Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
File:                     ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa (raw, json)
Hash identifier:          sqSdDP8ps1TJJAfgiIetD6vS3MEllyDg9zlNCZSNxe4=
Subject key identifier:   99:5C:91:E4:E4:B3:D7:61:F3:6C:83:0F:5A:D9:44:65:74:FC:64:42
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584F2ABD238B7734B457B0FF78C0
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     27370
IP address blocks:        216.163.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:23:8b:77:34:b4:57:b0:ff:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=acc020c9-689b-4ef1-80ec-d1dbad96b5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:cc:bc:c2:3c:88:93:19:c8:fb:21:36:31:
                    5a:1a:42:93:0e:6f:7e:c6:16:df:08:10:a3:3d:bd:
                    6e:2e:58:61:5c:5a:1b:ba:41:cb:c0:f8:44:1c:79:
                    4f:dc:36:af:10:3a:40:e0:e2:e6:74:da:09:d7:0f:
                    0e:0c:4c:e8:1f:82:d0:28:3f:1c:ce:a9:c8:d2:21:
                    67:c4:c4:6e:0c:47:aa:4f:da:54:d5:b8:d6:7a:5c:
                    3f:82:8c:0a:85:6f:fc:4a:73:c5:b2:f7:5d:87:f0:
                    b6:9c:f9:cc:09:e8:4b:0d:b4:3a:92:0c:b7:dc:9f:
                    2f:42:94:3d:24:c2:13:2f:a1:5a:d6:df:d4:5f:81:
                    76:63:93:0c:0b:b8:f0:6d:1b:47:4b:0b:90:74:02:
                    7c:89:e5:f2:39:4c:5d:6c:51:26:c3:ea:12:77:63:
                    7d:bf:16:00:db:77:42:10:1f:9f:f8:30:69:ad:3a:
                    e8:c7:c8:96:74:29:8c:61:f9:b6:96:ab:02:14:84:
                    3d:ff:e7:ec:8b:42:1d:b3:64:28:04:08:be:39:fd:
                    98:f8:90:a7:58:53:be:7b:3c:04:87:21:56:79:91:
                    3d:44:a5:31:e6:c5:c0:21:41:51:c0:a4:cd:af:5f:
                    30:4f:d6:bb:8f:e1:ee:6d:05:f7:c4:55:ac:b3:df:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5C:91:E4:E4:B3:D7:61:F3:6C:83:0F:5A:D9:44:65:74:FC:64:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:29:3a:3f:d0:72:b0:74:f0:98:48:a4:68:96:7c:7f:13:
         83:c0:d0:f8:03:c4:b1:2a:09:9f:23:8a:84:a6:86:1b:2d:f1:
         d9:0a:fc:33:11:53:4d:40:b2:da:01:7a:1d:2b:7b:d3:c3:d1:
         61:fa:a9:19:65:59:e3:85:15:d6:2e:ba:c9:09:90:d2:99:2c:
         af:a5:e3:1e:22:4b:78:03:66:30:b2:bd:c7:d6:54:f4:88:d3:
         d1:14:bc:36:d6:30:09:03:98:0b:a0:4f:8c:4f:88:8e:92:3d:
         af:0e:0b:d9:79:f0:ea:5c:b7:d1:c1:aa:ab:eb:ac:57:c1:fb:
         18:a0:e9:d9:9e:d2:dc:8d:5d:ab:00:c2:e1:45:14:8d:ab:10:
         3a:24:25:41:a7:41:c9:8a:87:60:23:f4:63:de:35:8a:43:b9:
         d2:60:e6:85:3e:00:82:73:8c:48:a4:a0:09:37:89:6c:9d:4b:
         f0:c1:94:92:41:ce:b9:7a:cf:c9:6f:09:b2:3c:c3:04:25:75:
         16:73:d1:ec:33:77:9a:49:b3:be:9a:08:9e:4b:fd:bd:38:b8:
         c4:47:2d:4f:e0:d6:88:83:51:1e:64:b9:4d:6e:dc:44:e0:c9:
         94:84:0e:81:76:66:24:14:7b:f4:fa:b9:cd:be:d8:3f:ec:b1:
         59:25:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:32:18 2026 by rpki-client