Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/aec5fabf-32ef-3915-b438-fa268b84862f.roa
File:                     aec5fabf-32ef-3915-b438-fa268b84862f.roa (raw, json)
Hash identifier:          OpxFnQCDSXMF1WLaywbwH7bx6LENeXYhOQ8wSKg7LWM=
Subject key identifier:   CA:00:F2:F0:1B:3C:4C:B9:05:EF:6E:FA:73:36:0E:1C:4B:DB:1F:57
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584E35FF1A194FBD93CA56682600
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/aec5fabf-32ef-3915-b438-fa268b84862f.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     6507
IP address blocks:        192.207.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1a:19:4f:bd:93:ca:56:68:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=c4d865a7-cb94-4dd1-ac8f-0ea94bd0bd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:3a:f5:b6:62:94:c3:dc:e6:b6:0f:c2:21:
                    9b:62:d3:ea:0c:42:ff:28:0f:16:95:b8:7a:18:ca:
                    6c:87:ef:e8:0a:71:45:cf:63:75:c0:76:ba:26:78:
                    45:3b:8d:3a:c9:98:5e:ea:66:d1:da:fd:eb:e9:27:
                    7a:91:44:c9:fa:92:80:42:e3:90:c2:26:05:20:44:
                    3c:a9:29:84:b3:8b:58:83:e2:dc:9c:99:b5:68:3a:
                    9b:3d:24:e3:f8:6e:e6:e9:b9:43:7c:26:98:e7:ae:
                    2c:09:c2:ee:40:33:ed:56:7d:a3:ae:40:bc:ac:36:
                    d1:c6:ff:e3:87:25:5e:2a:bb:53:e5:5e:f7:3a:a6:
                    8f:3f:5b:e4:d7:7a:d9:cb:23:5a:2e:c5:a7:4b:8c:
                    81:22:66:a3:9c:9a:f7:b8:bc:0f:a9:f0:cb:87:0c:
                    e2:97:43:e9:19:f0:a2:0b:27:44:8d:dc:f7:a6:09:
                    e0:5b:1e:b5:2e:3e:d7:99:9d:a2:a7:9c:cd:f1:4f:
                    90:87:58:05:a9:88:2a:f5:4a:2f:1b:78:da:7a:60:
                    dc:a2:c6:8a:93:0b:81:ec:33:71:ed:37:bb:3b:0d:
                    d0:96:93:65:98:2e:68:25:c9:26:cb:4f:9e:a5:1a:
                    a4:f3:3b:f9:d7:65:44:24:2e:67:9f:ab:9f:39:4f:
                    5b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:F2:F0:1B:3C:4C:B9:05:EF:6E:FA:73:36:0E:1C:4B:DB:1F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/aec5fabf-32ef-3915-b438-fa268b84862f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:41:e5:84:da:4d:08:f0:cf:1a:8c:a5:a9:28:92:73:53:
         08:46:40:2d:75:3c:8b:40:39:c7:76:7f:68:26:fc:8d:4d:2e:
         29:f5:93:b1:d1:ca:6a:8e:a2:49:43:a8:11:25:5c:b6:e9:fa:
         ee:f5:4f:37:63:ad:96:35:02:ba:82:1d:10:c1:78:f7:9e:95:
         24:24:25:e7:14:7e:5b:49:4a:8a:ac:c5:45:81:a2:e1:46:1a:
         7c:33:5d:2c:1d:e6:52:a2:b9:8e:1b:4d:e8:3a:7e:33:4d:06:
         5f:34:81:a3:9e:dd:03:8f:67:df:b5:13:49:25:f1:28:d7:c6:
         f6:49:c8:8a:4f:1b:ea:97:ab:68:68:0e:72:b4:9d:63:ae:ab:
         ad:0e:1d:63:d5:a0:09:41:1a:09:ef:8f:9e:b3:68:d5:d8:d9:
         0a:5c:40:ee:04:0f:68:33:2b:16:98:a2:39:6f:e6:f3:c4:84:
         7c:e8:33:3a:c9:0f:50:4e:57:91:32:85:d7:49:8d:17:5a:ba:
         80:85:3e:e0:03:c0:73:41:c6:af:42:d2:bc:9d:3d:b2:87:6c:
         48:b3:4f:42:7e:bb:9b:e2:f0:71:59:56:c5:44:b9:af:cf:e1:
         2c:e3:2d:f7:b6:31:d3:04:21:16:eb:5f:0e:6a:fd:ab:f7:74:
         6d:8d:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:35 2026 by rpki-client