Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa
File:                     1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa (raw, json)
Hash identifier:          teI0h3Kfwjd33hR6cB7Ug7jdmUV8g4ldwyUySai3NJM=
Subject key identifier:   BA:DB:ED:01:75:7D:C2:68:54:DA:4E:17:9E:C9:36:3A:65:6B:92:7C
Certificate issuer:       /CN=a2d891cb-6de8-4437-8155-3741bf9d4144
Certificate serial:       010D0C9F4328584F2ABD1D12CDB8C0099A4D5880
Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        206.183.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:1d:12:cd:b8:c0:09:9a:4d:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=93443a10-bc0f-4e16-8005-3ba413fdbb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:4a:45:da:89:9e:7d:70:e0:31:40:29:c8:
                    34:7f:25:1f:39:bb:87:13:4c:e1:b1:8b:a6:51:37:
                    ab:60:9f:0a:aa:50:ba:61:5c:0c:53:cc:45:04:51:
                    66:af:36:23:09:89:c7:4b:71:98:0a:ca:20:0d:86:
                    9b:77:67:3b:c1:36:88:c4:94:6b:60:53:6c:01:ae:
                    ed:6b:b5:2d:fd:7e:2b:9e:72:7d:94:b9:0e:c9:4b:
                    40:8f:8d:28:16:d0:66:8d:d8:81:e6:e1:2c:da:82:
                    a7:fd:f4:fc:e0:6d:b8:71:ee:b0:93:f9:61:47:a2:
                    f5:26:75:48:a7:75:7c:36:6e:f4:3d:82:62:19:ef:
                    27:92:0f:c4:78:a3:fb:bb:16:f4:fa:3a:ae:4c:cb:
                    50:78:12:5d:00:d0:d8:a4:17:0b:3f:07:02:71:98:
                    8c:e9:f8:6f:c3:a1:d6:ef:1f:6a:17:a2:21:58:ce:
                    c4:fd:ee:2e:38:a8:d2:f2:3c:08:f9:64:77:10:36:
                    13:d4:99:22:7c:a5:7a:c8:5c:fa:29:15:d3:cd:17:
                    15:77:ce:e0:28:d8:f8:56:6c:2c:ba:e1:e3:14:98:
                    0d:e9:57:f2:6d:b1:07:2c:d4:96:7b:b9:ea:b5:ed:
                    1d:e1:b0:27:12:5b:11:32:62:8f:b8:f2:bc:38:51:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DB:ED:01:75:7D:C2:68:54:DA:4E:17:9E:C9:36:3A:65:6B:92:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl

            X509v3 Authority Key Identifier:
                keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6f:f6:00:19:63:82:00:20:73:2f:09:68:c3:27:ec:83:dd:
         2b:2c:2c:a0:69:f9:77:06:60:ab:d7:a9:87:08:e3:53:83:36:
         aa:4c:27:00:cf:12:1f:ca:38:9c:e9:02:d1:a6:35:c0:f3:4c:
         08:28:c6:39:6d:a7:8b:ab:e6:1f:71:8f:64:5a:2a:92:69:e4:
         aa:e9:60:4c:e1:34:15:a1:fe:cb:0a:da:83:45:97:45:47:fa:
         bd:6d:a1:ab:eb:e4:d8:dc:3f:c7:c8:58:bf:7d:5c:91:17:84:
         d8:d6:8f:cf:09:5b:74:d3:d1:1d:c3:17:cd:ae:ae:0d:7b:fd:
         80:b1:80:d9:93:77:80:01:f2:94:1c:ed:f6:76:68:ba:4f:26:
         38:96:b5:32:f5:2a:22:fd:f9:8d:e5:93:15:1d:40:22:8a:91:
         0e:01:79:61:8e:57:18:92:f1:07:66:89:07:88:6a:c2:0b:b3:
         74:db:38:3d:61:6a:db:63:3f:d8:26:05:08:ae:71:de:25:bb:
         3d:c3:9c:21:1a:ed:bd:32:fe:1c:ef:8d:31:94:2d:63:89:44:
         84:bc:85:8d:f8:a1:1f:2a:d1:af:7d:f1:46:b2:8f:bb:be:92:
         b3:76:d3:c1:ed:bb:ac:3b:77:23:bb:dd:c9:82:26:11:5e:da:
         f1:21:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:37:29 2026 by rpki-client