Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa
File:                     a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa (raw, json)
Hash identifier:          WSQJlsuiwko69D8yYQFVf3CUHuHRrD6rfptfFKsqstA=
Subject key identifier:   21:2A:17:99:D5:33:AD:71:A8:05:3F:10:2C:23:A9:11:09:66:1F:DA
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F549DAE24337F82B40E5BAA40
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     13998
IP address blocks:        198.215.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ae:24:33:7f:82:b4:0e:5b:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=f87b8e83-0305-4dd3-a22c-75257ca1d297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:b3:6c:43:34:2c:ad:d1:31:a7:3a:f0:c3:
                    29:20:26:87:9e:c4:4e:cc:35:19:5a:51:93:47:ce:
                    bd:65:48:74:16:d8:37:56:40:07:77:ae:f6:2f:0b:
                    fe:ec:cb:55:00:2b:72:0b:44:d6:0a:1f:76:ba:a6:
                    ac:9b:24:e1:74:88:38:1e:4c:f3:d2:48:2c:8c:1b:
                    7c:19:17:71:d5:4a:d5:7d:c9:51:43:5c:98:c1:1d:
                    81:99:c6:b4:cf:90:6b:e6:1c:77:1c:98:1f:dc:26:
                    07:5f:12:2a:95:35:1f:0b:da:f6:a8:f4:04:19:a5:
                    17:39:6b:c4:32:cc:9b:f1:81:49:c8:d4:63:f3:70:
                    59:95:e9:63:65:c3:81:2d:de:a2:2b:fc:2e:83:15:
                    fa:c4:a8:9c:52:8b:95:32:a7:c1:dd:f5:73:47:6c:
                    9e:7e:8f:4d:32:65:86:3a:a5:79:d7:34:9a:13:79:
                    90:6d:14:21:1b:3d:9c:c2:47:b0:99:22:92:6c:af:
                    1c:9a:37:b1:c7:0b:a6:19:00:d4:d7:08:7d:5c:14:
                    9c:7d:31:56:d9:e6:94:66:bc:ba:66:15:7c:70:f1:
                    87:5c:24:87:5f:07:da:35:14:79:7e:cc:b2:4d:bc:
                    98:7f:6a:1d:d4:46:25:b1:34:0b:20:f3:57:9f:8b:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2A:17:99:D5:33:AD:71:A8:05:3F:10:2C:23:A9:11:09:66:1F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:a7:bf:26:e9:73:49:2e:58:ba:ac:f0:f7:78:58:52:75:
         d1:d5:ec:cd:46:e8:5d:1b:e4:cb:1a:26:f3:db:6f:d6:18:c0:
         03:1c:80:7e:02:46:6f:68:92:87:4a:f1:fa:af:4d:cd:65:4d:
         32:79:ca:2e:2a:ef:3b:03:d0:54:b1:d2:95:24:bc:33:ab:24:
         97:fd:89:c5:48:e8:5c:97:0b:4e:4e:88:cf:7e:6b:62:9d:fe:
         7b:31:dc:06:c4:fe:c0:54:f6:ae:df:45:01:16:35:07:ed:35:
         86:ac:06:9a:a6:6f:35:1e:ac:35:b1:25:df:a9:f4:7f:d6:ca:
         8f:bc:56:b7:f0:0a:68:10:88:50:0c:d5:c9:0d:a4:18:df:bc:
         3e:c2:71:9d:b4:a5:28:cc:67:5c:22:72:43:3e:6d:a2:31:4d:
         4c:42:0c:c1:7d:7f:b6:e8:36:0d:f7:2c:46:2e:80:eb:11:06:
         fd:40:7f:cd:7e:57:74:8f:06:1c:cd:86:de:cd:ad:d0:c5:a1:
         8d:98:25:68:67:68:a1:e8:07:1a:6d:75:58:f5:6c:b6:99:b6:
         1a:07:09:13:b7:00:a0:cd:c1:a4:f8:41:d7:a3:63:31:05:cf:
         38:31:ef:18:b5:b2:f7:91:3e:86:08:36:1e:09:ca:e2:c3:bc:
         60:08:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:08:55 2026 by rpki-client