Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/14718bc3-127e-3dba-8f71-945b415d97f3.roa
File:                     14718bc3-127e-3dba-8f71-945b415d97f3.roa (raw, json)
Hash identifier:          FO6vTMYUwP2j2k1L9MRvYPU6Z88aIbbG7bkdljyRE4E=
Subject key identifier:   87:A6:37:FF:4B:FE:F4:11:28:4E:D0:5B:8E:B6:82:D6:FB:44:C2:DA
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F3D04F12523AC8BB08D9EEF30
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/14718bc3-127e-3dba-8f71-945b415d97f3.roa
Signing time:             Sun 20 Sep 2026 14:09:43 +0000
ROA not before:           Sun 20 Sep 2026 14:09:43 +0000
ROA not after:            Sat 19 Dec 2026 15:09:43 +0000
asID:                     13537
IP address blocks:        192.25.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3d:04:f1:25:23:ac:8b:b0:8d:9e:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep 20 14:09:43 2026 GMT
            Not After : Dec 19 15:09:43 2026 GMT
        Subject: CN=5e4e041a-1651-4617-9d98-4ab37c0495a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:6c:bd:76:52:1c:dc:1e:bf:20:3a:2d:3c:
                    84:84:dc:00:d6:99:51:a1:98:bb:b7:e4:44:e7:ab:
                    82:5f:e9:53:be:71:fb:bf:81:48:fa:42:f6:6c:0c:
                    9a:e3:33:87:97:3a:27:55:27:87:01:0a:d2:83:53:
                    b3:9a:18:28:e8:4b:66:4c:53:82:c7:65:98:ac:5b:
                    c0:fe:37:f4:c7:5f:18:2d:e2:b5:9c:03:b8:a0:7f:
                    e3:69:87:79:ef:9f:6d:fc:dd:c2:5b:85:b8:4b:b5:
                    4f:f5:7d:34:14:eb:0f:7e:b3:19:7b:83:71:55:5c:
                    e2:ee:00:02:18:30:eb:61:8b:13:e9:cb:d0:08:8e:
                    df:d1:f8:de:00:d9:21:99:83:8d:8b:03:ad:06:ae:
                    33:8c:ce:4d:f2:be:91:e2:3d:d1:3e:0a:df:2c:de:
                    83:87:0b:fd:b9:a1:da:74:1a:3e:e9:53:5e:f6:00:
                    49:fc:da:4e:3f:10:40:ea:fd:4d:ce:a3:54:1a:31:
                    30:2b:7b:57:88:5e:74:31:9d:24:49:b1:ed:5d:5f:
                    28:e7:fc:96:8a:3e:44:05:9c:36:6a:98:5e:c8:c3:
                    d5:7b:5b:dc:dd:fd:1d:39:d1:67:da:2e:5e:ba:1d:
                    dc:6d:93:69:03:e2:f8:4a:94:b3:7f:ea:60:27:f1:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A6:37:FF:4B:FE:F4:11:28:4E:D0:5B:8E:B6:82:D6:FB:44:C2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/14718bc3-127e-3dba-8f71-945b415d97f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:5a:d3:a2:ca:62:5f:22:a5:24:1d:af:91:83:c8:3d:ed:
         78:84:b2:ff:1e:a2:b3:39:e9:51:04:d6:ac:2b:b6:6c:65:87:
         4b:35:4a:67:f4:04:5a:43:c0:da:41:39:93:88:5d:ac:7b:f0:
         b9:3f:0c:a8:ae:b8:25:fc:62:d5:ae:36:b1:49:8c:7f:7c:62:
         52:79:d9:16:26:ab:3a:04:73:1d:10:a4:e6:74:93:79:58:01:
         9d:de:dd:f9:29:93:47:9a:1f:38:18:27:5f:1d:e7:3f:b3:9b:
         0a:bc:83:60:f9:67:4f:72:54:93:93:6c:81:1b:e0:41:45:e0:
         33:2a:6b:d6:ee:39:a3:bf:0f:b9:39:9c:96:e0:46:30:fb:0d:
         a8:8f:f9:83:45:e8:34:fe:5f:3e:24:07:b6:25:84:4b:4f:b6:
         61:2e:92:66:f5:91:4c:8c:5d:57:61:0e:a5:bb:6d:08:76:a9:
         b9:42:68:26:5a:11:6f:2f:e0:e6:3b:d6:7b:8b:7f:73:ad:54:
         fe:b1:98:3f:05:41:83:2b:2a:7f:f7:2a:ec:4b:61:f6:3c:1f:
         48:97:ac:ca:6b:3e:a6:43:1f:f2:d7:6c:fe:9d:e0:42:e7:24:
         bd:e5:01:3e:b9:fa:20:29:a9:2d:11:70:d7:3a:60:9b:86:5b:
         3f:0d:9f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:47:41 2026 by rpki-client