Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa
File:                     84f84f12-38ad-3ae0-a20a-27a22b71a069.roa (raw, json)
Hash identifier:          EtB0f2rhAWFgBBmTFc1DYxnG03JIjYIbVcH/uZBpzkY=
Subject key identifier:   EE:E4:F9:05:FD:64:00:C1:E7:DC:94:4C:AE:C2:32:C6:3B:4C:9F:7E
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F549D48477E299B83DCABF620
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     6922
IP address blocks:        198.215.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:48:47:7e:29:9b:83:dc:ab:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=1dcc1bd7-5459-4109-a1de-527dcae45102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:c5:73:c6:49:37:df:09:67:29:fd:6d:52:
                    98:f1:10:72:19:db:6e:46:25:ed:56:5a:f7:c4:6e:
                    43:c1:4e:3b:0c:2a:0e:14:04:46:b2:cb:a4:e1:8c:
                    d3:ed:04:01:d7:e7:34:89:04:5a:59:62:2a:4c:f4:
                    89:32:9e:bb:86:da:a6:f4:f1:74:65:2e:f0:d2:f1:
                    80:67:7a:39:03:8e:ec:85:c2:8d:7b:97:ac:74:80:
                    8e:65:96:ee:58:eb:00:21:5e:6a:97:7b:c3:a2:f9:
                    8e:13:f3:a4:32:30:70:40:49:78:b3:b2:6c:f8:e7:
                    c0:5a:17:92:2d:e0:f3:f8:0e:04:5d:36:6f:2d:71:
                    2c:d8:22:30:38:09:5f:29:7d:5c:5e:6d:2c:37:8c:
                    02:83:f9:17:2c:17:51:9d:f8:79:fa:4f:1c:c5:d1:
                    70:43:06:1f:d4:81:e0:2d:a4:c0:6c:41:9b:e8:7c:
                    a2:63:a6:b5:63:df:e9:c7:06:d0:c5:95:2b:ce:cb:
                    36:e4:30:a3:d4:ba:57:53:3a:ae:e0:6a:17:28:ad:
                    56:df:c7:82:9c:2a:a9:33:77:a3:72:a2:d1:7b:86:
                    10:aa:99:d1:bb:f9:74:96:16:25:ed:d5:87:24:f8:
                    fa:4d:84:47:eb:73:25:bb:e4:67:93:46:8c:a7:bb:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:F9:05:FD:64:00:C1:E7:DC:94:4C:AE:C2:32:C6:3B:4C:9F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:00:47:70:84:d5:e2:3d:a2:6b:7b:84:d2:81:d7:c0:0d:
         c3:64:b0:59:30:38:05:8f:75:09:2d:2d:7e:91:4a:f9:66:d2:
         5d:10:45:f4:94:7e:39:87:41:26:5d:ca:8f:b0:69:95:17:7e:
         5e:e5:a0:71:9a:99:6e:19:9c:3f:68:0f:f0:2b:d6:08:78:ce:
         dc:2d:72:3c:9a:1e:5c:c7:79:55:3b:9e:ef:d2:53:40:3f:5f:
         c0:ab:83:1d:65:05:a4:36:51:1d:af:68:f7:b3:70:5b:9e:ae:
         6b:09:d3:e3:78:56:8c:3e:12:26:41:1f:bb:40:e3:d1:27:60:
         f0:60:7d:b1:60:16:28:31:cf:98:ca:b3:7a:da:e7:b8:ba:76:
         63:14:29:32:0c:74:30:f6:5a:58:4c:2b:a8:a2:ea:cd:98:02:
         d0:28:e5:a4:00:05:53:7e:d6:22:c0:68:3c:74:c9:af:a1:36:
         27:5c:84:17:49:1c:b7:63:61:04:e4:92:39:7b:b6:f5:dc:d4:
         22:8b:35:a9:d1:30:ce:e4:2d:49:09:55:eb:c7:18:a9:be:1a:
         29:77:96:b8:b6:33:e9:83:50:7c:c5:7b:bd:9a:37:21:ec:37:
         f0:53:6b:41:40:97:4c:92:7c:79:70:96:f9:ae:bb:53:b6:d5:
         1d:2f:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:29:03 2026 by rpki-client