Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa
File:                     9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa (raw, json)
Hash identifier:          C4yC8T+gAiySisbqxhVGWf2EGO6CIumVPlPFIMTL9lU=
Subject key identifier:   D5:8E:4F:29:0F:AF:89:99:D8:4F:55:5E:94:BA:5E:A8:F4:CE:B4:DC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584FB93BC2F8342D83516BA46120
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa
Signing time:             Wed 04 Nov 2026 02:00:13 +0000
ROA not before:           Wed 04 Nov 2026 02:00:13 +0000
ROA not after:            Tue 02 Feb 2027 02:00:13 +0000
asID:                     13347
IP address blocks:        209.101.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b9:3b:c2:f8:34:2d:83:51:6b:a4:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Nov  4 02:00:13 2026 GMT
            Not After : Feb  2 02:00:13 2027 GMT
        Subject: CN=2e639613-59d5-4e34-8787-b40a830ee4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:24:67:c5:b7:09:31:17:a3:82:ba:06:e8:
                    ae:9f:6d:75:7e:99:d6:7c:c1:72:18:56:6d:44:5a:
                    0e:10:72:01:6c:2a:ea:83:fb:8e:e8:35:4f:a4:c5:
                    d8:56:28:fa:28:84:f6:22:3d:08:92:c3:b3:50:12:
                    b5:52:80:4a:f2:f3:09:3e:a4:50:31:25:be:2c:f0:
                    19:7c:ee:60:2b:e1:b0:04:3a:b0:fc:13:30:f2:42:
                    75:63:64:4b:00:e3:f2:29:c9:7c:f8:7d:17:8b:cb:
                    aa:c5:1e:35:4d:42:20:d1:05:67:3d:81:6b:cf:2a:
                    07:55:c0:8b:c3:21:70:77:eb:9e:5c:e6:51:0e:e7:
                    2a:c0:7f:5c:d7:a2:26:6c:da:f2:f7:bd:b9:b5:60:
                    f6:5a:91:af:be:7b:ae:22:b8:18:0d:da:3a:67:1d:
                    84:8b:2a:a4:d7:3a:ac:f5:fd:88:70:32:70:c5:91:
                    b9:1b:7a:c0:d2:85:b3:fd:ea:6f:68:f8:e3:c0:37:
                    32:cf:61:f1:bb:0a:d1:6e:98:55:0a:7b:ba:87:88:
                    76:42:a3:51:39:88:b7:f8:1e:85:c3:86:39:99:ae:
                    0f:fc:cb:2c:fc:49:e6:e7:32:44:17:97:a2:e0:57:
                    85:7b:c1:b6:25:17:d1:4e:eb:6d:9d:51:70:3f:03:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8E:4F:29:0F:AF:89:99:D8:4F:55:5E:94:BA:5E:A8:F4:CE:B4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebad1ee-3c79-335d-ab11-03af8ce15c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:bf:a0:79:99:b9:b1:6d:cf:cc:18:d7:7c:8f:58:e7:b1:e3:
         35:2c:28:fd:34:dd:e9:2b:fc:e1:09:7e:df:64:a2:03:59:ee:
         1f:14:52:92:86:33:c4:ff:da:3f:3b:ff:f5:91:22:57:19:46:
         aa:5e:9e:d0:b4:b3:16:ab:a7:26:67:61:27:c5:86:71:7e:65:
         0b:e2:b5:cd:d9:52:36:ad:4d:f5:3a:86:8b:ee:86:36:cd:b0:
         19:83:49:02:75:5b:d7:68:b1:eb:38:2b:ca:fa:dc:6c:b5:e9:
         b8:e2:fd:01:16:b5:23:3f:a4:18:47:44:4d:75:a7:fc:2e:14:
         8c:12:a9:9f:60:7f:ab:1a:39:80:31:39:12:bd:4f:02:be:31:
         08:de:f7:47:1d:be:d2:07:b3:33:ed:ed:5b:cb:6f:2d:2a:e9:
         b2:c4:25:db:86:0a:bb:ba:70:fb:2b:f0:3c:6e:75:3f:22:54:
         d4:40:1c:8c:d1:e5:09:a2:7f:b5:d1:07:be:77:71:23:59:53:
         24:30:2c:29:85:e0:0d:9e:89:3e:f4:69:8f:85:29:de:29:e0:
         01:d7:1a:c9:02:e2:9d:c7:71:26:39:79:b6:e5:d3:4f:5c:45:
         68:e5:44:16:c0:32:a9:3b:84:6a:24:da:17:5d:ed:0c:02:23:
         43:68:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:17:18 2026 by rpki-client