Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/6b45f2d2-77c1-3be5-91e3-d343001fa78a.roa
File:                     6b45f2d2-77c1-3be5-91e3-d343001fa78a.roa (raw, json)
Hash identifier:          VrsmcFfAVxd4zY97+EIL8/CocxNW+a2CUBcfUDEcKVI=
Subject key identifier:   1F:91:1F:18:3E:DF:DF:FF:11:AD:C6:F9:90:76:78:1D:5D:9B:32:1A
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584F4640BB651E78F7F973D1D3E0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/6b45f2d2-77c1-3be5-91e3-d343001fa78a.roa
Signing time:             Wed 23 Sep 2026 21:32:28 +0000
ROA not before:           Wed 23 Sep 2026 21:32:28 +0000
ROA not after:            Tue 22 Dec 2026 22:32:28 +0000
asID:                     22773
IP address blocks:        142.214.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:40:bb:65:1e:78:f7:f9:73:d1:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Sep 23 21:32:28 2026 GMT
            Not After : Dec 22 22:32:28 2026 GMT
        Subject: CN=c1139ec1-31f8-405e-8759-41d9b5b7c1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:b0:de:34:10:43:ba:e8:7b:c3:b2:06:b3:
                    42:79:2b:1b:93:c2:eb:56:ac:57:92:18:a4:57:2d:
                    a0:25:bb:93:d6:09:d4:8c:76:7f:01:6a:90:a3:2d:
                    14:71:65:61:94:62:78:b2:c4:1d:ae:f3:d8:8f:0d:
                    87:61:95:4e:a5:9b:99:46:9c:a3:90:cc:78:73:f5:
                    82:cb:d6:13:ca:5e:24:89:7a:78:cf:7f:67:c2:61:
                    7c:bd:3c:9f:f0:b3:2f:f1:7a:65:81:81:cb:3d:2b:
                    e3:d1:6a:0e:ec:c5:94:fe:0a:b8:2d:ae:02:ab:d0:
                    b1:86:1a:f4:fc:24:8c:7a:a8:78:c9:bc:c3:68:a1:
                    4f:b7:fd:61:5c:82:5c:35:c5:28:2b:60:00:5e:13:
                    f3:60:30:b5:bb:0d:72:e6:8b:69:25:73:49:49:6d:
                    d1:24:7d:9a:31:9d:39:f0:f1:1b:ff:ff:85:0f:67:
                    08:63:01:2b:a0:7a:52:8a:a1:48:9a:30:ac:93:c2:
                    42:a8:83:e3:85:f7:e3:5d:e7:85:25:8a:37:1e:e9:
                    2c:28:6c:a9:07:8b:8a:74:4e:eb:f4:0e:00:99:a0:
                    64:9f:08:39:89:b4:c9:32:18:6d:47:56:7a:f2:c5:
                    2b:8b:29:31:e9:7e:2e:a3:51:38:80:6c:b2:7b:79:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:91:1F:18:3E:DF:DF:FF:11:AD:C6:F9:90:76:78:1D:5D:9B:32:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/6b45f2d2-77c1-3be5-91e3-d343001fa78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ac:02:8d:cd:87:24:b3:6f:e3:55:d2:7d:68:7c:23:7d:35:
         5d:b5:0e:43:f7:89:d8:d7:8d:ee:14:3c:f2:a5:85:9b:7c:f9:
         2f:87:df:43:b8:66:74:22:08:4b:79:64:33:cd:46:55:13:ad:
         21:5b:3f:53:7f:52:0e:b3:7a:26:fd:59:31:5f:37:a3:95:9d:
         54:53:75:7d:92:25:9c:45:ac:5c:d4:45:8a:2e:8d:cd:5d:4e:
         cc:64:09:98:1d:44:b1:5c:f7:4d:b4:ee:4b:2d:36:1c:b5:77:
         75:6e:f6:8c:ef:73:1a:6c:ae:eb:c4:b7:d7:81:f9:5c:32:a8:
         2d:d3:2e:4d:45:b3:b9:ff:74:e5:10:08:e2:42:47:f1:df:0c:
         27:fb:ea:70:b6:23:8f:30:ec:95:8c:c5:99:c8:9c:79:4b:2b:
         2f:ac:c8:31:99:e4:98:60:82:bb:ea:aa:19:11:11:f7:73:82:
         ad:69:aa:2e:7a:d5:11:df:5b:c3:f9:ad:5f:56:fd:d5:85:cd:
         90:3a:13:4b:fd:12:69:24:ab:74:e9:91:60:c1:ec:bd:bb:0d:
         b8:0f:d4:09:d8:39:f8:19:33:6e:51:e8:57:e5:1a:48:3c:6e:
         aa:19:27:e1:a1:92:38:77:f6:a4:43:ce:fe:14:b9:43:a2:76:
         60:83:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:38:28 2026 by rpki-client