Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/d7936a34-8e29-33c4-ae06-7b0bf2754a7c.roa
File:                     d7936a34-8e29-33c4-ae06-7b0bf2754a7c.roa (raw, json)
Hash identifier:          BC5vjEDu6rd/utND+PBuSD7krDRDn1PqwlaJPdFh3xg=
Subject key identifier:   36:5B:93:A6:FF:85:44:31:A8:DF:59:54:74:84:EC:BF:73:70:7C:DB
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584E815FC02F1868E6F655F78680
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/d7936a34-8e29-33c4-ae06-7b0bf2754a7c.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     2675
IP address blocks:        205.194.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:c0:2f:18:68:e6:f6:55:f7:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=976670b4-a890-4e9b-9eac-48bafa6899b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:4d:7e:c7:51:0c:48:4d:bc:86:21:3c:bd:
                    fb:59:53:42:f3:90:a3:07:03:a7:a5:d0:dc:2c:64:
                    ed:72:ce:6b:7a:41:59:9f:e3:a9:48:6f:6d:48:b6:
                    b0:eb:b6:f6:6d:94:d7:0d:f8:d4:2a:e4:ad:51:b1:
                    12:7b:6b:cc:54:90:df:5a:95:c7:da:e2:97:15:67:
                    bc:d0:ef:9d:54:11:fd:30:56:f5:8b:94:58:57:fc:
                    3d:0c:ae:33:25:36:4d:61:6a:70:f5:63:96:60:c0:
                    5b:ac:8e:35:d0:d0:06:5c:fb:c6:93:68:e3:a4:68:
                    b3:a3:9d:3e:9e:a3:78:15:71:1f:42:c4:9b:ff:fe:
                    3a:9b:c6:e0:1f:83:21:19:a5:a5:86:89:03:7c:98:
                    7e:67:4d:15:43:e0:16:6a:01:50:2f:75:a0:1b:94:
                    1e:97:24:bc:55:07:35:32:05:b0:df:5f:c5:55:08:
                    fa:ed:ea:a2:92:5c:8b:84:a3:3c:98:ff:8f:02:db:
                    1e:43:62:f3:cc:03:73:c3:63:65:70:1a:c4:5f:e2:
                    10:60:16:2e:01:b4:6c:a8:b1:c2:d9:d4:89:3f:ae:
                    8b:1f:bf:be:52:64:70:6f:9a:01:a9:c6:74:89:36:
                    91:a8:58:24:8d:e9:79:29:41:4e:f8:43:17:f3:03:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5B:93:A6:FF:85:44:31:A8:DF:59:54:74:84:EC:BF:73:70:7C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/d7936a34-8e29-33c4-ae06-7b0bf2754a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:71:2d:07:55:e3:aa:f4:88:58:da:05:d9:ed:9a:2b:9e:0e:
         36:ab:9d:d7:e6:1d:ef:59:0e:1e:99:b7:33:5d:4f:cb:6b:57:
         45:02:ac:ec:5b:92:f6:b5:b3:7f:d9:c6:18:f4:a3:df:d5:ab:
         29:b9:b2:f8:be:c1:7d:ff:82:60:88:61:b8:94:75:f4:ef:6b:
         40:0c:40:14:d5:3a:c5:38:96:62:47:2d:ae:10:75:ab:02:78:
         8d:23:11:d5:e3:ee:c9:f5:a8:34:70:57:32:ed:ca:b1:71:53:
         5c:34:21:48:d2:60:47:59:aa:5b:7f:6f:22:5c:d3:e3:40:7d:
         54:37:6b:66:04:ef:ee:44:7f:25:d3:cd:8e:93:11:91:e2:5c:
         0a:b5:57:7e:a3:bc:82:8e:09:e3:2f:8f:9d:6d:45:d7:6c:c9:
         4d:df:8b:25:d6:7e:c9:e3:37:5a:3a:cd:b5:a0:32:07:58:a8:
         7d:f1:af:1e:54:32:84:bd:98:3c:eb:bb:5a:2e:00:2d:2b:bd:
         8a:0d:42:d3:45:4b:f6:49:fd:54:99:44:9c:d5:1f:27:ef:c4:
         55:bc:0c:65:6d:a3:59:ff:c9:71:63:ba:c7:cc:67:65:03:6f:
         52:0d:72:4e:a6:e7:49:fd:2f:91:fe:62:8f:14:54:b1:21:7c:
         93:aa:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:37 2026 by rpki-client