Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f221585-270f-3822-8794-f787c33c078f.roa
File:                     2f221585-270f-3822-8794-f787c33c078f.roa (raw, json)
Hash identifier:          R0og0rXqkA1mBwbO6WkXGStCCpbb68X04noIyuShFxA=
Subject key identifier:   75:5C:E3:7E:C5:0E:18:9C:65:B8:3D:09:71:A0:99:02:CD:E8:C8:EA
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584F3E47DC2B1DA1B5A1A7D133C0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f221585-270f-3822-8794-f787c33c078f.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     31898
IP address blocks:        209.178.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:dc:2b:1d:a1:b5:a1:a7:d1:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=8630e0a1-3bf3-4e28-a9fa-1eda7bca2d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:32:1c:50:30:cc:38:bc:09:ef:85:3b:78:
                    14:c9:7c:72:2f:f8:6a:82:65:a6:bd:be:88:fe:08:
                    68:56:ff:ea:fe:2f:b1:c7:29:0a:bd:17:0d:ff:18:
                    cb:9f:bc:66:b3:d6:84:df:8d:6d:67:10:2e:1f:9d:
                    11:e5:b2:53:39:61:cc:a4:28:4d:b5:e4:d3:14:fb:
                    17:ba:52:30:e2:15:8b:65:53:3a:f6:4f:28:8e:3c:
                    d1:d3:fd:7d:32:ad:1d:5d:e8:41:fa:9f:92:8c:ee:
                    6b:9c:8c:37:35:32:59:3f:16:64:9c:a4:3b:67:bc:
                    fb:7a:9a:36:20:1a:0e:22:e1:95:1e:14:f6:09:bd:
                    be:00:d1:92:4c:04:a5:03:68:2d:df:72:55:90:cc:
                    5f:15:9f:5f:0e:22:7c:24:fe:6b:ff:5d:aa:97:f1:
                    5e:15:e9:1f:b6:be:9a:6b:ea:89:c8:0d:fd:b8:1a:
                    c7:57:bd:31:8e:3c:16:ad:3b:9e:2d:0c:15:6e:62:
                    56:43:a8:f1:7d:70:54:cc:80:20:a7:bb:ca:da:df:
                    7e:10:e7:e3:c0:61:1b:81:e2:92:52:e0:9b:15:de:
                    7a:76:a0:b4:81:48:04:8d:c4:16:25:4a:b4:ee:7a:
                    9b:40:c4:1d:1d:33:72:84:e2:57:65:ea:05:e5:ee:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5C:E3:7E:C5:0E:18:9C:65:B8:3D:09:71:A0:99:02:CD:E8:C8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f221585-270f-3822-8794-f787c33c078f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:40:d1:4a:3c:59:d4:71:1a:05:1e:4b:5c:6e:dd:cb:6a:
         4e:8c:01:8f:e8:30:43:97:a4:aa:f0:2d:a1:68:b6:c5:dc:22:
         e3:72:40:2b:8b:df:a8:14:c5:39:45:72:db:98:7b:8b:20:7d:
         03:18:ac:2d:27:e5:e5:14:24:ee:ba:12:ed:0b:38:c2:a2:07:
         3b:d1:87:6d:9b:b3:2e:4e:ff:c5:b3:71:09:5d:da:2f:dc:17:
         12:a9:9e:bd:9b:e6:c7:ef:5f:4d:bf:04:a9:f1:92:1d:64:21:
         9e:e7:a3:7f:a5:e0:f7:50:de:68:5f:ef:1c:c5:47:94:91:10:
         e2:8d:20:d8:81:49:62:96:f7:a6:2d:d2:cc:18:33:9d:da:f4:
         d5:93:2c:85:2a:f4:7f:55:f5:d9:2e:17:a2:4e:15:e5:6d:ae:
         d2:ef:79:a2:01:ed:6c:d5:3b:97:a6:a3:30:93:6c:8c:d4:ff:
         01:67:33:91:18:54:e6:38:7a:f6:2c:a6:a0:08:b9:96:13:7b:
         fd:d9:0c:11:f9:2c:b4:2b:f3:b0:65:70:e0:41:d3:b9:a7:aa:
         62:1f:79:7a:b9:62:2a:ce:c9:85:87:66:fd:da:00:51:19:40:
         96:32:bd:5b:b0:69:a0:db:4e:b1:8d:46:20:c5:93:7d:26:a9:
         d3:dc:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:59:28 2026 by rpki-client