Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a34f5ea8-87c0-3e7e-afd3-b66a9c4e9f5d.roa
File:                     a34f5ea8-87c0-3e7e-afd3-b66a9c4e9f5d.roa (raw, json)
Hash identifier:          pXlleO8Cy1TV25kP0DOhdEe1ZWuiFj+YiQ4ddNqWeb8=
Subject key identifier:   BB:E0:EB:E3:1D:C4:B9:04:20:0C:BD:01:98:E5:B3:C0:01:AF:4D:F3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F49737B1CCB5B72131A919C80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a34f5ea8-87c0-3e7e-afd3-b66a9c4e9f5d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        209.73.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7b:1c:cb:5b:72:13:1a:91:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=646d589e-aa72-4ef3-be0c-09e14f1f36ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:0a:ec:1f:67:41:34:4d:ec:62:3b:fd:46:
                    8e:ae:b9:63:be:48:d5:8a:4e:7d:20:08:7b:0b:f6:
                    41:fb:e7:18:34:25:83:3f:17:30:bd:83:bc:bc:3c:
                    2b:89:ec:f4:2e:51:b8:cf:9c:15:0a:1f:cb:2c:71:
                    39:01:18:5e:1e:df:29:ff:bc:e5:0d:f3:7a:7f:fc:
                    0a:2c:74:5c:80:ba:2c:e4:d1:ca:c0:70:77:96:33:
                    21:ae:d1:e0:55:17:e5:ac:b4:00:50:45:be:7b:1e:
                    90:70:6b:be:3d:6c:fc:ce:46:c1:57:4b:ca:7b:dc:
                    83:0d:f5:2b:96:70:92:17:fa:29:3d:fa:a7:85:c8:
                    df:35:ae:c8:17:b2:76:4e:71:b6:6a:07:f0:6e:ec:
                    56:15:44:7b:99:ae:5f:4b:7f:9d:e4:8e:01:10:1a:
                    ce:41:23:f9:c3:af:73:88:a1:04:9a:30:c7:38:21:
                    85:30:ef:73:91:32:b2:8f:1a:f2:5e:db:ac:3c:9d:
                    21:47:b4:c3:72:6b:38:f7:f1:05:04:ed:78:98:fd:
                    16:d5:c8:87:79:b3:55:7c:7c:c7:bc:82:51:d6:b2:
                    e7:83:b2:f1:5a:9b:ba:58:4b:a1:84:df:bc:2e:aa:
                    d9:ed:7a:cc:7a:98:43:4b:50:41:70:9b:3d:59:08:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E0:EB:E3:1D:C4:B9:04:20:0C:BD:01:98:E5:B3:C0:01:AF:4D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a34f5ea8-87c0-3e7e-afd3-b66a9c4e9f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:2b:06:15:29:72:38:37:51:c1:7f:89:86:fe:f1:de:c3:
         de:5a:0c:e6:45:89:71:e9:a0:21:75:2e:dc:5c:44:ba:cc:b2:
         a7:da:6f:da:31:31:88:5b:64:d6:03:de:2f:21:a4:86:95:59:
         6b:00:90:bf:40:95:ca:8e:f6:bd:2c:06:58:63:1b:be:a3:74:
         98:88:29:f1:20:32:34:d3:c9:75:de:a2:58:94:53:40:fd:84:
         a5:be:74:d7:bb:42:25:45:33:28:6d:c4:01:6a:9a:b9:fa:89:
         2d:3d:6e:c0:19:b8:cf:dd:54:f3:52:1e:8c:3f:c8:59:7e:34:
         c7:12:48:92:a1:8e:82:b7:83:85:5f:24:34:8c:60:b6:7d:f5:
         dd:8b:28:a9:03:c1:6e:b5:b9:cd:55:3b:e8:fa:02:ba:3a:b5:
         9d:1b:15:f9:d5:63:60:9d:f5:6a:00:5d:74:8f:f8:fb:e0:79:
         ae:54:a4:be:a4:8d:ab:74:12:1f:27:69:fa:dc:9b:ce:b3:a6:
         70:15:fc:ce:6f:20:40:80:4e:ed:b5:44:65:6e:8f:bc:20:bd:
         32:2f:64:ab:4d:38:9f:43:54:b6:7e:06:7a:07:10:4f:c2:be:
         65:fe:e7:48:f8:7f:5b:1f:86:f1:44:f2:9f:5b:d9:5e:db:7d:
         06:1b:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:17:42 2026 by rpki-client