Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f941ef6-cc26-3416-9db2-d20ed0a4a30e.roa
File:                     2f941ef6-cc26-3416-9db2-d20ed0a4a30e.roa (raw, json)
Hash identifier:          6yMaXEDl/6uwzhr+1wPR3qCvqYkQLjMCdXR/0T18zts=
Subject key identifier:   8C:BD:8A:B9:51:B7:20:80:01:04:18:FC:B0:93:F7:AC:D6:95:3F:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2ABD096ED156D56CD0023760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f941ef6-cc26-3416-9db2-d20ed0a4a30e.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        208.203.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:09:6e:d1:56:d5:6c:d0:02:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=bef0e4ae-436b-484d-b9a8-a4e00760b196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:86:de:8b:3c:57:5b:25:94:1c:2e:1d:26:
                    80:7f:70:82:5e:a3:7e:4f:de:b5:62:d9:a0:4f:10:
                    db:90:d5:5d:55:b0:44:18:5e:5c:78:3a:85:03:4b:
                    b7:c0:1b:40:25:75:d2:4e:e1:0a:b8:b2:fe:fc:3e:
                    1c:05:c6:14:6c:0e:92:63:db:b2:24:69:79:e2:83:
                    cd:94:61:37:eb:74:9d:e1:4b:94:70:33:1a:d3:7f:
                    e6:94:22:22:b6:b5:b5:e3:94:85:02:1e:17:e1:a7:
                    b8:c0:5b:e2:c5:8b:cc:5f:96:62:c0:bd:31:5a:27:
                    b0:04:62:a7:30:c0:57:46:e1:33:2e:ac:43:9b:16:
                    dd:a4:46:6a:b7:8c:29:45:07:06:ff:d9:b1:5c:cb:
                    5b:10:1a:42:14:67:fd:ee:88:d1:50:2a:d1:da:a4:
                    55:65:a9:55:d6:f4:a2:9a:10:cf:90:8d:3f:e3:77:
                    0f:61:17:86:4f:11:32:ef:13:07:f7:65:9e:4e:11:
                    9e:45:2c:9e:32:34:4a:d1:d4:fa:21:6f:28:db:96:
                    0b:92:d5:c0:6e:b5:a0:63:25:e8:ea:03:e2:4b:96:
                    ac:9f:8b:94:c6:fb:45:13:79:43:3f:9b:7f:4e:55:
                    9c:a2:84:73:4e:f8:a9:20:39:61:86:53:c9:d7:1f:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:8A:B9:51:B7:20:80:01:04:18:FC:B0:93:F7:AC:D6:95:3F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f941ef6-cc26-3416-9db2-d20ed0a4a30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.203.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:50:a9:39:b5:dd:37:d4:51:dc:01:d6:b8:25:e3:e2:8d:2d:
         92:8e:9a:83:22:36:42:cd:4b:e1:4e:28:fe:a7:06:cf:11:21:
         2f:0d:a2:60:02:83:7e:5c:c0:7f:a0:47:21:4c:ec:03:d9:a6:
         5b:6b:f5:2d:ab:2e:df:d9:5e:64:60:2b:3a:fe:17:38:df:7a:
         da:2a:cc:c7:e7:05:fc:08:57:d1:58:93:13:80:66:25:fd:8a:
         ec:1b:15:9f:0f:45:7e:b8:4a:cb:6c:78:ba:d5:e1:08:9d:f0:
         55:14:5c:3a:8d:cd:a3:e2:dd:86:4d:56:02:79:50:6d:fe:77:
         4f:74:53:73:f8:ab:f3:d7:57:12:a1:33:8f:6a:4d:59:0d:a2:
         21:66:16:a3:65:ce:20:5f:01:c8:cb:9f:d4:34:6d:ed:30:8a:
         7b:ab:dc:ce:2d:e1:7d:19:b3:f6:8a:e0:39:ec:37:de:48:4f:
         d6:7b:e4:19:ea:81:38:cd:2c:cf:c9:84:fb:ce:41:99:69:b8:
         55:59:1a:e2:b2:96:76:c8:a5:31:ad:95:c4:07:c1:00:37:98:
         c5:09:86:62:b7:14:61:25:c5:7a:99:32:b2:45:8d:2e:97:9e:
         1f:a0:65:b1:56:9e:da:af:47:3e:12:3d:2d:d4:88:e0:53:89:
         1c:14:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:27:34 2026 by rpki-client