7:
         e4:bc:30:8d:27:ec:df:99:c7:d0:77:8f:97:7d:53:9a:e6:e6:
         cc:c6:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:02:18 2026 by rpki-client