Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ebae3d33-a387-32ed-8b3f-dd4f0c8738d5.roa
File:                     ebae3d33-a387-32ed-8b3f-dd4f0c8738d5.roa (raw, json)
Hash identifier:          g0qNui4z+xfxe7aqrRkeSRInBfOIJx32paxtUtucjAE=
Subject key identifier:   33:C7:55:B4:83:A7:A4:BE:FD:19:75:10:12:31:D5:EC:88:8D:93:68
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584F0E3821AB240836CBDB5E7100
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ebae3d33-a387-32ed-8b3f-dd4f0c8738d5.roa
Signing time:             Thu 03 Sep 2026 19:49:52 +0000
ROA not before:           Thu 03 Sep 2026 19:49:52 +0000
ROA not after:            Wed 02 Dec 2026 20:49:52 +0000
asID:                     14618
IP address blocks:        162.10.14.0/24 maxlen: 24
                          162.10.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:38:21:ab:24:08:36:cb:db:5e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Sep  3 19:49:52 2026 GMT
            Not After : Dec  2 20:49:52 2026 GMT
        Subject: CN=6349f3dc-1032-45e9-9dff-2909401742b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:3e:fb:71:11:22:59:dd:35:ae:0c:41:6a:
                    7b:59:1e:42:5b:87:72:6f:b7:ef:08:af:58:fd:44:
                    f8:12:0b:a7:27:cd:a1:fc:5d:14:e4:22:08:d3:f5:
                    13:6d:fa:f9:70:cd:4f:ed:a2:0a:e6:94:87:8c:e0:
                    b1:8c:ed:b4:3b:62:6a:b2:b2:7c:82:57:ae:9b:73:
                    e5:4d:9c:60:20:5a:24:a9:92:c3:8f:57:3a:d4:68:
                    12:7c:7d:fc:16:3a:eb:37:b7:c6:09:45:b5:14:1f:
                    ef:b8:25:55:d2:a6:63:5e:6c:a3:9d:fd:b0:b8:16:
                    07:11:28:72:ce:77:c6:15:11:7c:70:cf:9b:39:9d:
                    a6:d2:33:42:95:f8:9a:53:ef:fc:b8:99:e5:e6:b8:
                    d9:83:3b:2b:2e:10:e1:b7:fb:97:a5:04:3f:76:83:
                    6e:f7:b3:8e:26:0d:b2:36:80:95:24:69:99:57:42:
                    2a:5a:e4:f1:40:82:35:9c:89:03:65:f0:50:6b:6a:
                    3e:4e:6d:42:cb:5c:ca:f8:fe:0c:4c:f2:96:d1:10:
                    87:71:2d:20:69:86:20:a3:51:23:6d:7b:87:d8:1b:
                    8b:36:1b:3c:94:ba:53:a1:f3:93:29:41:38:54:ae:
                    f4:a4:00:93:a9:b4:a2:80:07:3e:e2:27:30:90:d8:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:55:B4:83:A7:A4:BE:FD:19:75:10:12:31:D5:EC:88:8D:93:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ebae3d33-a387-32ed-8b3f-dd4f0c8738d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.10.14.0/24
                  162.10.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:b1:dc:54:23:7c:b5:a1:64:cf:f3:d3:09:90:4a:0b:e9:
         6f:ec:09:33:89:1b:3e:47:5e:4a:1a:87:30:33:62:f9:a8:48:
         44:c9:1e:0f:d7:99:4a:de:61:1a:89:70:e9:3a:5c:ca:97:f9:
         58:44:c7:62:4a:45:44:75:3b:c4:53:0c:c1:de:4d:4c:1b:37:
         27:d1:9f:28:e9:b0:28:42:dc:48:a9:b3:c9:39:41:32:35:f0:
         f3:fd:23:77:af:da:9a:41:20:c9:2a:dc:cb:a1:10:c9:63:2f:
         4d:1e:a1:68:7a:d2:8f:53:aa:65:a4:14:e3:18:6b:5a:69:dd:
         af:ab:e5:44:09:7c:2a:3e:be:4d:20:4d:70:a6:e7:be:9e:e2:
         e9:8f:08:c3:cf:80:8f:c1:cf:32:3c:2b:49:ca:5a:5f:26:b9:
         da:21:59:98:ab:49:5e:9c:2c:24:67:64:21:4c:b2:17:04:48:
         93:cc:f0:43:f2:bf:86:48:e3:98:b8:0f:23:68:80:35:16:68:
         33:9c:d2:81:9e:64:cf:46:53:bb:df:98:d2:cb:ea:c4:ce:de:
         aa:63:9e:67:6a:d6:0b:f0:7c:16:0b:c5:94:57:18:82:dc:15:
         c7:93:b2:66:da:89:74:6b:87:30:e1:5b:0c:fc:82:54:89:5f:
         4a:39:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:47:07 2026 by rpki-client