Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/07c530f3-9b5a-31a3-9c8a-53b373852578.roa
File:                     07c530f3-9b5a-31a3-9c8a-53b373852578.roa (raw, json)
Hash identifier:          f/6iHE3MKBqCulrg+BQ5r1p1WUuLAfgLfuzJc8soHZk=
Subject key identifier:   92:8D:64:34:C1:D4:BA:22:3E:8A:7E:BA:D8:D4:19:EE:96:78:03:1B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F49732912B315BDA94B26BC80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/07c530f3-9b5a-31a3-9c8a-53b373852578.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36014
IP address blocks:        207.168.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:29:12:b3:15:bd:a9:4b:26:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b35b3fb8-f9b3-4a65-9e02-5f6be46a4ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:23:c1:76:31:6c:d2:49:42:b5:5c:9e:de:
                    e5:8c:aa:7a:13:f0:3e:93:f2:d9:39:e3:e2:01:87:
                    da:1f:5b:7f:bc:65:d5:68:8e:d4:ba:ca:5d:85:3c:
                    b9:1a:64:5f:57:49:fb:77:a6:b6:11:fa:c8:69:d2:
                    be:40:fe:4f:0b:dd:eb:4a:bf:38:14:69:15:ff:14:
                    dc:82:8f:e6:ea:1b:bb:7e:c2:9b:ad:5d:cb:f1:64:
                    da:20:5f:10:d9:d2:9e:1f:44:d7:12:c2:3a:d1:46:
                    09:ad:52:fb:24:09:26:8c:ea:d4:58:94:4f:e5:ba:
                    97:5e:e2:44:e8:18:d1:36:ee:2e:43:b3:b1:89:86:
                    93:8b:54:06:6c:48:de:08:4f:8b:5a:13:45:07:56:
                    08:3d:59:4c:de:53:0d:3f:d5:fe:74:6f:60:f6:2c:
                    e2:fe:f1:00:53:27:7d:bb:f3:4b:37:85:cc:a8:ed:
                    e3:e3:9d:9b:1b:e0:b7:f0:a7:ee:86:d8:10:f8:1c:
                    8b:bf:e5:09:66:e5:64:82:c1:c2:b5:74:93:79:1b:
                    37:3a:27:88:6a:17:45:58:35:87:76:6a:0a:51:ef:
                    c3:19:db:5b:82:c6:f3:e9:4f:ef:3a:42:77:01:23:
                    b5:52:5a:3a:79:33:55:bb:e2:34:8f:9e:e8:13:48:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8D:64:34:C1:D4:BA:22:3E:8A:7E:BA:D8:D4:19:EE:96:78:03:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/07c530f3-9b5a-31a3-9c8a-53b373852578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.168.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:fb:57:81:0a:4c:7f:1a:bd:74:60:0b:94:b0:68:44:dd:
         d8:59:e3:33:0e:15:72:9b:36:f7:b6:11:c0:24:7b:d3:8c:73:
         d2:a6:22:e6:18:16:6f:31:a9:41:a0:e9:f7:7c:01:bd:08:da:
         81:b0:0b:3b:41:da:26:a6:dd:ef:d1:c5:e7:80:7b:a1:fe:33:
         38:9d:91:a9:b8:e0:6c:af:1b:61:fb:82:f4:cb:a0:80:97:79:
         9a:cd:fc:2c:9f:68:2c:0d:93:7b:05:18:14:35:4d:ea:8d:89:
         1f:32:30:df:06:a5:12:37:b7:71:88:86:d6:92:80:90:b7:c8:
         45:96:db:e4:d3:ca:0b:48:c5:64:c5:47:0d:f6:f4:8d:d6:6c:
         92:b1:67:0e:05:7e:08:4f:f9:77:f1:86:9d:8e:81:00:a1:9f:
         80:df:c1:09:f7:35:7b:3b:47:85:3f:de:b6:d3:ef:d5:d7:c1:
         f5:42:b3:9c:4e:9f:93:ef:ba:58:db:0a:63:55:29:19:83:f3:
         c8:34:bf:40:6b:02:dd:73:3e:09:eb:5f:ec:6a:b9:2b:73:37:
         65:08:ff:ec:ae:f5:59:29:3c:10:34:8e:58:ed:33:9c:c9:59:
         2b:50:a4:51:d5:2b:74:aa:d0:60:5d:7f:51:d3:f6:15:cb:9b:
         f4:4a:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:29:32 2026 by rpki-client