Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa
File:                     7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa (raw, json)
Hash identifier:          JEZgSSlpbO8+mFeeVOb6PPbUzRn7bnoDwSUHS2YVCRU=
Subject key identifier:   1E:5D:1B:1B:30:07:A6:35:CE:4C:DA:64:D3:6A:88:F3:CC:8F:D5:24
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584CCBA7633D55F98860D6E48200
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     9009
IP address blocks:        167.100.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:63:3d:55:f9:88:60:d6:e4:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=9ba77ae0-bdb1-4284-8b2e-1a5c36d125ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:d6:ca:ea:09:56:9a:9e:5a:bd:a2:f5:48:
                    aa:00:86:56:07:bf:5e:26:98:44:46:7e:4f:78:cf:
                    3c:87:d7:c6:78:d5:a6:90:3f:fd:b2:de:00:fc:05:
                    86:75:60:c2:e9:e7:03:00:1c:c6:cf:a0:8f:01:0c:
                    53:9c:13:bb:45:59:39:6f:15:ad:ed:4c:92:84:5c:
                    8c:60:b8:1a:af:46:c3:c5:94:6f:ac:fa:ba:89:d7:
                    40:ce:8e:ac:8d:a4:24:f5:0b:62:4b:b9:ff:9e:b6:
                    4e:dc:0f:ae:86:2f:41:53:b8:99:98:b2:43:08:00:
                    2b:3d:ad:e6:92:e9:d3:e2:68:a2:17:79:44:a8:86:
                    df:5c:f2:76:d7:94:f8:45:82:5f:d7:4b:56:fe:a4:
                    1f:e4:4e:b3:3e:40:0f:12:8b:2b:96:b4:f0:a6:a1:
                    c7:f2:bd:4c:cb:da:dc:93:64:d5:fd:86:13:66:63:
                    e9:2e:e9:28:cb:5d:6f:7e:fe:0a:a2:b1:bd:bf:ce:
                    33:dc:72:ba:0b:a8:ae:88:98:b2:33:06:36:80:16:
                    91:65:5e:33:5f:85:e0:eb:95:f6:b3:9d:35:ca:ec:
                    9b:bd:86:35:cc:99:3e:c7:ff:e0:ab:51:3f:39:0a:
                    1c:79:9b:7d:23:3b:ca:27:58:02:3f:61:11:89:64:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5D:1B:1B:30:07:A6:35:CE:4C:DA:64:D3:6A:88:F3:CC:8F:D5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7ad55db3-59c7-35c0-b564-e52dc4c0e1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:77:2d:44:00:bd:77:ea:81:60:0e:a2:08:ab:c1:f4:0a:e8:
         8b:0b:66:bb:ef:e1:b2:14:9a:ea:b2:f0:76:cf:49:86:c2:6e:
         6e:29:e3:3f:0a:14:7f:ee:3a:f1:c4:a4:5b:6b:8a:0d:b6:5f:
         72:d5:40:8d:b6:3e:20:15:09:dc:2f:ff:bf:76:d1:2c:75:c4:
         f1:19:b8:82:1d:a8:e8:ea:9e:f4:27:ab:3d:bf:c5:48:19:7b:
         a4:3d:0a:3e:7a:70:c8:79:86:28:3b:cb:38:62:5d:40:4e:ef:
         22:3e:5b:a5:74:d6:8f:14:42:80:fa:45:d0:7b:c9:15:a1:f9:
         32:a9:67:7b:ac:31:92:79:fe:d8:b3:b9:bc:88:67:b8:fc:d7:
         55:79:0e:39:4e:65:ac:84:b8:6e:dd:9e:25:da:c3:c6:c4:06:
         0c:a1:f7:a0:32:3e:10:de:34:50:27:63:c4:92:e1:3c:03:0c:
         c7:70:1e:4e:fc:46:55:bc:1c:37:57:d0:c2:fc:11:25:43:24:
         49:46:99:03:de:da:fc:58:9d:f2:de:b7:09:b9:89:27:fb:af:
         d3:4a:ef:41:40:47:a0:76:e6:57:b4:01:dc:32:20:5e:61:25:
         b9:71:7e:c4:f9:c3:d9:ac:ec:4c:0f:32:d6:18:3b:b5:1d:4e:
         c1:19:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:16 2026 by rpki-client