Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa
File:                     7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa (raw, json)
Hash identifier:          YvaWubShNBi9RPdjEtqKh/imvzaC3h7YSbM4uoxcJcc=
Subject key identifier:   EA:34:49:D2:3D:4E:48:BE:23:6F:1D:E1:F8:01:F3:49:D5:B7:C1:19
Certificate issuer:       /CN=db859a2a-df82-4532-a984-71176499699e
Certificate serial:       010D0C9F4328584E4F1F3B768BDE46FCF1BD1D00
Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        208.83.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3b:76:8b:de:46:fc:f1:bd:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db859a2a-df82-4532-a984-71176499699e
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=c79d62b9-3762-4515-aece-c035724af3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:04:e9:26:7a:16:d1:57:bc:70:d6:ad:4c:
                    fa:5e:b2:78:6a:91:3a:9d:b8:b4:12:ee:12:2b:4b:
                    e1:be:c9:cd:10:4e:08:9a:0e:af:24:60:a2:ee:2c:
                    bd:e1:63:d9:4b:35:52:5e:85:d9:e2:61:54:ee:95:
                    f1:de:06:1a:32:ff:39:30:87:36:d4:33:62:70:9a:
                    96:0a:7e:50:34:39:6a:f9:49:82:fd:b6:19:11:99:
                    5e:0f:49:05:b1:46:3d:c6:68:0c:25:c6:a0:ef:1a:
                    cb:00:df:23:14:ee:0f:38:a1:87:f4:9b:04:7e:99:
                    c9:db:57:77:2e:ea:25:a3:33:c7:9c:48:0e:5d:89:
                    20:7d:9b:83:8f:13:89:a5:17:8a:3e:f9:8f:55:d9:
                    ed:8e:9c:14:86:64:91:ce:9f:a9:d7:cb:11:57:3c:
                    70:6e:27:d9:31:c8:6c:14:f9:e4:8a:13:22:c1:d0:
                    c3:fa:c9:d9:f1:d7:5b:b9:bf:a2:53:1c:01:02:45:
                    b8:6e:f0:f9:a6:86:ef:06:2c:9c:15:53:3e:74:10:
                    5c:4f:32:a3:46:bc:13:09:c2:57:9f:ef:75:2e:49:
                    53:80:16:68:ab:d5:96:a4:5f:f2:63:c2:1a:e5:a5:
                    57:58:0e:5d:3d:29:ca:ee:9f:12:e8:73:20:e6:79:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:34:49:D2:3D:4E:48:BE:23:6F:1D:E1:F8:01:F3:49:D5:B7:C1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl

            X509v3 Authority Key Identifier:
                keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:01:81:3f:30:68:84:22:a4:5a:c5:1e:e8:ab:57:a6:e0:61:
         55:59:b5:ba:5a:a2:34:22:b1:92:ad:e7:c7:3d:67:07:eb:81:
         1b:ae:7d:57:fa:d2:33:45:33:26:62:32:74:da:c7:24:c4:8d:
         50:37:3c:e2:03:b6:3d:95:86:20:1a:e7:66:b7:97:82:0a:4d:
         6a:16:e1:c8:84:db:26:88:7d:4a:0a:34:3e:4b:66:c7:44:7c:
         c6:10:2e:3a:60:b6:e4:ed:44:65:7b:7e:bb:9d:3e:3a:3c:58:
         46:6a:cb:42:30:c2:36:83:3d:b2:5e:63:cc:b8:cf:a3:e0:40:
         b6:21:fc:73:42:6b:69:d4:b6:9f:14:6f:e2:90:c3:50:16:a9:
         b9:36:fd:0f:ab:b0:84:bf:9e:04:2b:6d:90:c5:bd:6f:93:6f:
         8e:c6:09:78:f3:91:98:96:69:96:9c:fd:c4:ce:31:ba:d6:c3:
         2f:b1:3d:85:d5:c0:4d:94:91:30:c9:cc:f8:52:38:17:cb:35:
         1e:11:c8:6e:1e:85:5e:92:69:b1:0f:a4:a1:93:8e:e4:a0:13:
         06:9a:fd:ed:03:42:c8:7e:e7:40:d7:4b:a9:aa:cc:20:e2:e7:
         28:32:17:5a:ca:a7:0b:db:ff:a3:d2:70:9b:e7:b6:3f:f3:6d:
         07:4c:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:01 2026 by rpki-client