Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2c875ca0-9e5d-3b0f-84ed-9bf178369987.roa
File:                     2c875ca0-9e5d-3b0f-84ed-9bf178369987.roa (raw, json)
Hash identifier:          TptN6SRVczpqT8C8ThPUKVEA+CIeFO81soLUO8IYHkk=
Subject key identifier:   EB:24:AD:33:3B:6F:03:5F:48:76:B1:81:33:18:F7:64:CF:AB:38:E2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DBD059B01E337B662943D5E80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2c875ca0-9e5d-3b0f-84ed-9bf178369987.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     834
IP address blocks:        209.101.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9b:01:e3:37:b6:62:94:3d:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=820b283e-a806-444d-83f2-506bb3f8ff73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:e5:d1:09:8f:bf:af:01:4d:4e:43:48:2a:
                    eb:83:94:04:12:e3:35:90:fa:05:f6:74:2b:b6:64:
                    84:d8:e3:88:41:50:af:af:4f:37:91:bd:42:df:60:
                    a7:10:b6:5a:ea:d5:20:a3:26:96:0e:ae:7a:32:3e:
                    45:6e:9c:62:52:62:76:ac:30:1f:0b:77:de:f4:01:
                    19:7a:63:fe:f7:fb:04:2e:17:db:6d:90:f4:62:35:
                    b8:41:20:09:15:06:e4:6c:e8:89:5f:2b:69:63:d5:
                    de:20:c7:2b:85:6f:52:db:28:27:e9:0c:62:43:1b:
                    5f:5b:46:47:25:a6:a5:24:6b:c7:08:5d:be:e9:00:
                    82:13:6c:1b:08:53:0c:2c:0a:e5:c7:a1:6f:98:f4:
                    e1:8b:f8:90:19:65:04:f8:ff:43:20:4c:d0:9c:30:
                    79:95:f8:56:7b:b1:aa:c3:6f:d2:53:3c:9d:00:12:
                    36:6e:4f:ff:d9:3a:6c:e5:07:46:24:17:1d:54:c2:
                    33:58:c3:fd:72:d9:b9:26:f2:8d:98:81:9c:0a:0a:
                    29:53:98:87:91:8f:6d:5c:b8:8d:f3:03:d4:02:7c:
                    ba:52:a0:f7:cf:f0:1e:f5:25:9a:d9:06:a1:29:ed:
                    6d:ef:c8:15:5b:56:09:1e:29:ef:d2:1b:be:5a:d7:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:24:AD:33:3B:6F:03:5F:48:76:B1:81:33:18:F7:64:CF:AB:38:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2c875ca0-9e5d-3b0f-84ed-9bf178369987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:38:7b:6b:2f:23:46:73:a1:53:b0:17:7f:b5:87:b3:28:4e:
         c7:64:64:8d:72:bc:d0:6c:34:3f:bb:22:f6:fc:d3:fc:00:25:
         fb:19:cd:a6:5f:1c:76:f2:cd:e5:a3:a7:02:41:47:d2:40:8b:
         8d:e6:5d:4e:61:87:68:85:9e:66:e5:6f:b5:20:eb:77:9e:b9:
         dd:9e:0b:5e:29:a9:5b:34:d8:aa:0e:76:9e:70:cb:89:9b:ee:
         69:02:1a:0d:4a:46:6a:29:62:cf:1b:78:e3:73:eb:f5:b0:08:
         ed:bf:bd:42:13:19:73:59:87:5a:e8:7b:3e:0b:c6:5e:4a:80:
         75:a6:b8:7c:e9:f5:ed:e4:7a:1b:8c:25:aa:56:31:16:ad:5c:
         21:74:7f:fe:20:b4:83:d7:a7:7f:56:48:c0:c4:31:15:24:04:
         76:9d:1c:f8:8e:6a:db:19:e5:d9:86:01:08:46:4a:31:41:f8:
         6a:b3:7a:71:57:40:8c:ed:4b:7d:52:e3:42:14:ee:2c:3c:54:
         b0:46:35:47:32:3e:b6:9b:bd:24:4b:3d:e7:71:cf:c8:19:ca:
         4f:cc:72:50:00:d3:c8:6c:9e:8f:88:85:53:21:b4:42:e8:76:
         9e:dc:93:c3:9d:48:1a:34:ee:f8:ce:4a:af:4a:f6:cf:f1:88:
         40:f1:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:27 2026 by rpki-client