Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa
File:                     b8f1cd10-ce5e-3fac-9723-e3190551e274.roa (raw, json)
Hash identifier:          qYNETIEdGJRBOD9tTnw4kjpLk0EOk3EimlJX+Ui301E=
Subject key identifier:   E6:FF:88:62:B6:E4:4C:0B:FE:BE:66:B9:85:86:29:08:81:17:32:C5
Certificate issuer:       /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe
Certificate serial:       010D0C9F4328584FA85E4FC730230D4F6F1BC080
Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     14298
IP address blocks:        192.58.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:4f:c7:30:23:0d:4f:6f:1b:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=4c7724a6-0f82-448f-8a77-ca5b6398b945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:2a:6f:0b:07:63:c8:d4:68:9f:c6:6d:ac:
                    64:b7:22:ec:02:6f:84:00:2e:35:2a:7c:c1:2b:f8:
                    0a:8e:5c:fa:b6:68:d2:ed:c0:1d:52:6a:64:82:5f:
                    30:3a:c2:f4:82:c8:a4:8c:71:c0:b7:62:a9:5f:14:
                    34:67:c1:4d:18:4a:4a:86:53:f9:6a:8b:fa:84:d3:
                    1e:8c:06:f2:5f:3e:d4:47:17:fe:b0:b8:6d:cf:48:
                    19:17:40:f2:8b:d9:54:1e:56:e6:49:8b:40:9d:d8:
                    ae:3e:26:66:45:8d:df:a0:90:0d:a4:3a:f4:7a:b1:
                    e0:10:91:7a:a5:11:be:00:8b:c3:15:9d:a1:72:79:
                    6f:17:a9:b4:26:14:f0:42:22:73:6b:4b:90:19:e9:
                    9c:16:dc:cb:12:ad:3e:33:f7:bb:46:10:8f:4f:cc:
                    bb:79:01:b2:1a:11:88:38:63:db:b4:0f:7c:16:ca:
                    10:ad:b3:10:19:ff:48:3a:82:3f:71:d3:25:6f:26:
                    97:02:a6:5d:c8:ce:23:62:32:13:7f:cf:c8:55:40:
                    96:b8:25:f8:8a:f4:c0:36:b3:8f:f7:8d:c3:c5:ff:
                    6d:40:4e:28:d3:fb:b6:55:2f:06:f1:92:41:34:5b:
                    d4:17:78:df:49:6c:e2:90:ce:b5:11:85:a7:cd:06:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FF:88:62:B6:E4:4C:0B:FE:BE:66:B9:85:86:29:08:81:17:32:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl

            X509v3 Authority Key Identifier:
                keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:da:c6:97:03:5b:53:e7:cf:b1:85:95:da:88:ff:91:17:32:
         a0:ea:d5:c9:ef:e2:89:2c:00:c2:91:db:fb:46:5f:c4:3d:65:
         ef:40:f4:04:66:1d:b7:5f:fb:ec:e8:8d:e9:de:75:0a:6f:90:
         60:a7:fa:a7:6f:68:1f:59:44:03:8f:15:46:48:a0:f7:33:e6:
         6a:99:b1:e6:c0:c3:e8:04:c0:a9:1a:fd:df:4f:7f:57:41:f2:
         22:13:e3:af:cb:ea:d7:e7:b5:2e:10:9b:af:fe:9a:fa:77:ff:
         9d:3e:90:23:38:4c:8f:e1:79:e3:da:d4:ce:7d:76:40:00:1a:
         fc:e0:aa:7e:d9:1c:08:54:33:90:da:82:9c:3c:ea:fa:15:6b:
         e6:23:3d:eb:96:d7:f6:d0:81:17:01:bd:00:6f:1c:08:84:20:
         07:fd:f3:32:80:88:70:fb:bf:24:bd:41:9e:21:c5:a2:08:55:
         c2:50:a1:45:ba:6e:5d:97:69:c4:08:67:89:eb:87:36:9a:94:
         03:72:77:38:71:41:22:3e:bb:37:a8:43:97:61:93:e4:91:39:
         50:ea:96:ed:4a:d6:53:87:89:64:75:42:ab:ac:a5:f3:bd:5c:
         92:ed:85:37:94:10:8f:72:b3:fa:d2:43:c1:68:2d:99:eb:72:
         ad:94:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:28 2026 by rpki-client