Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8714f272-fb0f-3a7a-b641-21331f0f16ff.roa
File:                     8714f272-fb0f-3a7a-b641-21331f0f16ff.roa (raw, json)
Hash identifier:          aWKSwtYgs5U/rGF97YPqrMVh8DAZA0351g63tVxvnoA=
Subject key identifier:   92:B1:AC:8B:08:6B:08:D3:57:3A:BD:C3:2C:08:14:CA:B2:02:43:8B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796D92C3398EB840039B048
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8714f272-fb0f-3a7a-b641-21331f0f16ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        198.86.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:d9:2c:33:98:eb:84:00:39:b0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c3ee6f3b-9028-4c3f-a55b-3a3489a82fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:4a:cd:3a:bb:6c:ef:33:36:a0:35:92:fb:
                    39:00:60:30:d7:2d:67:43:be:43:2f:78:8e:ca:77:
                    42:87:6f:81:96:49:a8:b2:39:73:5d:70:e4:5b:2d:
                    23:54:53:a5:bf:db:e9:a3:74:e0:01:3e:a4:e3:ad:
                    56:6c:f0:f2:85:7e:96:d6:61:a9:10:cf:34:a2:84:
                    db:04:2d:6e:3f:b8:7a:76:84:cb:6e:db:26:f4:ce:
                    f2:04:2c:4e:42:30:c8:55:25:7f:3f:83:7e:1b:06:
                    7a:1b:f1:56:86:9f:a5:e4:1e:b7:e2:6c:97:5c:f9:
                    8d:77:b9:4e:2b:f8:47:9c:32:e1:a2:ed:e9:66:f8:
                    b1:9b:91:f3:9b:e3:95:9d:43:db:99:ad:f4:3e:e4:
                    48:da:19:40:1c:f6:49:bd:7f:11:da:65:a5:ea:6d:
                    29:16:68:e9:bc:54:97:df:0a:08:aa:6c:b1:73:19:
                    99:fb:5a:c1:cf:a7:1a:4b:ec:96:cf:2f:ad:ff:ab:
                    44:48:3f:a3:df:93:c1:08:83:67:77:f7:92:e2:c6:
                    87:13:68:22:3a:ec:93:b4:c0:be:77:e7:b4:38:9f:
                    0e:95:00:f5:47:8b:f0:44:66:9d:e0:e4:fa:12:8a:
                    44:46:2e:d0:bd:c2:b9:fb:75:fb:b7:e9:55:be:85:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B1:AC:8B:08:6B:08:D3:57:3A:BD:C3:2C:08:14:CA:B2:02:43:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8714f272-fb0f-3a7a-b641-21331f0f16ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:7d:37:78:f1:53:e7:59:9a:80:69:41:3d:9a:14:fe:ad:
         f1:76:da:53:92:00:2e:de:d0:b8:2f:63:ce:03:e2:43:f6:2b:
         1e:20:a1:0f:1a:7c:46:e4:6e:dc:bd:1c:5b:12:42:b4:a5:df:
         e4:8b:4b:cd:a9:a3:86:67:1c:d5:4d:95:73:e3:c9:e0:6f:88:
         b0:b8:bf:d3:cd:c6:57:2a:67:e1:89:13:a2:bd:76:0a:34:d8:
         35:d8:bb:9f:94:cc:5a:f1:05:62:5a:cf:90:59:40:b9:9e:45:
         71:8f:a1:36:bf:f0:1b:89:87:4b:ab:e8:80:1e:50:3e:81:52:
         da:71:e3:17:0d:a1:a9:e7:35:9c:be:67:75:eb:09:26:a7:0f:
         27:96:2c:e1:7a:66:7c:5f:34:e4:38:9c:43:08:b1:04:34:41:
         72:9a:79:6c:68:dd:b3:18:f7:6f:bd:9f:23:be:19:b3:ff:86:
         43:a6:19:2b:69:bb:67:d1:98:bb:df:b7:c1:15:35:98:86:bd:
         7f:a2:b8:d9:ae:f3:e3:76:77:eb:87:44:21:77:54:7e:d2:83:
         e2:ca:a0:5d:59:be:a2:c4:8f:8d:66:d0:3b:80:16:ee:55:bd:
         11:38:72:f9:c9:8f:4e:17:93:5b:9a:50:44:d2:53:42:3e:ac:
         37:05:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:15 2026 by rpki-client